1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/enterprise/platform_auth/platform_auth_policy_observer.h"
#include <stdint.h>
#include "base/functional/bind.h"
#include "base/functional/callback.h"
#include "base/logging.h"
#include "chrome/browser/enterprise/platform_auth/platform_auth_provider_manager.h"
#include "chrome/common/pref_names.h"
#include "components/prefs/pref_change_registrar.h"
#include "components/prefs/pref_registry_simple.h"
#include "components/prefs/pref_service.h"
#if BUILDFLAG(IS_MAC)
#include "base/feature_list.h"
#include "chrome/browser/enterprise/browser_management/management_service_factory.h"
#include "chrome/browser/enterprise/platform_auth/extensible_enterprise_sso_provider_mac.h"
#include "chrome/browser/enterprise/platform_auth/platform_auth_features.h"
#include "components/policy/core/common/management/management_service.h"
#endif // BUILFLAG(IS_MAC)
PlatformAuthPolicyObserver::PlatformAuthPolicyObserver(
PrefService* local_state) {
pref_change_registrar_.Init(local_state);
pref_change_registrar_.Add(
GetPrefName(),
base::BindRepeating(&PlatformAuthPolicyObserver::OnPrefChanged,
base::Unretained(this)));
// Initialize `PlatformAuthProviderManager` using the current policy value.
OnPrefChanged();
}
// static
void PlatformAuthPolicyObserver::RegisterPrefs(
PrefRegistrySimple* pref_registry) {
#if BUILDFLAG(IS_WIN)
pref_registry->RegisterIntegerPref(GetPrefName(), 0);
#elif BUILDFLAG(IS_MAC)
pref_registry->RegisterIntegerPref(GetPrefName(), 1);
pref_registry->RegisterListPref(
prefs::kExtensibleEnterpriseSSOEnabledIdps,
enterprise_auth::ExtensibleEnterpriseSSOProvider::
GetSupportedIdentityProvidersList());
#else
#error Unsupported platform
#endif
}
// static
const char* PlatformAuthPolicyObserver::GetPrefName() {
#if BUILDFLAG(IS_WIN)
return prefs::kCloudApAuthEnabled;
#elif BUILDFLAG(IS_MAC)
return prefs::kExtensibleEnterpriseSSOEnabled;
#else
#error Unsupported platform
#endif
}
void PlatformAuthPolicyObserver::OnPrefChanged() {
// 0 == Disabled
// 1 == Enabled
const bool enabled =
#if BUILDFLAG(IS_MAC)
base::FeatureList::IsEnabled(
enterprise_auth::kEnableExtensibleEnterpriseSSO) &&
policy::ManagementServiceFactory::GetForPlatform()->IsManaged() &&
#endif
pref_change_registrar_.prefs()->GetInteger(GetPrefName()) != 0;
VLOG(1) << "PlatformAuthProviderManager enabled: " << enabled;
enterprise_auth::PlatformAuthProviderManager::GetInstance().SetEnabled(
enabled, base::OnceClosure());
}
|
