1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131
|
// Copyright 2018 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/policy/browser_dm_token_storage_win.h"
#include <tuple>
#include "base/strings/utf_string_conversions.h"
#include "base/test/test_reg_util_win.h"
#include "base/win/registry.h"
#include "chrome/installer/util/install_util.h"
#include "content/public/test/browser_task_environment.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"
using ::testing::IsEmpty;
namespace policy {
namespace {
constexpr wchar_t kClientId1[] = L"fake-client-id-1";
constexpr wchar_t kEnrollmentToken1[] = L"fake-enrollment-token-1";
constexpr wchar_t kEnrollmentToken2[] = L"fake-enrollment-token-2";
constexpr char kDMToken1[] = "fake-dm-token-1";
constexpr char kDMToken2[] = "fake-dm-token-2";
} // namespace
class BrowserDMTokenStorageWinTest : public testing::Test {
protected:
BrowserDMTokenStorageWinTest() = default;
~BrowserDMTokenStorageWinTest() override = default;
void SetUp() override {
ASSERT_NO_FATAL_FAILURE(
registry_override_manager_.OverrideRegistry(HKEY_LOCAL_MACHINE));
}
bool SetMachineGuid(const wchar_t* machine_guid) {
base::win::RegKey key;
return (key.Create(HKEY_LOCAL_MACHINE, L"software\\microsoft\\cryptography",
KEY_SET_VALUE) == ERROR_SUCCESS) &&
(key.WriteValue(L"MachineGuid", machine_guid) == ERROR_SUCCESS);
}
// Sets the preferred policy (in ...\CloudManagement).
bool SetPreferredEnrollmentTokenPolicy(const wchar_t* enrollment_token) {
auto paths = InstallUtil::GetCloudManagementEnrollmentTokenRegistryPaths();
const auto& key_and_value = paths.front();
base::win::RegKey key;
return key.Create(HKEY_LOCAL_MACHINE, key_and_value.first.c_str(),
KEY_SET_VALUE) == ERROR_SUCCESS &&
key.WriteValue(key_and_value.second.c_str(), enrollment_token) ==
ERROR_SUCCESS;
}
// Sets the Chrome policy (in ...\Chrome).
bool SetSecondaryEnrollmentTokenPolicy(const wchar_t* enrollment_token) {
auto paths = InstallUtil::GetCloudManagementEnrollmentTokenRegistryPaths();
EXPECT_GE(paths.size(), size_t{2});
const auto& key_and_value = paths[1];
base::win::RegKey key;
return key.Create(HKEY_LOCAL_MACHINE, key_and_value.first.c_str(),
KEY_SET_VALUE) == ERROR_SUCCESS &&
key.WriteValue(key_and_value.second.c_str(), enrollment_token) ==
ERROR_SUCCESS;
}
// Sets a DM token in either the app-neutral or browser-specific location in
// the registry.
bool SetDMToken(const std::string& dm_token,
InstallUtil::BrowserLocation browser_location) {
base::win::RegKey key;
std::wstring dm_token_value_name;
std::tie(key, dm_token_value_name) =
InstallUtil::GetCloudManagementDmTokenLocation(
InstallUtil::ReadOnly(false), browser_location);
return key.Valid() &&
key.WriteValue(dm_token_value_name.c_str(), dm_token.c_str(),
dm_token.size(), REG_BINARY) == ERROR_SUCCESS;
}
content::BrowserTaskEnvironment task_environment_;
registry_util::RegistryOverrideManager registry_override_manager_;
};
TEST_F(BrowserDMTokenStorageWinTest, InitClientId) {
ASSERT_TRUE(SetMachineGuid(kClientId1));
BrowserDMTokenStorageWin storage;
EXPECT_EQ(base::WideToUTF8(kClientId1), storage.InitClientId());
}
TEST_F(BrowserDMTokenStorageWinTest, InitEnrollmentTokenFromPreferred) {
ASSERT_TRUE(SetMachineGuid(kClientId1));
ASSERT_TRUE(SetPreferredEnrollmentTokenPolicy(kEnrollmentToken1));
ASSERT_TRUE(SetSecondaryEnrollmentTokenPolicy(kEnrollmentToken2));
BrowserDMTokenStorageWin storage;
EXPECT_EQ(base::WideToUTF8(kEnrollmentToken1), storage.InitEnrollmentToken());
}
TEST_F(BrowserDMTokenStorageWinTest, InitEnrollmentTokenFromSecondary) {
ASSERT_TRUE(SetMachineGuid(kClientId1));
ASSERT_TRUE(SetSecondaryEnrollmentTokenPolicy(kEnrollmentToken2));
BrowserDMTokenStorageWin storage;
EXPECT_EQ(base::WideToUTF8(kEnrollmentToken2), storage.InitEnrollmentToken());
}
TEST_F(BrowserDMTokenStorageWinTest, InitDMToken) {
ASSERT_TRUE(SetMachineGuid(kClientId1));
// The app-neutral location should be preferred.
ASSERT_TRUE(SetDMToken(kDMToken1, InstallUtil::BrowserLocation(false)));
ASSERT_TRUE(SetDMToken(kDMToken2, InstallUtil::BrowserLocation(true)));
BrowserDMTokenStorageWin storage;
EXPECT_EQ(std::string(kDMToken1), storage.InitDMToken());
}
TEST_F(BrowserDMTokenStorageWinTest, InitDMTokenFromBrowserLocation) {
ASSERT_TRUE(SetMachineGuid(kClientId1));
// If there's no app-neutral token, the browser-specific one should be used.
ASSERT_TRUE(SetDMToken(kDMToken2, InstallUtil::BrowserLocation(true)));
BrowserDMTokenStorageWin storage;
EXPECT_EQ(std::string(kDMToken2), storage.InitDMToken());
}
} // namespace policy
|