File: dm_auth.h

package info (click to toggle)
chromium 139.0.7258.127-1
  • links: PTS, VCS
  • area: main
  • in suites:
  • size: 6,122,068 kB
  • sloc: cpp: 35,100,771; ansic: 7,163,530; javascript: 4,103,002; python: 1,436,920; asm: 946,517; xml: 746,709; pascal: 187,653; perl: 88,691; sh: 88,436; objc: 79,953; sql: 51,488; cs: 44,583; fortran: 24,137; makefile: 22,147; tcl: 15,277; php: 13,980; yacc: 8,984; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (99 lines) | stat: -rw-r--r-- 3,150 bytes parent folder | download | duplicates (5)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
// Copyright 2018 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef COMPONENTS_POLICY_CORE_COMMON_CLOUD_DM_AUTH_H_
#define COMPONENTS_POLICY_CORE_COMMON_CLOUD_DM_AUTH_H_

#include <memory>
#include <string>

#include "base/check_op.h"
#include "components/policy/policy_export.h"

namespace policy {

// The enum type for the token used for authentication. Explicit values are
// set to allow easy identification of value from the logs.
enum class DMAuthTokenType {
  kNoAuth = 0,
  // Skipping obsolete kGaia = 1
  kDm = 2,
  kEnrollment = 3,
  kOauth = 4,
  kOidc = 5,
};

// Class that encapsulates different authentication methods to interact with
// device management service.
// We currently have 3 methods for authentication:
// * OAuth token, that is passed as a part of URL
// * Enrollment token, provided by installation configuration, passed as
//       Authorization: GoogleEnrollmentToken header
// * DMToken, created during Register request, passed as
//     Authorization: GoogleDMToken header
// Also, several requests require no authentication (e.g. enterprise_check) or
// embed some authentication in the payload (e.g. certificate_based_register).
class POLICY_EXPORT DMAuth {
 public:
  // Static methods for creating DMAuth instances:
  static DMAuth FromDMToken(const std::string& dm_token);
  static DMAuth FromOAuthToken(const std::string& oauth_token);
  static DMAuth FromEnrollmentToken(const std::string& token);
  static DMAuth FromOidcResponse(const std::string& oidc_id_token);
  static DMAuth NoAuth();

  DMAuth();
  ~DMAuth();

  DMAuth(const DMAuth& other) = delete;
  DMAuth& operator=(const DMAuth& other) = delete;

  DMAuth(DMAuth&& other);
  DMAuth& operator=(DMAuth&& other);

  friend bool operator==(const DMAuth&, const DMAuth&) = default;

  // Creates a copy of DMAuth.
  DMAuth Clone() const;

  // Checks if no authentication is provided.
  bool empty() const { return token_type_ == DMAuthTokenType::kNoAuth; }

  std::string dm_token() const {
    DCHECK_EQ(DMAuthTokenType::kDm, token_type_);
    return token_;
  }
  bool has_dm_token() const { return token_type_ == DMAuthTokenType::kDm; }
  std::string enrollment_token() const {
    DCHECK_EQ(DMAuthTokenType::kEnrollment, token_type_);
    return token_;
  }
  bool has_enrollment_token() const {
    return token_type_ == DMAuthTokenType::kEnrollment;
  }
  std::string oauth_token() const {
    DCHECK(token_type_ == DMAuthTokenType::kOauth);
    return token_;
  }
  bool has_oauth_token() const {
    return token_type_ == DMAuthTokenType::kOauth;
  }
  std::string oidc_id_token() const {
    DCHECK_EQ(DMAuthTokenType::kOidc, token_type_);
    return token_;
  }
  bool has_oidc_id_token() const {
    return token_type_ == DMAuthTokenType::kOidc;
  }
  DMAuthTokenType token_type() const { return token_type_; }

 private:
  DMAuth(const std::string& token, DMAuthTokenType token_type);

  std::string token_;
  DMAuthTokenType token_type_ = DMAuthTokenType::kNoAuth;
};

}  // namespace policy

#endif  // COMPONENTS_POLICY_CORE_COMMON_CLOUD_DM_AUTH_H_