1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef NET_DEVICE_BOUND_SESSIONS_REGISTRATION_FETCHER_H_
#define NET_DEVICE_BOUND_SESSIONS_REGISTRATION_FETCHER_H_
#include <optional>
#include <string>
#include "base/functional/callback_forward.h"
#include "base/types/expected.h"
#include "components/unexportable_keys/unexportable_key_service.h"
#include "net/base/isolation_info.h"
#include "net/base/net_errors.h"
#include "net/base/net_export.h"
#include "net/device_bound_sessions/registration_fetcher_param.h"
#include "net/device_bound_sessions/session_error.h"
#include "net/device_bound_sessions/session_params.h"
#include "net/http/http_response_headers.h"
#include "net/log/net_log_source.h"
#include "url/gurl.h"
namespace net {
class URLRequestContext;
}
namespace unexportable_keys {
class UnexportableKeyService;
}
namespace net::device_bound_sessions {
class RegistrationRequestParam;
// This class creates a new unexportable key, creates a registration JWT and
// signs it with the new key, and makes the network request to the DBSC
// registration endpoint with this signed JWT to get the registration
// instructions. It is also used for calling the refresh endpoint.
class NET_EXPORT RegistrationFetcher {
public:
using RegistrationCompleteCallback =
base::OnceCallback<void(base::expected<SessionParams, SessionError>)>;
using FetcherType =
base::RepeatingCallback<base::expected<SessionParams, SessionError>()>;
// TODO(kristianm): Add more parameters when the returned JSON is parsed.
struct NET_EXPORT RegistrationTokenResult {
std::string registration_token;
unexportable_keys::UnexportableKeyId key_id;
};
// Creates an unexportable key from the key service, creates a registration
// JWT and signs it with the new key. Starts the network request to the DBSC
// registration endpoint with the signed JWT in the header. `callback`
// is called with the fetch results upon completion.
// This can fail during key creation, signing and during the network request,
// and if so it the callback with be called with a std::nullopt.
static void StartCreateTokenAndFetch(
RegistrationFetcherParam registration_params,
unexportable_keys::UnexportableKeyService& key_service,
const URLRequestContext* context,
const IsolationInfo& isolation_info,
std::optional<NetLogSource> net_log_source,
const std::optional<url::Origin>& original_request_initiator,
RegistrationCompleteCallback callback);
// Starts the network request to the DBSC refresh endpoint with existing key
// id. `callback` is called with the fetch results upon completion. This can
// fail during signing and during the network request, and if so the callback
// will be called with a std::nullopt.
static void StartFetchWithExistingKey(
RegistrationRequestParam request_params,
unexportable_keys::UnexportableKeyService& key_service,
const URLRequestContext* context,
const IsolationInfo& isolation_info,
std::optional<net::NetLogSource> net_log_source,
const std::optional<url::Origin>& original_request_initiator,
RegistrationCompleteCallback callback,
unexportable_keys::ServiceErrorOr<unexportable_keys::UnexportableKeyId>
key_id);
// Helper function for generating a new binding key and a registration token
// to bind the key on the server. unexportable_key_service must outlive the
// callback result
static void CreateTokenAsyncForTesting(
unexportable_keys::UnexportableKeyService& unexportable_key_service,
std::string challenge,
const GURL& registration_url,
std::optional<std::string> authorization,
std::optional<std::string> session_identifier,
base::OnceCallback<
void(std::optional<RegistrationFetcher::RegistrationTokenResult>)>
callback);
static void SetFetcherForTesting(FetcherType* fetcher);
};
} // namespace net::device_bound_sessions
#endif // NET_DEVICE_BOUND_SESSIONS_REGISTRATION_FETCHER_H_
|
