android_webview/browser/aw_cookie_access_policy.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef ANDROID_WEBVIEW_BROWSER_AW_COOKIE_ACCESS_POLICY_H_
   6 #define ANDROID_WEBVIEW_BROWSER_AW_COOKIE_ACCESS_POLICY_H_
   7
   8 #include "base/basictypes.h"
   9 #include "base/lazy_instance.h"
  10 #include "base/synchronization/lock.h"
  11 #include "net/base/static_cookie_policy.h"
  12 #include "net/cookies/canonical_cookie.h"
  13 #include "net/url_request/url_request.h"
  14
  15 namespace content {
  16 class ResourceContext;
  17 }
  18
  19 namespace net {
  20 class CookieOptions;
  21 }
  22
  23 class GURL;
  24
  25 namespace android_webview {
  26
  27 // Manages the cookie access (both setting and getting) policy for WebView.
  28 // Currently we don't distinguish between sources (i.e. network vs. JavaScript)
  29 // or between reading vs. writing cookies.
  30 class AwCookieAccessPolicy {
  31  public:
  32   static AwCookieAccessPolicy* GetInstance();
  33
  34   // Can we read/write any cookies?
  35   bool GetShouldAcceptCookies();
  36   void SetShouldAcceptCookies(bool allow);
  37
  38   // Can we read/write third party cookies?
  39   bool GetShouldAcceptThirdPartyCookies(int render_process_id,
  40                                         int render_frame_id);
  41   bool GetShouldAcceptThirdPartyCookies(const net::URLRequest& request);
  42
  43   // These are the functions called when operating over cookies from the
  44   // network. See NetworkDelegate for further descriptions.
  45   bool OnCanGetCookies(const net::URLRequest& request,
  46                        const net::CookieList& cookie_list);
  47   bool OnCanSetCookie(const net::URLRequest& request,
  48                       const std::string& cookie_line,
  49                       net::CookieOptions* options);
  50
  51   // These are the functions called when operating over cookies from the
  52   // renderer. See ContentBrowserClient for further descriptions.
  53   bool AllowGetCookie(const GURL& url,
  54                       const GURL& first_party,
  55                       const net::CookieList& cookie_list,
  56                       content::ResourceContext* context,
  57                       int render_process_id,
  58                       int render_frame_id);
  59   bool AllowSetCookie(const GURL& url,
  60                       const GURL& first_party,
  61                       const std::string& cookie_line,
  62                       content::ResourceContext* context,
  63                       int render_process_id,
  64                       int render_frame_id,
  65                       net::CookieOptions* options);
  66
  67  private:
  68   friend struct base::DefaultLazyInstanceTraits<AwCookieAccessPolicy>;
  69
  70   AwCookieAccessPolicy();
  71   ~AwCookieAccessPolicy();
  72   bool accept_cookies_;
  73   base::Lock lock_;
  74
  75   DISALLOW_COPY_AND_ASSIGN(AwCookieAccessPolicy);
  76 };
  77
  78 class AwStaticCookiePolicy {
  79  public:
  80   AwStaticCookiePolicy(bool allow_global_access,
  81                        bool allow_third_party_access);
  82
  83   bool accept_cookies() const {
  84     return accept_cookies_;
  85   }
  86
  87   bool accept_third_party_cookies() const {
  88     return accept_third_party_cookies_;
  89   }
  90
  91   bool AllowGet(const GURL& url, const GURL& first_party) const;
  92   bool AllowSet(const GURL& url, const GURL& first_party) const;
  93
  94  private:
  95   const bool accept_cookies_;
  96   const bool accept_third_party_cookies_;
  97
  98   // We have two bits of state but only three different cases:
  99   // If !ShouldAcceptCookies
 100   //    then reject all cookies.
 101   // If ShouldAcceptCookies and !ShouldAcceptThirdPartyCookies
 102   //    then reject third party.
 103   // If ShouldAcceptCookies and ShouldAcceptThirdPartyCookies
 104   //    then allow all cookies.
 105   net::StaticCookiePolicy::Type GetPolicy(const GURL& url) const;
 106
 107   DISALLOW_COPY_AND_ASSIGN(AwStaticCookiePolicy);
 108 };
 109
 110 }  // namespace android_webview
 111
 112 #endif  // ANDROID_WEBVIEW_BROWSER_AW_COOKIE_ACCESS_POLICY_H_