1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "chrome/browser/chromeos/policy/policy_oauth2_token_fetcher.h"
10 #include "base/logging.h"
11 #include "base/strings/string_util.h"
12 #include "content/public/browser/browser_thread.h"
13 #include "google_apis/gaia/gaia_auth_fetcher.h"
14 #include "google_apis/gaia/gaia_constants.h"
15 #include "google_apis/gaia/gaia_urls.h"
16 #include "google_apis/gaia/google_service_auth_error.h"
17 #include "google_apis/gaia/oauth2_access_token_fetcher.h"
18 #include "net/url_request/url_request_context_getter.h"
20 using content::BrowserThread
;
26 // Max retry count for token fetching requests.
27 const int kMaxRequestAttemptCount
= 5;
29 // OAuth token request retry delay in milliseconds.
30 const int kRequestRestartDelay
= 3000;
34 PolicyOAuth2TokenFetcher::PolicyOAuth2TokenFetcher(
35 net::URLRequestContextGetter
* auth_context_getter
,
36 net::URLRequestContextGetter
* system_context_getter
,
37 const TokenCallback
& callback
)
38 : auth_context_getter_(auth_context_getter
),
39 system_context_getter_(system_context_getter
),
42 callback_(callback
) {}
44 PolicyOAuth2TokenFetcher::~PolicyOAuth2TokenFetcher() {}
46 void PolicyOAuth2TokenFetcher::Start() {
48 StartFetchingRefreshToken();
51 void PolicyOAuth2TokenFetcher::StartFetchingRefreshToken() {
52 refresh_token_fetcher_
.reset(new GaiaAuthFetcher(
53 this, GaiaConstants::kChromeSource
, auth_context_getter_
.get()));
54 refresh_token_fetcher_
->StartCookieForOAuthLoginTokenExchange(std::string());
57 void PolicyOAuth2TokenFetcher::StartFetchingAccessToken() {
58 std::vector
<std::string
> scopes
;
59 scopes
.push_back(GaiaConstants::kDeviceManagementServiceOAuth
);
60 access_token_fetcher_
.reset(
61 new OAuth2AccessTokenFetcher(this, system_context_getter_
.get()));
62 access_token_fetcher_
->Start(
63 GaiaUrls::GetInstance()->oauth2_chrome_client_id(),
64 GaiaUrls::GetInstance()->oauth2_chrome_client_secret(),
65 oauth2_refresh_token_
,
69 void PolicyOAuth2TokenFetcher::OnClientOAuthSuccess(
70 const GaiaAuthConsumer::ClientOAuthResult
& oauth2_tokens
) {
71 VLOG(1) << "OAuth2 tokens for policy fetching succeeded.";
72 oauth2_tokens_
= oauth2_tokens
;
73 oauth2_refresh_token_
= oauth2_tokens
.refresh_token
;
75 StartFetchingAccessToken();
78 void PolicyOAuth2TokenFetcher::OnClientOAuthFailure(
79 const GoogleServiceAuthError
& error
) {
80 VLOG(1) << "OAuth2 tokens fetch for policy fetch failed!";
82 base::Bind(&PolicyOAuth2TokenFetcher::StartFetchingRefreshToken
,
86 void PolicyOAuth2TokenFetcher::OnGetTokenSuccess(
87 const std::string
& access_token
,
88 const base::Time
& expiration_time
) {
89 VLOG(1) << "OAuth2 access token (device management) fetching succeeded.";
90 oauth2_access_token_
= access_token
;
91 ForwardPolicyToken(access_token
,
92 GoogleServiceAuthError(GoogleServiceAuthError::NONE
));
95 void PolicyOAuth2TokenFetcher::OnGetTokenFailure(
96 const GoogleServiceAuthError
& error
) {
97 LOG(ERROR
) << "OAuth2 access token (device management) fetching failed!";
99 base::Bind(&PolicyOAuth2TokenFetcher::StartFetchingAccessToken
,
103 void PolicyOAuth2TokenFetcher::RetryOnError(const GoogleServiceAuthError
& error
,
104 const base::Closure
& task
) {
105 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI
));
106 if ((error
.state() == GoogleServiceAuthError::CONNECTION_FAILED
||
107 error
.state() == GoogleServiceAuthError::SERVICE_UNAVAILABLE
||
108 error
.state() == GoogleServiceAuthError::REQUEST_CANCELED
) &&
109 retry_count_
< kMaxRequestAttemptCount
) {
111 BrowserThread::PostDelayedTask(
112 BrowserThread::UI
, FROM_HERE
, task
,
113 base::TimeDelta::FromMilliseconds(kRequestRestartDelay
));
116 LOG(ERROR
) << "Unrecoverable error or retry count max reached.";
118 // Invoking the |callback_| signals to the owner of this object that it has
119 // completed, and the owner may delete this object on the callback method.
120 // So don't rely on |this| still being valid after ForwardPolicyToken()
121 // returns i.e. don't write to |failed_| or other fields.
122 ForwardPolicyToken(std::string(), error
);
125 void PolicyOAuth2TokenFetcher::ForwardPolicyToken(
126 const std::string
& token
,
127 const GoogleServiceAuthError
& error
) {
128 if (!callback_
.is_null())
129 callback_
.Run(token
, error
);
132 } // namespace policy