text: // Copyright 2015 The Chromium Authors. All rights reserved.
  // Use of this source code is governed by a BSD-style license that can be
  // found in the LICENSE file.
  
  #ifndef NET_ANDROID_HTTP_AUTH_NEGOTIATE_ANDROID_H_
  #define NET_ANDROID_HTTP_AUTH_NEGOTIATE_ANDROID_H_
  
  #include <jni.h>
  
  #include <memory>
  #include <string>
  
  #include "base/android/jni_android.h"
  #include "base/callback.h"
  #include "base/macros.h"
  #include "base/memory/ref_counted.h"
  #include "net/base/completion_once_callback.h"
  #include "net/base/net_export.h"
  #include "net/http/http_auth.h"
  #include "net/http/http_auth_mechanism.h"
  
  namespace base {
  class TaskRunner;
  }
  
  namespace net {
  
  class HttpAuthChallengeTokenizer;
  class HttpAuthPreferences;
  
  namespace android {
  
  // This class provides a threadsafe wrapper for SetResult, which is called from
  // Java. A new instance of this class is needed for each call, and the instance
  // destroys itself when the callback is received. It is written to allow
  // setResult to be called on any thread, but in practice they will be called
  // on the application's main thread.
  //
  // We cannot use a Callback object here, because there is no way of invoking the
  // Run method from Java.
  class NET_EXPORT_PRIVATE JavaNegotiateResultWrapper {
   public:
    scoped_refptr<base::TaskRunner> callback_task_runner_;
    base::OnceCallback<void(int, const std::string&)> thread_safe_callback_;
  
    JavaNegotiateResultWrapper(
        const scoped_refptr<base::TaskRunner>& callback_task_runner,
        base::OnceCallback<void(int, const std::string&)> thread_safe_callback);
  
    void SetResult(JNIEnv* env,
                   const base::android::JavaParamRef<jobject>& obj,
                   int result,
                   const base::android::JavaParamRef<jstring>& token);
  
   private:
    // Class is only allowed to delete itself, nobody else is allowed to delete.
    ~JavaNegotiateResultWrapper();
  };
  
  // Class providing Negotiate (SPNEGO/Kerberos) authentication support on
  // Android. The actual authentication is done through an Android authenticator
  // provided by third parties who want Kerberos support. This class simply
  // provides a bridge to the Java code, and hence to the service. See
  // https://drive.google.com/open?id=1G7WAaYEKMzj16PTHT_cIYuKXJG6bBcrQ7QQBQ6ihOcQ&authuser=1
  // for the full details.
  class NET_EXPORT_PRIVATE HttpAuthNegotiateAndroid : public HttpAuthMechanism {
   public:
    // Creates an object for one negotiation session. |prefs| are the
    // authentication preferences. In particular they include the Android account
    // type, which is used to connect to the correct Android Authenticator.
    explicit HttpAuthNegotiateAndroid(const HttpAuthPreferences* prefs);
    ~HttpAuthNegotiateAndroid() override;
  
    // HttpAuthMechanism implementation:
    bool Init(const NetLogWithSource& net_log) override;
    bool NeedsIdentity() const override;
    bool AllowsExplicitCredentials() const override;
    HttpAuth::AuthorizationResult ParseChallenge(
        HttpAuthChallengeTokenizer* tok) override;
    int GenerateAuthToken(const AuthCredentials* credentials,
                          const std::string& spn,
                          const std::string& channel_bindings,
                          std::string* auth_token,
                          const NetLogWithSource& net_log,
                          CompletionOnceCallback callback) override;
    void SetDelegation(HttpAuth::DelegationType delegation_type) override;
  
    // Unlike the platform agnostic GenerateAuthToken(), the Android specific
    // version doesn't require a NetLogWithSource. The call is made across service
    // boundaries, so currently the goings-on within the GenerateAuthToken()
    // handler is outside the scope of the NetLog.
    int GenerateAuthTokenAndroid(const AuthCredentials* credentials,
                                 const std::string& spn,
                                 const std::string& channel_bindings,
                                 std::string* auth_token,
                                 CompletionOnceCallback callback);
  
    bool can_delegate() const { return can_delegate_; }
    void set_can_delegate(bool can_delegate) { can_delegate_ = can_delegate; }
  
    const std::string& server_auth_token() const { return server_auth_token_; }
    void set_server_auth_token(const std::string& server_auth_token) {
      server_auth_token_ = server_auth_token;
    }
  
    std::string GetAuthAndroidNegotiateAccountType() const;
  
   private:
    void SetResultInternal(int result, const std::string& token);
  
    const HttpAuthPreferences* prefs_ = nullptr;
    bool can_delegate_ = false;
    bool first_challenge_ = true;
    std::string server_auth_token_;
    std::string* auth_token_ = nullptr;
    base::android::ScopedJavaGlobalRef<jobject> java_authenticator_;
    net::CompletionOnceCallback completion_callback_;
  
    base::WeakPtrFactory<HttpAuthNegotiateAndroid> weak_factory_{this};
  
    DISALLOW_COPY_AND_ASSIGN(HttpAuthNegotiateAndroid);
  };
  
  }  // namespace android
  }  // namespace net
  
  #endif  // NET_ANDROID_HTTP_AUTH_NEGOTIATE_ANDROID_H_
  