src/chrome/browser/policy/cloud/user_policy_signin_service.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CHROME_BROWSER_POLICY_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_
   6 #define CHROME_BROWSER_POLICY_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_
   7
   8 #include <string>
   9
  10 #include "base/basictypes.h"
  11 #include "base/compiler_specific.h"
  12 #include "base/memory/ref_counted.h"
  13 #include "base/memory/scoped_ptr.h"
  14 #include "chrome/browser/policy/cloud/user_policy_signin_service_base.h"
  15 #include "google_apis/gaia/oauth2_token_service.h"
  16
  17 class Profile;
  18 class ProfileOAuth2TokenService;
  19
  20 namespace net {
  21 class URLRequestContextGetter;
  22 }
  23
  24 namespace policy {
  25
  26 class CloudPolicyClientRegistrationHelper;
  27
  28 // A specialization of the UserPolicySigninServiceBase for the desktop
  29 // platforms (Windows, Mac and Linux).
  30 class UserPolicySigninService : public UserPolicySigninServiceBase,
  31                                 public OAuth2TokenService::Observer {
  32  public:
  33   // Creates a UserPolicySigninService associated with the passed
  34   // |policy_manager| and |signin_manager|.
  35   UserPolicySigninService(
  36       Profile* profile,
  37       PrefService* local_state,
  38       DeviceManagementService* device_management_service,
  39       UserCloudPolicyManager* policy_manager,
  40       SigninManager* signin_manager,
  41       scoped_refptr<net::URLRequestContextGetter> system_request_context,
  42       ProfileOAuth2TokenService* oauth2_token_service);
  43   virtual ~UserPolicySigninService();
  44
  45   // Registers a CloudPolicyClient for fetching policy for a user. The
  46   // |oauth2_login_token| and |username| are explicitly passed because
  47   // the user is not signed in yet (ProfileOAuth2TokenService does not have
  48   // any tokens yet to prevent services from using it until after we've fetched
  49   // policy).
  50   void RegisterForPolicy(const std::string& username,
  51                          const std::string& oauth2_login_token,
  52                          const PolicyRegistrationCallback& callback);
  53
  54   // OAuth2TokenService::Observer implementation:
  55   virtual void OnRefreshTokenAvailable(const std::string& account_id) OVERRIDE;
  56
  57   // CloudPolicyService::Observer implementation:
  58   virtual void OnInitializationCompleted(CloudPolicyService* service) OVERRIDE;
  59
  60   // KeyedService implementation:
  61   virtual void Shutdown() OVERRIDE;
  62
  63  protected:
  64   // UserPolicySigninServiceBase implementation:
  65   virtual void InitializeUserCloudPolicyManager(
  66       const std::string& username,
  67       scoped_ptr<CloudPolicyClient> client) OVERRIDE;
  68
  69   virtual void PrepareForUserCloudPolicyManagerShutdown() OVERRIDE;
  70   virtual void ShutdownUserCloudPolicyManager() OVERRIDE;
  71
  72  private:
  73   // Fetches an OAuth token to allow the cloud policy service to register with
  74   // the cloud policy server. |oauth_login_token| should contain an OAuth login
  75   // refresh token that can be downscoped to get an access token for the
  76   // device_management service.
  77   void RegisterCloudPolicyService();
  78
  79   // Callback invoked when policy registration has finished.
  80   void OnRegistrationComplete();
  81
  82   // Helper routine which prohibits user signout if the user is registered for
  83   // cloud policy.
  84   void ProhibitSignoutIfNeeded();
  85
  86   // Invoked when a policy registration request is complete.
  87   void CallPolicyRegistrationCallback(scoped_ptr<CloudPolicyClient> client,
  88                                       PolicyRegistrationCallback callback);
  89
  90   // Parent profile for this service.
  91   Profile* profile_;
  92
  93   scoped_ptr<CloudPolicyClientRegistrationHelper> registration_helper_;
  94
  95   // Weak pointer to the token service we use to authenticate during
  96   // CloudPolicyClient registration.
  97   ProfileOAuth2TokenService* oauth2_token_service_;
  98
  99   DISALLOW_COPY_AND_ASSIGN(UserPolicySigninService);
 100 };
 101
 102 }  // namespace policy
 103
 104 #endif  // CHROME_BROWSER_POLICY_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_