Host-side third party token validation

remoting/protocol/third_party_host_authenticator.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_PROTOCOL_THIRD_PARTY_HOST_AUTHENTICATOR_H_
 #define REMOTING_PROTOCOL_THIRD_PARTY_HOST_AUTHENTICATOR_H_
 
 #include <string>
 
 #include "base/callback.h"
@@ skipping 36 matching lines @@
         const TokenValidatedCallback& token_validated_callback) = 0;
 
     // URL sent to the client, to be used by its |TokenFetcher| to get a token.
     virtual const GURL& token_url() const = 0;
 
     // Space-separated list of connection attributes the host must send to the
     // client, and require the token received in response to match.
     virtual const std::string& token_scope() const = 0;
   };
 
+  class TokenValidatorFactory {
+   public:
+    virtual ~TokenValidatorFactory() {}
+
+    // Creates a TokenValidator. |local_jid| and |remote_jid| are used to create
+    // a token scope that is restricted to the current connection's JIDs.
+    virtual scoped_ptr<TokenValidator> CreateTokenValidator(
+        const std::string& local_jid,
+        const std::string& remote_jid) = 0;
+  };
+
   // Creates a third-party host authenticator. |local_cert| and |key_pair| are
   // used by the underlying V2Authenticator to create the SSL channels.
   // |token_validator| contains the token parameters to be sent to the client
   // and is used to obtain the shared secret.
   ThirdPartyHostAuthenticator(const std::string& local_cert,
                               scoped_refptr<RsaKeyPair> key_pair,
                               scoped_ptr<TokenValidator> token_validator);
   virtual ~ThirdPartyHostAuthenticator();
 
  protected:
   // ThirdPartyAuthenticator implementation.
   virtual void ProcessTokenMessage(
       const buzz::XmlElement* message,
       const base::Closure& resume_callback) OVERRIDE;
   virtual void AddTokenElements(buzz::XmlElement* message) OVERRIDE;
 
  private:
   void OnThirdPartyTokenValidated(const buzz::XmlElement* message,
                                   const base::Closure& resume_callback,
                                   const std::string& shared_secret);
 
   std::string local_cert_;
   scoped_refptr<RsaKeyPair> key_pair_;
   scoped_ptr<TokenValidator> token_validator_;
+
+  DISALLOW_COPY_AND_ASSIGN(ThirdPartyHostAuthenticator);
 };
 
 }  // namespace protocol
 }  // namespace remoting
 
 #endif  // REMOTING_PROTOCOL_THIRD_PARTY_HOST_AUTHENTICATOR_H_