signin: force web signin flow initiated visits to accounts.google.com to their own process.

chrome/browser/signin/signin_manager.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // The signin manager encapsulates some functionality tracking
 // which user is signed in. When a user is signed in, a ClientLogin
 // request is run on their behalf. Auth tokens are fetched from Google
 // and the results are stored in the TokenService.
 //
 // **NOTE** on semantics of SigninManager:
@@ skipping 67 matching lines @@
 
   // Returns true if the cookie policy for the given profile allows cookies
   // for the Google signin domain.
   static bool AreSigninCookiesAllowed(Profile* profile);
   static bool AreSigninCookiesAllowed(CookieSettings* cookie_settings);
 
   // Returns true if the username is allowed based on the policy string.
   static bool IsAllowedUsername(const std::string& username,
                                 const std::string& policy);
 
+  // Returns true if |url| is a web signin URL and should be hosted in an
+  // isolated, privileged signin process.
+  static bool IsWebBasedSigninFlowURL(const GURL& url);
+
+  // This is used to distinguish URLs belonging to the special web signin flow
+  // running in the special signin process from other URLs on the same domain.
+  // We do not grant WebUI privilieges / bindings to this process or to URLs of
+  // this scheme; enforcement of privileges is handled separately by
+  // OneClickSigninHelper.
+  static const char* kChromeSigninEffectiveSite;
+
   SigninManager();
   virtual ~SigninManager();
 
   // If user was signed in, load tokens from DB if available.
   void Initialize(Profile* profile);
   bool IsInitialized() const;
 
   // Returns true if the passed username is allowed by policy. Virtual for
   // mocking in tests.
   virtual bool IsAllowedUsername(const std::string& username) const;
@@ skipping 100 matching lines @@
   // ProfileKeyedService implementation.
   virtual void Shutdown() OVERRIDE;
 
   // Tells the SigninManager to prohibit signout for this profile.
   void ProhibitSignout();
 
   // If true, signout is prohibited for this profile (calls to SignOut() are
   // ignored).
   bool IsSignoutProhibited() const;
 
+  // Allows the SigninManager to track the privileged signin process
+  // identified by |process_id| so that we can later ask (via IsSigninProcess)
+  // if it is safe to sign the user in from the current context (see
+  // OneClickSigninHelper).  All of this tracking state is reset once the
+  // renderer process terminates.
+  void SetSigninProcess(int process_id);
+  bool IsSigninProcess(int process_id) const;
+  bool HasSigninProcess() const;
+
  protected:
   // Weak pointer to parent profile (protected so FakeSigninManager can access
   // it).
   Profile* profile_;
 
   // Used to show auth errors in the wrench menu. The SigninGlobalError is
   // different than most GlobalErrors in that its lifetime is controlled by
   // SigninManager (so we can expose a reference for use in the wrench menu).
   scoped_ptr<SigninGlobalError> signin_global_error_;
 
@@ skipping 121 matching lines @@
   // with credentials.  These will be passed to TokenService so that it does
   // not need to mint new ones.
   ClientOAuthResult temp_oauth_login_tokens_;
 
   // The list of SigninDiagnosticObservers.
   ObserverList<signin_internals_util::SigninDiagnosticsObserver, true>
       signin_diagnostics_observers_;
 
   base::WeakPtrFactory<SigninManager> weak_pointer_factory_;
 
+  // See SetSigninProcess.  Tracks the currently active signin process
+  // by ID, if there is one.
+  int signin_process_id_;
 
 #if defined(ENABLE_CONFIGURATION_POLICY) && !defined(OS_CHROMEOS)
   // CloudPolicyClient reference we keep while determining whether to create
   // a new profile for an enterprise user or not.
   scoped_ptr<policy::CloudPolicyClient> policy_client_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(SigninManager);
 };
 
 #endif  // CHROME_BROWSER_SIGNIN_SIGNIN_MANAGER_H_