Allow dynamic updating of authentication policies

net/http/http_auth_handler_ntlm.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_auth_handler_ntlm.h"
 
 #if !defined(NTLM_SSPI)
 #include "base/base64.h"
 #endif
 #include "base/logging.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
 #include "net/base/net_errors.h"
 #include "net/base/net_util.h"
 #include "net/http/http_auth_challenge_tokenizer.h"
+#include "net/http/http_auth_scheme.h"
 
 namespace net {
 
 HttpAuth::AuthorizationResult HttpAuthHandlerNTLM::HandleAnotherChallenge(
     HttpAuthChallengeTokenizer* challenge) {
   return ParseChallenge(challenge, false);
 }
 
 bool HttpAuthHandlerNTLM::Init(HttpAuthChallengeTokenizer* tok) {
   auth_scheme_ = HttpAuth::AUTH_SCHEME_NTLM;
@@ skipping 79 matching lines @@
   return auth_sspi_.ParseChallenge(tok);
 #else
   // TODO(cbentzel): Most of the logic between SSPI, GSSAPI, and portable NTLM
   // authentication parsing could probably be shared - just need to know if
   // there was previously a challenge round.
   // TODO(cbentzel): Write a test case to validate that auth_data_ is left empty
   // in all failure conditions.
   auth_data_.clear();
 
   // Verify the challenge's auth-scheme.
-  if (!base::LowerCaseEqualsASCII(tok->scheme(), "ntlm"))
+  if (!base::LowerCaseEqualsASCII(tok->scheme(), kNtlmAuthScheme))
     return HttpAuth::AUTHORIZATION_RESULT_INVALID;
 
   std::string base64_param = tok->base64_param();
   if (base64_param.empty()) {
     if (!initial_challenge)
       return HttpAuth::AUTHORIZATION_RESULT_REJECT;
     return HttpAuth::AUTHORIZATION_RESULT_ACCEPT;
   } else {
     if (initial_challenge)
       return HttpAuth::AUTHORIZATION_RESULT_INVALID;
   }
 
   auth_data_ = base64_param;
   return HttpAuth::AUTHORIZATION_RESULT_ACCEPT;
 #endif  // defined(NTLM_SSPI)
 }
 
 // static
 std::string HttpAuthHandlerNTLM::CreateSPN(const GURL& origin) {
   // The service principal name of the destination server.  See
   // http://msdn.microsoft.com/en-us/library/ms677949%28VS.85%29.aspx
   std::string target("HTTP/");
   target.append(GetHostAndPort(origin));
   return target;
 }
 
 }  // namespace net