Google OAuth Device Flow support for FNL

examples/authentication_demo/google_authentication_demo.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "base/bind.h"
+#include "base/logging.h"
+#include "base/synchronization/waitable_event.h"
+#include "base/threading/platform_thread.h"
+#include "mojo/public/c/system/main.h"
+#include "mojo/public/cpp/application/application_connection.h"
+#include "mojo/public/cpp/application/application_delegate.h"
+#include "mojo/public/cpp/application/application_impl.h"
+#include "mojo/public/cpp/application/application_runner.h"
+#include "mojo/public/cpp/utility/run_loop.h"
+#include "mojo/services/authentication/interfaces/authentication.mojom.h"
+
+namespace mojo {
+namespace examples {
+namespace authentication {
+
+class GoogleAuthenticationClientDelegate : public mojo::ApplicationDelegate {
+ public:
+  void Initialize(mojo::ApplicationImpl* app) override {
+    app->ConnectToService("mojo:authentication", &auth_service_);
+
+    mojo::Array<mojo::String> scopes;
+    scopes.push_back("profile");
+    scopes.push_back("email");
+
+    LOG(INFO) << "Starting the device flow handshake...";
+    auth_service_->GetOAuth2DeviceCode(
+        scopes.Pass(),
+        base::Bind(&GoogleAuthenticationClientDelegate::OnDeviceCode,
+                   base::Unretained(this)));
+  }
+
+ private:
+  void OnDeviceCode(const mojo::String& url,
+                    const mojo::String& device_code,
+                    const mojo::String& user_code,
+                    const mojo::String& error) {
+    if (!error.is_null()) {
+      LOG(INFO) << "Error: " << error;
+      mojo::RunLoop::current()->Quit();  // All done!
+      return;
+    }
+    // Display the verification url and user code in system UI and ask the
+    // user to authorize in a companion device
+    LOG(INFO) << "Verification Url: " << url;
+    LOG(INFO) << "Device Code: " << device_code;
+    LOG(INFO) << "User Code: " << user_code;
+
+    // TODO: Replace this with polling logic or show some spinner in System UI
+    LOG(INFO) << "Waiting for user autorization on a secondary device...";
+    base::PlatformThread::Sleep(base::TimeDelta::FromMilliseconds(45000));
+
+    // Exchange the authorization to a long lived token
+    LOG(INFO) << "Check for user authorization...";
+    AddAccount(device_code);
+  }
+
+  // Exchange device code to a refresh token, and persist the grant.
+  void AddAccount(const std::string device_code) {
+    auth_service_->AddAccount(
+        device_code,
+        base::Bind(&GoogleAuthenticationClientDelegate::OnAddAccount,
+                   base::Unretained(this)));
+  }
+
+  void OnAddAccount(const mojo::String& username, const mojo::String& error) {
+    if (!error.is_null() || username.is_null()) {
+      LOG(INFO) << "Missing username or Error: " << error;
+      mojo::RunLoop::current()->Quit();  // All done!
+      return;
+    }
+
+    LOG(INFO) << "Successfully registered user: " << username;
+    LOG(INFO) << "Fetching access token for user [" << username << "]...";
+    FetchOAuth2AccessToken(username);
+  }
+
+  // Fetch a new access token for an existing user grant.
+  void FetchOAuth2AccessToken(const mojo::String& username) {
+    mojo::Array<mojo::String> scopes;
+    scopes.push_back("profile");
+
+    auth_service_->GetOAuth2Token(
+        username, scopes.Pass(),
+        base::Bind(&GoogleAuthenticationClientDelegate::OnGetOAuth2Token,
+                   base::Unretained(this)));
+  }
+
+  void OnGetOAuth2Token(const mojo::String& access_token,
+                        const mojo::String& error) {
+    if (!error.is_null()) {
+      LOG(INFO) << "Error: " << error;
+      mojo::RunLoop::current()->Quit();  // All done!
+      return;
+    }
+
+    if (access_token.is_null()) {
+      LOG(INFO) << "Unable to fetch access token, exiting!";
+    } else {
+      LOG(INFO) << "Access Token: " << access_token;
+    }
+    mojo::RunLoop::current()->Quit();  // All done!
+    return;
+  }
+
+  AuthenticationServicePtr auth_service_;
+};
+
+}  // namespace authentication
+}  // namespace examples
+}  // namespace mojo
+
+MojoResult MojoMain(MojoHandle application_request) {
+  mojo::ApplicationRunner runner(
+      new authentication::examples::GoogleAuthenticationClientDelegate);
+  return runner.Run(application_request);
+}