OAuth2LoginManager+MergeSessionThrottle hardening, multi-profle support

* Made OAuth2LoginManager derived from BrowserContextKeyedService as part of preparation for multi-profile work.
* Added additional hardening for merge session throttle check:
  - MERGE_STATUS_IN_PROCESS state is active after we load refresh token from DB
  - LoginUtils::FinalizePrepareProfile() is now invoked right before merge session starts and after we load refresh tokens from DB
  - the throttle will be applicable only to requests that are raised within the first 10 seconds from session start - so if GAIA  server response is stuck for longer than 10 seconds, we won't throttle  

BUG=243749, 238987
TEST=added MergeSessionLoadPageTest.MergeSessionPageNotShownOnTimeout, existing tests

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=222699

[xiyuan, 2013-09-04 20:12:08]

LGTM

https://codereview.chromium.org/23678007/diff/6001/chrome/browser/chromeos/lo...
File chrome/browser/chromeos/login/oauth2_login_manager.h (right):

https://codereview.chromium.org/23678007/diff/6001/chrome/browser/chromeos/lo...
chrome/browser/chromeos/login/oauth2_login_manager.h:111: // Keeps the track if
we have already signaled merge session end.
nit: merge session end -> merge session start?

[zel, 2013-09-06 01:16:10]

PTAL, some other OAuth2LoginManager changes are in now

[xiyuan, 2013-09-06 01:35:49]

SLGTM

https://codereview.chromium.org/23678007/diff/11001/chrome/browser/chromeos/l...
File chrome/browser/chromeos/login/oauth2_login_manager.h (right):

https://codereview.chromium.org/23678007/diff/11001/chrome/browser/chromeos/l...
chrome/browser/chromeos/login/oauth2_login_manager.h:25: class
OAuth2LoginManager : public BrowserContextKeyedService,
nit: Update comments.

[zel, 2013-09-07 02:03:42]

https://codereview.chromium.org/23678007/diff/11001/chrome/browser/chromeos/l...
File chrome/browser/chromeos/login/oauth2_login_manager.h (right):

https://codereview.chromium.org/23678007/diff/11001/chrome/browser/chromeos/l...
chrome/browser/chromeos/login/oauth2_login_manager.h:25: class
OAuth2LoginManager : public BrowserContextKeyedService,
On 2013/09/06 01:35:49, xiyuan wrote:
> nit: Update comments.

Done.

[zel, 2013-09-07 02:04:22]

+sky for review of:
chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc
chrome/browser/ui/startup/startup_browser_creator.cc

[sky, 2013-09-08 02:19:36]

LGTM

[commit-bot: I haz the power, 2013-09-09 19:00:46]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/41001

[commit-bot: I haz the power, 2013-09-09 20:05:36]

Retried try job too often on linux_chromeos for step(s) interactive_ui_tests
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=linux_chro...

[commit-bot: I haz the power, 2013-09-10 01:14:18]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/60001

[commit-bot: I haz the power, 2013-09-10 01:41:46]

Sorry for I got bad news for ya.
Compile failed with a clobber build on mac_rel.
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=mac_rel&nu...
Your code is likely broken or HEAD is junk. Please ensure your
code is not broken then alert the build sheriffs.
Look at the try server FAQ for more details.

[commit-bot: I haz the power, 2013-09-10 17:16:46]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/79001

[commit-bot: I haz the power, 2013-09-10 18:29:08]

Retried try job too often on linux_chromeos for step(s) browser_tests,
interactive_ui_tests
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=linux_chro...

[commit-bot: I haz the power, 2013-09-10 18:54:27]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/5001

[commit-bot: I haz the power, 2013-09-10 21:12:12]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/77001

[commit-bot: I haz the power, 2013-09-10 21:24:49]

Step "update" is always a major failure.
Look at the try server FAQ for more details.
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=linux_clan...

[commit-bot: I haz the power, 2013-09-10 22:08:56]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/82001

[commit-bot: I haz the power, 2013-09-11 01:28:40]

Retried try job too often on linux_chromeos for step(s) browser_tests
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=linux_chro...

[commit-bot: I haz the power, 2013-09-11 01:42:31]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/115001

[commit-bot: I haz the power, 2013-09-11 04:54:37]

Retried try job too often on linux_chromeos for step(s) browser_tests
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=linux_chro...

[commit-bot: I haz the power, 2013-09-11 15:59:23]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/48001

[commit-bot: I haz the power, 2013-09-11 20:22:31]

Failed to apply patch for
chrome/browser/chromeos/login/merge_session_throttle.cc:
While running patch -p1 --forward --force --no-backup-if-mismatch;
  patching file chrome/browser/chromeos/login/merge_session_throttle.cc
  Hunk #2 FAILED at 35.
  Hunk #3 FAILED at 75.
  Hunk #4 succeeded at 92 (offset -1 lines).
  Hunk #5 succeeded at 106 (offset -1 lines).
  2 out of 5 hunks FAILED -- saving rejects to file
chrome/browser/chromeos/login/merge_session_throttle.cc.rej

Patch:       chrome/browser/chromeos/login/merge_session_throttle.cc
Index: chrome/browser/chromeos/login/merge_session_throttle.cc
diff --git a/chrome/browser/chromeos/login/merge_session_throttle.cc
b/chrome/browser/chromeos/login/merge_session_throttle.cc
index
a77892a36c17049c0e64bf994a98a450eb7a1380..034fca9dd9846a9ac755d1cae8763ac7a39ce71f
100644
--- a/chrome/browser/chromeos/login/merge_session_throttle.cc
+++ b/chrome/browser/chromeos/login/merge_session_throttle.cc
@@ -5,11 +5,17 @@
 #include "chrome/browser/chromeos/login/merge_session_throttle.h"
 
 #include "base/bind.h"
+#include "base/lazy_instance.h"
 #include "base/logging.h"
 #include "base/memory/singleton.h"
 #include "base/metrics/histogram.h"
 #include "base/strings/string_util.h"
-#include "chrome/browser/chromeos/login/login_utils.h"
+#include "base/threading/non_thread_safe.h"
+#include "base/time/time.h"
+#include "chrome/browser/chromeos/login/oauth2_login_manager.h"
+#include "chrome/browser/chromeos/login/oauth2_login_manager_factory.h"
+#include "chrome/browser/chromeos/login/user_manager.h"
+#include "chrome/browser/chromeos/login/user_manager.h"
 #include "chrome/browser/google/google_util.h"
 #include "chrome/browser/net/chrome_url_request_context.h"
 #include "chrome/common/url_constants.h"
@@ -29,33 +35,39 @@ using content::WebContents;
 
 namespace {
 
-void ShowDeleayedLoadingPage(
-    int render_process_id,
-    int render_view_id,
-    const GURL& url,
-    const chromeos::MergeSessionLoadPage::CompletionCallback& callback) {
-  DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
+const int64 kMaxSessionRestoreTimeInSec = 60;
 
-  // Check again on UI thread and proceed if it's connected.
-  if (chromeos::UserManager::Get()->GetMergeSessionState() !=
-          chromeos::UserManager::MERGE_STATUS_IN_PROCESS) {
-    BrowserThread::PostTask(
-        BrowserThread::IO, FROM_HERE, callback);
-  } else {
-    RenderViewHost* render_view_host =
-        RenderViewHost::FromID(render_process_id, render_view_id);
-    WebContents* web_contents = render_view_host ?
-        WebContents::FromRenderViewHost(render_view_host) : NULL;
-    // There is a chance that the tab closed after we decided to show
-    // the offline page on the IO thread and before we actually show the
-    // offline page here on the UI thread.
-    if (web_contents)
-      (new chromeos::MergeSessionLoadPage(web_contents, url,
callback))->Show();
-  }
+// The set of blocked profiles.
+class ProfileSet : public base::NonThreadSafe,
+                   public std::set<Profile*> {
+ public:
+  ProfileSet();
+  virtual ~ProfileSet();
+  static ProfileSet* Get();
+
+ private:
+  friend struct ::base::DefaultLazyInstanceTraits<ProfileSet>;
+};
+
+// Set of all of profiles for which restore session is in progress.
+// This static member is accessible only form UI thread.
+static base::LazyInstance<ProfileSet> g_blocked_profiles =
+    LAZY_INSTANCE_INITIALIZER;
+
+ProfileSet::ProfileSet() {
+}
+
+ProfileSet::~ProfileSet() {
+}
+
+ProfileSet* ProfileSet::Get() {
+  return g_blocked_profiles.Pointer();
 }
 
 }  // namespace
 
+base::AtomicRefCount MergeSessionThrottle::all_profiles_restored_(0);
+
 MergeSessionThrottle::MergeSessionThrottle(int render_process_id,
                                            int render_view_id,
                                            net::URLRequest* request)
@@ -69,15 +81,16 @@ MergeSessionThrottle::~MergeSessionThrottle() {
 }
 
 void MergeSessionThrottle::WillStartRequest(bool* defer) {
+  DCHECK(request_->url().SchemeIsHTTPOrHTTPS());
   if (!ShouldShowMergeSessionPage(request_->url()))
     return;
 
-  DVLOG(1) << "WillStartRequest: url=" << request_->url();
+  DVLOG(1) << "WillStartRequest: defer " << request_->url();
   BrowserThread::PostTask(
       BrowserThread::UI,
       FROM_HERE,
       base::Bind(
-          &ShowDeleayedLoadingPage,
+          &MergeSessionThrottle::ShowDeleayedLoadingPageOnUIThread,
           render_process_id_,
           render_view_id_,
           request_->url(),
@@ -87,6 +100,11 @@ void MergeSessionThrottle::WillStartRequest(bool* defer) {
   *defer = true;
 }
 
+// static.
+bool MergeSessionThrottle::AreAllSessionMergedAlready() {
+  return !base::AtomicRefCountIsZero(&all_profiles_restored_);
+}
+
 void MergeSessionThrottle::OnBlockingPageComplete() {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
   controller()->Resume();
@@ -96,8 +114,145 @@ bool MergeSessionThrottle::ShouldShowMergeSessionPage(const
GURL& url) const {
   // If we are loading google properties while merge session is in progress,
   // we will show delayed loading page instead.
   return !net::NetworkChangeNotifier::IsOffline() &&
-         chromeos::UserManager::Get()->GetMergeSessionState() ==
-             chromeos::UserManager::MERGE_STATUS_IN_PROCESS &&
+         !AreAllSessionMergedAlready() &&
          google_util::IsGoogleHostname(url.host(),
                                        google_util::ALLOW_SUBDOMAIN);
 }
+
+// static
+void MergeSessionThrottle::BlockProfile(Profile* profile) {
+  // Add a new profile to the list of those that we are currently blocking
+  // blocking page loading for.
+  if (ProfileSet::Get()->find(profile) == ProfileSet::Get()->end()) {
+    DVLOG(1) << "Blocking profile " << profile;
+    ProfileSet::Get()->insert(profile);
+
+    // Since a new profile just got blocked, we can not assume that
+    // all sessions are merged anymore.
+    if (AreAllSessionMergedAlready()) {
+      base::AtomicRefCountDec(&all_profiles_restored_);
+      DVLOG(1) << "Marking all sessions unmerged!";
+    }
+  }
+}
+
+// static
+void MergeSessionThrottle::UnblockProfile(Profile* profile) {
+  // Have we blocked loading of pages for this this profile
+  // before?
+  DVLOG(1) << "Unblocking profile " << profile;
+  ProfileSet::Get()->erase(profile);
+
+  // Check if there is any other profile to block on.
+  if (ProfileSet::Get()->size() == 0) {
+    base::AtomicRefCountInc(&all_profiles_restored_);
+    DVLOG(1) << "All profiles merged " << all_profiles_restored_;
+  }
+}
+
+// static
+bool MergeSessionThrottle::ShouldShowInterstitialPage(
+    int render_process_id,
+    int render_view_id) {
+  DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
+
+  if (!chromeos::UserManager::Get()->IsUserLoggedIn()) {
+    return false;
+  } else if (!chromeos::UserManager::Get()->IsLoggedInAsRegularUser()) {
+    // This is not a regular user session, let's remove the throttle
+    // permanently.
+    if (!AreAllSessionMergedAlready())
+      base::AtomicRefCountInc(&all_profiles_restored_);
+
+    return false;
+  }
+
+  RenderViewHost* render_view_host =
+      RenderViewHost::FromID(render_process_id, render_view_id);
+  if (!render_view_host)
+    return false;
+
+  WebContents* web_contents =
+      WebContents::FromRenderViewHost(render_view_host);
+  if (!web_contents)
+    return false;
+
+  content::BrowserContext* browser_context =
+      web_contents->GetBrowserContext();
+  if (!browser_context)
+    return false;
+
+  Profile* profile = Profile::FromBrowserContext(browser_context);
+  if (!profile)
+    return false;
+
+  chromeos::OAuth2LoginManager* login_manager =
+      chromeos::OAuth2LoginManagerFactory::GetInstance()->GetForProfile(
+          profile);
+  if (!login_manager)
+    return false;
+
+  switch (login_manager->state()) {
+    case chromeos::OAuth2LoginManager::SESSION_RESTORE_NOT_STARTED:
+      // The session restore for this profile hasn't even started yet. Don't
+      // block for now.
+      // In theory this should not happen since we should
+      // kick off the session restore process for the newly added profile
+      // before we attempt loading any page.
+      if (chromeos::UserManager::Get()->IsLoggedInAsRegularUser() &&
+          !chromeos::UserManager::Get()->IsLoggedInAsStub()) {
+        LOG(WARNING) << "Loading content for a profile without "
+                     << "session restore?";
+      }
+      return false;
+    case chromeos::OAuth2LoginManager::SESSION_RESTORE_PREPARING:
+    case chromeos::OAuth2LoginManager::SESSION_RESTORE_IN_PROGRESS: {
+      // Check if the session restore has been going on for a while already.
+      // If so, don't attempt to block page loading.
+      if ((base::Time::Now() -
+           login_manager->session_restore_start()).InSeconds() >
+               kMaxSessionRestoreTimeInSec) {
+        UnblockProfile(profile);
+        return false;
+      }
+
+      // Add a new profile to the list of those that we are currently blocking
+      // blocking page loading for.
+      BlockProfile(profile);
+      return true;
+    }
+    case chromeos::OAuth2LoginManager::SESSION_RESTORE_DONE:
+    case chromeos::OAuth2LoginManager::SESSION_RESTORE_FAILED: {
+      UnblockProfile(profile);
+      return false;
+    }
+  }
+
+  NOTREACHED();
+  return false;
+}
+
+// static.
+void MergeSessionThrottle::ShowDeleayedLoadingPageOnUIThread(
+    int render_process_id,
+    int render_view_id,
+    const GURL& url,
+    const chromeos::MergeSessionLoadPage::CompletionCallback& callback) {
+  DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
+
+  if (ShouldShowInterstitialPage(render_process_id, render_view_id)) {
+    // There is a chance that the tab closed after we decided to show
+    // the offline page on the IO thread and before we actually show the
+    // offline page here on the UI thread.
+    RenderViewHost* render_v…
(message too large)

[commit-bot: I haz the power, 2013-09-11 21:23:38]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/142001

[commit-bot: I haz the power, 2013-09-11 21:30:16]

Step "update" is always a major failure.
Look at the try server FAQ for more details.
http://build.chromium.org/p/tryserver.chromium/buildstatus?builder=android_cl...

[commit-bot: I haz the power, 2013-09-11 22:46:06]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/zelidrag@chromium.org/23678007/150001

[commit-bot: I haz the power, 2013-09-12 02:01:19]

Change committed as 222699