OLD | NEW |
1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ | 5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ |
6 #define CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ | 6 #define CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 | 9 |
10 #include "base/gtest_prod_util.h" | 10 #include "base/gtest_prod_util.h" |
11 #include "base/time/time.h" | 11 #include "base/time/time.h" |
12 #include "components/keyed_service/core/keyed_service.h" | |
13 | 12 |
14 class PrefRegistrySimple; | 13 class PrefRegistrySimple; |
15 class PrefService; | 14 class PrefService; |
16 | 15 |
17 namespace chromeos { | 16 namespace chromeos { |
18 | 17 |
19 class PinStorageTestApi; | 18 class PinStorageTestApi; |
20 | 19 |
21 namespace quick_unlock { | 20 namespace quick_unlock { |
22 | 21 |
23 class PinStorage : public KeyedService { | 22 class QuickUnlockStorage; |
| 23 |
| 24 class PinStorage { |
24 public: | 25 public: |
25 // TODO(sammiequon): Pull this value in from policy. See crbug.com/612271. | 26 // TODO(sammiequon): Pull this value in from policy. See crbug.com/612271. |
26 static const int kMaximumUnlockAttempts = 3; | 27 static const int kMaximumUnlockAttempts = 3; |
27 | 28 |
28 // Registers profile prefs. | 29 // Registers profile prefs. |
29 static void RegisterProfilePrefs(PrefRegistrySimple* registry); | 30 static void RegisterProfilePrefs(PrefRegistrySimple* registry); |
30 | 31 |
31 explicit PinStorage(PrefService* pref_service); | 32 explicit PinStorage(PrefService* pref_service); |
32 ~PinStorage() override; | 33 ~PinStorage(); |
33 | |
34 // Mark in storage that the user has had a strong authentication. This means | |
35 // that they authenticated with their password, for example. PIN unlock will | |
36 // timeout after a delay. | |
37 void MarkStrongAuth(); | |
38 // Returns true if the user has been strongly authenticated. | |
39 bool HasStrongAuth() const; | |
40 // Returns the time since the last strong authentication. This should not be | |
41 // called if HasStrongAuth returns false. | |
42 base::TimeDelta TimeSinceLastStrongAuth() const; | |
43 | 34 |
44 // Add a PIN unlock attempt count. | 35 // Add a PIN unlock attempt count. |
45 void AddUnlockAttempt(); | 36 void AddUnlockAttempt(); |
46 // Reset the number of unlock attempts to 0. | 37 // Reset the number of unlock attempts to 0. |
47 void ResetUnlockAttemptCount(); | 38 void ResetUnlockAttemptCount(); |
48 // Returns the number of unlock attempts. | 39 // Returns the number of unlock attempts. |
49 int unlock_attempt_count() const { return unlock_attempt_count_; } | 40 int unlock_attempt_count() const { return unlock_attempt_count_; } |
50 | 41 |
51 // Returns true if a pin is set. | 42 // Returns true if a pin is set. |
52 bool IsPinSet() const; | 43 bool IsPinSet() const; |
53 // Sets the pin to the given value; IsPinSet will return true. | 44 // Sets the pin to the given value; IsPinSet will return true. |
54 void SetPin(const std::string& pin); | 45 void SetPin(const std::string& pin); |
55 // Removes the pin; IsPinSet will return false. | 46 // Removes the pin; IsPinSet will return false. |
56 void RemovePin(); | 47 void RemovePin(); |
57 | 48 |
| 49 private: |
| 50 friend class chromeos::PinStorageTestApi; |
| 51 friend class QuickUnlockStorage; |
| 52 |
58 // Is PIN entry currently available? | 53 // Is PIN entry currently available? |
59 bool IsPinAuthenticationAvailable() const; | 54 bool IsPinAuthenticationAvailable() const; |
60 | 55 |
61 // Tries to authenticate the given pin. This will consume an unlock attempt. | 56 // Tries to authenticate the given pin. This will consume an unlock attempt. |
62 // This always returns false if IsPinAuthenticationAvailable returns false. | 57 // This always returns false if IsPinAuthenticationAvailable returns false. |
63 bool TryAuthenticatePin(const std::string& pin); | 58 bool TryAuthenticatePin(const std::string& pin); |
64 | 59 |
65 private: | |
66 // Return the stored salt/secret. This is fetched directly from pref_service_. | 60 // Return the stored salt/secret. This is fetched directly from pref_service_. |
67 std::string PinSalt() const; | 61 std::string PinSalt() const; |
68 std::string PinSecret() const; | 62 std::string PinSecret() const; |
69 | 63 |
70 friend class chromeos::PinStorageTestApi; | |
71 | |
72 PrefService* pref_service_; | 64 PrefService* pref_service_; |
73 int unlock_attempt_count_ = 0; | 65 int unlock_attempt_count_ = 0; |
74 base::Time last_strong_auth_; | |
75 | 66 |
76 DISALLOW_COPY_AND_ASSIGN(PinStorage); | 67 DISALLOW_COPY_AND_ASSIGN(PinStorage); |
77 }; | 68 }; |
78 | 69 |
79 } // namespace quick_unlock | 70 } // namespace quick_unlock |
80 } // namespace chromeos | 71 } // namespace chromeos |
81 | 72 |
82 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ | 73 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_QUICK_UNLOCK_PIN_STORAGE_H_ |
OLD | NEW |