OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/login/screens/user_selection_screen.h" | 5 #include "chrome/browser/chromeos/login/screens/user_selection_screen.h" |
6 | 6 |
| 7 #include "ash/shell.h" |
7 #include "base/logging.h" | 8 #include "base/logging.h" |
8 #include "chrome/browser/chromeos/login/screens/screen_observer.h" | 9 #include "base/prefs/pref_service.h" |
| 10 #include "chrome/browser/browser_process.h" |
| 11 #include "chrome/browser/chromeos/login/ui/login_display_host_impl.h" |
| 12 #include "chrome/browser/chromeos/login/users/multi_profile_user_controller.h" |
| 13 #include "chrome/browser/chromeos/policy/browser_policy_connector_chromeos.h" |
| 14 #include "chrome/browser/signin/screenlock_bridge.h" |
9 #include "chrome/browser/ui/webui/chromeos/login/signin_screen_handler.h" | 15 #include "chrome/browser/ui/webui/chromeos/login/signin_screen_handler.h" |
| 16 #include "chrome/common/pref_names.h" |
| 17 #include "ui/wm/core/user_activity_detector.h" |
10 | 18 |
11 namespace chromeos { | 19 namespace chromeos { |
12 | 20 |
| 21 namespace { |
| 22 |
| 23 // User dictionary keys. |
| 24 const char kKeyUsername[] = "username"; |
| 25 const char kKeyDisplayName[] = "displayName"; |
| 26 const char kKeyEmailAddress[] = "emailAddress"; |
| 27 const char kKeyEnterpriseDomain[] = "enterpriseDomain"; |
| 28 const char kKeyPublicAccount[] = "publicAccount"; |
| 29 const char kKeyLocallyManagedUser[] = "locallyManagedUser"; |
| 30 const char kKeySignedIn[] = "signedIn"; |
| 31 const char kKeyCanRemove[] = "canRemove"; |
| 32 const char kKeyIsOwner[] = "isOwner"; |
| 33 const char kKeyInitialAuthType[] = "initialAuthType"; |
| 34 const char kKeyMultiProfilesAllowed[] = "isMultiProfilesAllowed"; |
| 35 const char kKeyMultiProfilesPolicy[] = "multiProfilesPolicy"; |
| 36 |
| 37 // Max number of users to show. |
| 38 const size_t kMaxUsers = 18; |
| 39 |
| 40 const int kPasswordClearTimeoutSec = 60; |
| 41 |
| 42 } // namespace |
| 43 |
13 UserSelectionScreen::UserSelectionScreen() : handler_(NULL) { | 44 UserSelectionScreen::UserSelectionScreen() : handler_(NULL) { |
14 } | 45 } |
15 | 46 |
16 UserSelectionScreen::~UserSelectionScreen() { | 47 UserSelectionScreen::~UserSelectionScreen() { |
| 48 wm::UserActivityDetector* activity_detector = |
| 49 ash::Shell::GetInstance()->user_activity_detector(); |
| 50 if (activity_detector->HasObserver(this)) |
| 51 activity_detector->RemoveObserver(this); |
| 52 } |
| 53 |
| 54 // static |
| 55 void UserSelectionScreen::FillUserDictionary( |
| 56 User* user, |
| 57 bool is_owner, |
| 58 bool is_signin_to_add, |
| 59 ScreenlockBridge::LockHandler::AuthType auth_type, |
| 60 base::DictionaryValue* user_dict) { |
| 61 const std::string& user_id = user->email(); |
| 62 const bool is_public_account = |
| 63 user->GetType() == User::USER_TYPE_PUBLIC_ACCOUNT; |
| 64 const bool is_locally_managed_user = |
| 65 user->GetType() == User::USER_TYPE_LOCALLY_MANAGED; |
| 66 |
| 67 user_dict->SetString(kKeyUsername, user_id); |
| 68 user_dict->SetString(kKeyEmailAddress, user->display_email()); |
| 69 user_dict->SetString(kKeyDisplayName, user->GetDisplayName()); |
| 70 user_dict->SetBoolean(kKeyPublicAccount, is_public_account); |
| 71 user_dict->SetBoolean(kKeyLocallyManagedUser, is_locally_managed_user); |
| 72 user_dict->SetInteger(kKeyInitialAuthType, auth_type); |
| 73 user_dict->SetBoolean(kKeySignedIn, user->is_logged_in()); |
| 74 user_dict->SetBoolean(kKeyIsOwner, is_owner); |
| 75 |
| 76 // Fill in multi-profiles related fields. |
| 77 if (is_signin_to_add) { |
| 78 MultiProfileUserController* multi_profile_user_controller = |
| 79 UserManager::Get()->GetMultiProfileUserController(); |
| 80 std::string behavior = |
| 81 multi_profile_user_controller->GetCachedValue(user_id); |
| 82 user_dict->SetBoolean(kKeyMultiProfilesAllowed, |
| 83 multi_profile_user_controller->IsUserAllowedInSession( |
| 84 user_id) == MultiProfileUserController::ALLOWED); |
| 85 user_dict->SetString(kKeyMultiProfilesPolicy, behavior); |
| 86 } else { |
| 87 user_dict->SetBoolean(kKeyMultiProfilesAllowed, true); |
| 88 } |
| 89 |
| 90 if (is_public_account) { |
| 91 policy::BrowserPolicyConnectorChromeOS* policy_connector = |
| 92 g_browser_process->platform_part()->browser_policy_connector_chromeos(); |
| 93 |
| 94 if (policy_connector->IsEnterpriseManaged()) { |
| 95 user_dict->SetString(kKeyEnterpriseDomain, |
| 96 policy_connector->GetEnterpriseDomain()); |
| 97 } |
| 98 } |
| 99 } |
| 100 |
| 101 // static |
| 102 bool UserSelectionScreen::ShouldForceOnlineSignIn(const User* user) { |
| 103 // Public sessions are always allowed to log in offline. |
| 104 // Supervised user are allowed to log in offline if their OAuth token status |
| 105 // is unknown or valid. |
| 106 // For all other users, force online sign in if: |
| 107 // * The flag to force online sign-in is set for the user. |
| 108 // * The user's OAuth token is invalid. |
| 109 // * The user's OAuth token status is unknown (except supervised users, |
| 110 // see above). |
| 111 if (user->is_logged_in()) |
| 112 return false; |
| 113 |
| 114 const User::OAuthTokenStatus token_status = user->oauth_token_status(); |
| 115 const bool is_locally_managed_user = |
| 116 user->GetType() == User::USER_TYPE_LOCALLY_MANAGED; |
| 117 const bool is_public_session = |
| 118 user->GetType() == User::USER_TYPE_PUBLIC_ACCOUNT; |
| 119 |
| 120 if (is_locally_managed_user && |
| 121 token_status == User::OAUTH_TOKEN_STATUS_UNKNOWN) { |
| 122 return false; |
| 123 } |
| 124 |
| 125 if (is_public_session) |
| 126 return false; |
| 127 |
| 128 return user->force_online_signin() || |
| 129 (token_status == User::OAUTH2_TOKEN_STATUS_INVALID) || |
| 130 (token_status == User::OAUTH_TOKEN_STATUS_UNKNOWN); |
17 } | 131 } |
18 | 132 |
19 void UserSelectionScreen::SetHandler(LoginDisplayWebUIHandler* handler) { | 133 void UserSelectionScreen::SetHandler(LoginDisplayWebUIHandler* handler) { |
20 handler_ = handler; | 134 handler_ = handler; |
21 } | 135 } |
22 | 136 |
23 void UserSelectionScreen::Init(const UserList& users) { | 137 void UserSelectionScreen::Init(const UserList& users, bool show_guest) { |
24 users_ = users; | 138 users_ = users; |
| 139 show_guest_ = show_guest; |
| 140 |
| 141 wm::UserActivityDetector* activity_detector = |
| 142 ash::Shell::GetInstance()->user_activity_detector(); |
| 143 if (!activity_detector->HasObserver(this)) |
| 144 activity_detector->AddObserver(this); |
25 } | 145 } |
26 | 146 |
27 void UserSelectionScreen::OnBeforeUserRemoved(const std::string& username) { | 147 void UserSelectionScreen::OnBeforeUserRemoved(const std::string& username) { |
28 for (UserList::iterator it = users_.begin(); it != users_.end(); ++it) { | 148 for (UserList::iterator it = users_.begin(); it != users_.end(); ++it) { |
29 if ((*it)->email() == username) { | 149 if ((*it)->email() == username) { |
30 users_.erase(it); | 150 users_.erase(it); |
31 break; | 151 break; |
32 } | 152 } |
33 } | 153 } |
34 } | 154 } |
35 | 155 |
36 void UserSelectionScreen::OnUserRemoved(const std::string& username) { | 156 void UserSelectionScreen::OnUserRemoved(const std::string& username) { |
37 if (!handler_) | 157 if (!handler_) |
38 return; | 158 return; |
39 | 159 |
40 handler_->OnUserRemoved(username); | 160 handler_->OnUserRemoved(username); |
41 } | 161 } |
42 | 162 |
43 void UserSelectionScreen::OnUserImageChanged(const User& user) { | 163 void UserSelectionScreen::OnUserImageChanged(const User& user) { |
44 if (!handler_) | 164 if (!handler_) |
45 return; | 165 return; |
46 handler_->OnUserImageChanged(user); | 166 handler_->OnUserImageChanged(user); |
47 // TODO(antrim) : updateUserImage(user.email()) | 167 // TODO(antrim) : updateUserImage(user.email()) |
48 } | 168 } |
49 | 169 |
50 const UserList& UserSelectionScreen::GetUsers() const { | 170 const UserList& UserSelectionScreen::GetUsers() const { |
51 return users_; | 171 return users_; |
52 } | 172 } |
53 | 173 |
| 174 void UserSelectionScreen::OnPasswordClearTimerExpired() { |
| 175 if (handler_) |
| 176 handler_->ClearUserPodPassword(); |
| 177 } |
| 178 |
| 179 void UserSelectionScreen::OnUserActivity(const ui::Event* event) { |
| 180 if (!password_clear_timer_.IsRunning()) { |
| 181 password_clear_timer_.Start( |
| 182 FROM_HERE, |
| 183 base::TimeDelta::FromSeconds(kPasswordClearTimeoutSec), |
| 184 this, |
| 185 &UserSelectionScreen::OnPasswordClearTimerExpired); |
| 186 } |
| 187 password_clear_timer_.Reset(); |
| 188 } |
| 189 |
| 190 void UserSelectionScreen::SendUserList(bool animated) { |
| 191 base::ListValue users_list; |
| 192 const UserList& users = GetUsers(); |
| 193 |
| 194 // TODO(nkostylev): Move to a separate method in UserManager. |
| 195 // http://crbug.com/230852 |
| 196 bool is_signin_to_add = LoginDisplayHostImpl::default_host() && |
| 197 UserManager::Get()->IsUserLoggedIn(); |
| 198 |
| 199 user_auth_type_map_.clear(); |
| 200 |
| 201 bool single_user = users.size() == 1; |
| 202 std::string owner; |
| 203 chromeos::CrosSettings::Get()->GetString(chromeos::kDeviceOwner, &owner); |
| 204 bool has_owner = owner.size() > 0; |
| 205 size_t max_non_owner_users = has_owner ? kMaxUsers - 1 : kMaxUsers; |
| 206 size_t non_owner_count = 0; |
| 207 |
| 208 policy::BrowserPolicyConnectorChromeOS* connector = |
| 209 g_browser_process->platform_part()->browser_policy_connector_chromeos(); |
| 210 |
| 211 bool is_enterprise_managed = connector->IsEnterpriseManaged(); |
| 212 |
| 213 for (UserList::const_iterator it = users.begin(); it != users.end(); ++it) { |
| 214 const std::string& user_id = (*it)->email(); |
| 215 bool is_owner = (user_id == owner); |
| 216 bool is_public_account = |
| 217 ((*it)->GetType() == User::USER_TYPE_PUBLIC_ACCOUNT); |
| 218 |
| 219 if ((is_public_account && !is_signin_to_add) || is_owner || |
| 220 (!is_public_account && non_owner_count < max_non_owner_users)) { |
| 221 ScreenlockBridge::LockHandler::AuthType initial_auth_type = |
| 222 ShouldForceOnlineSignIn(*it) |
| 223 ? ScreenlockBridge::LockHandler::ONLINE_SIGN_IN |
| 224 : ScreenlockBridge::LockHandler::OFFLINE_PASSWORD; |
| 225 user_auth_type_map_[user_id] = initial_auth_type; |
| 226 |
| 227 base::DictionaryValue* user_dict = new base::DictionaryValue(); |
| 228 FillUserDictionary( |
| 229 *it, is_owner, is_signin_to_add, initial_auth_type, user_dict); |
| 230 bool signed_in = (*it)->is_logged_in(); |
| 231 // Single user check here is necessary because owner info might not be |
| 232 // available when running into login screen on first boot. |
| 233 // See http://crosbug.com/12723 |
| 234 bool can_remove_user = |
| 235 ((!single_user || is_enterprise_managed) && !user_id.empty() && |
| 236 !is_owner && !is_public_account && !signed_in && !is_signin_to_add); |
| 237 user_dict->SetBoolean(kKeyCanRemove, can_remove_user); |
| 238 |
| 239 if (!is_owner) |
| 240 ++non_owner_count; |
| 241 if (is_owner && users_list.GetSize() > kMaxUsers) { |
| 242 // Owner is always in the list. |
| 243 users_list.Insert(kMaxUsers - 1, user_dict); |
| 244 while (users_list.GetSize() > kMaxUsers) |
| 245 users_list.Remove(kMaxUsers, NULL); |
| 246 } else if (users_list.GetSize() < kMaxUsers) { |
| 247 users_list.Append(user_dict); |
| 248 } |
| 249 } |
| 250 } |
| 251 |
| 252 handler_->LoadUsers(users_list, animated, show_guest_); |
| 253 } |
| 254 |
| 255 void UserSelectionScreen::HandleGetUsers() { |
| 256 SendUserList(false); |
| 257 } |
| 258 |
| 259 void UserSelectionScreen::SetAuthType( |
| 260 const std::string& username, |
| 261 ScreenlockBridge::LockHandler::AuthType auth_type) { |
| 262 user_auth_type_map_[username] = auth_type; |
| 263 } |
| 264 |
| 265 ScreenlockBridge::LockHandler::AuthType UserSelectionScreen::GetAuthType( |
| 266 const std::string& username) const { |
| 267 if (user_auth_type_map_.find(username) == user_auth_type_map_.end()) |
| 268 return ScreenlockBridge::LockHandler::OFFLINE_PASSWORD; |
| 269 return user_auth_type_map_.find(username)->second; |
| 270 } |
| 271 |
54 } // namespace chromeos | 272 } // namespace chromeos |
OLD | NEW |