1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "components/auto_login_parser/auto_login_parser.h"
6
7 #include <utility>
8 #include <vector>
9
10 #include "base/logging.h"
11 #include "base/strings/string_split.h"
12 #include "net/base/escape.h"
13 #include "net/url_request/url_request.h"
14
15 namespace auto_login_parser {
16
17 namespace {
18
19 const char kHeaderName[] = "X-Auto-Login";
20
MatchRealm(const std::string & realm,RealmRestriction restriction)21 bool MatchRealm(const std::string& realm, RealmRestriction restriction) {
22 switch (restriction) {
23 case ONLY_GOOGLE_COM:
24 return realm == "com.google";
25 case ALLOW_ANY_REALM:
26 return true;
27 default:
28 NOTREACHED();
29 return false;
30 }
31 }
32
33 } // namespace
34
HeaderData()35 HeaderData::HeaderData() {}
~HeaderData()36 HeaderData::~HeaderData() {}
37
ParseHeader(const std::string & header,RealmRestriction realm_restriction,HeaderData * header_data)38 bool ParseHeader(const std::string& header,
39 RealmRestriction realm_restriction,
40 HeaderData* header_data) {
41 // TODO(pliard): Investigate/fix potential internationalization issue. It
42 // seems that "account" from the x-auto-login header might contain non-ASCII
43 // characters.
44 if (header.empty())
45 return false;
46
47 base::StringPairs pairs;
48 if (!base::SplitStringIntoKeyValuePairs(header, '=', '&', &pairs))
49 return false;
50
51 // Parse the information from the |header| string.
52 HeaderData local_params;
53 for (base::StringPairs::const_iterator it = pairs.begin(); it != pairs.end();
54 ++it) {
55 const std::string& key = it->first;
56 const std::string& value = it->second;
57 std::string unescaped_value(
58 net::UnescapeURLComponent(value, net::UnescapeRule::URL_SPECIAL_CHARS));
59 if (key == "realm") {
60 if (!MatchRealm(unescaped_value, realm_restriction))
61 return false;
62 local_params.realm = unescaped_value;
63 } else if (key == "account") {
64 local_params.account = unescaped_value;
65 } else if (key == "args") {
66 local_params.args = unescaped_value;
67 }
68 }
69 if (local_params.realm.empty() || local_params.args.empty())
70 return false;
71
72 *header_data = local_params;
73 return true;
74 }
75
ParserHeaderInResponse(net::URLRequest * request,RealmRestriction realm_restriction,HeaderData * header_data)76 bool ParserHeaderInResponse(net::URLRequest* request,
77 RealmRestriction realm_restriction,
78 HeaderData* header_data) {
79 std::string header_string;
80 request->GetResponseHeaderByName(kHeaderName, &header_string);
81 return ParseHeader(header_string, realm_restriction, header_data);
82 }
83
84 } // namespace auto_login_parser
85