blob: 1d044e7b46cf0b829c70ad593ee62a84be9cca7d [file] [log] [blame]
// Copyright 2020 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_ENTERPRISE_UTIL_MANAGED_BROWSER_UTILS_H_
#define CHROME_BROWSER_ENTERPRISE_UTIL_MANAGED_BROWSER_UTILS_H_
// Util functions relating to managed browsers.
#include <string>
#include "build/build_config.h"
#include "net/ssl/client_cert_identity.h"
class GURL;
class PrefRegistrySimple;
class Profile;
namespace chrome {
namespace enterprise_util {
// Determines whether the browser with `profile` as its primary profile is
// managed. This is determined by looking it there are any policies applied or
// if `profile` is an enterprise profile.
bool IsBrowserManaged(Profile* profile);
// Extracts the domain from provided |email| if it's an email address and
// returns an empty string, otherwise.
std::string GetDomainFromEmail(const std::string& email);
// Partitions |client_certs| according to the value of the
// |ContentSettingsType::AUTO_SELECT_CERTIFICATE| content setting for the
// |requesting_url|. If a filter is set, all certs that match the
// filter will be returned in |matching_client_certs|, and all certificates
// that don't in |nonmatching_client_certs|. If no filter is set, then
// all certificates will be returned in |nonmatching_client_certs|.
void AutoSelectCertificates(
Profile* profile,
const GURL& requesting_url,
net::ClientCertIdentityList client_certs,
net::ClientCertIdentityList* matching_client_certs,
net::ClientCertIdentityList* nonmatching_client_certs);
// Returns true if the given pref is set through a machine-scope policy.
bool IsMachinePolicyPref(const std::string& pref_name);
void RegisterLocalStatePrefs(PrefRegistrySimple* registry);
// Sets attribute entry 'user_accepted_account_management' of `profile` to
// `accepted`.
void SetUserAcceptedAccountManagement(Profile* profile, bool accepted);
// Returns true is the user has accepted account management through the
// enterprise account confirmation dialog.
bool UserAcceptedAccountManagement(Profile* profile);
// Returns true if the user has consented to sync or has accepted account
// management through the enterprise account confirmation dialog.
bool ProfileCanBeManaged(Profile* profile);
#if defined(OS_ANDROID)
// Returns the UTF8-encoded string representation of the entity that manages
// `profile` or nullopt if unmanaged. `profile` must be not-null.
std::string GetAccountManagerName(Profile* profile);
#endif // defined(OS_ANDROID)
} // namespace enterprise_util
} // namespace chrome
#endif // CHROME_BROWSER_ENTERPRISE_UTIL_MANAGED_BROWSER_UTILS_H_