blob: 1802765ffe78276b8b390df7d52607f303771ef6 [file] [log] [blame]
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <memory>
#include <set>
#include <string>
#include <vector>
#include "base/macros.h"
#include "build/build_config.h"
#include "net/base/net_export.h"
#include "url/gurl.h"
namespace net {
class URLSecurityManager;
// Manage the preferences needed for authentication, and provide a cache of
// them accessible from the IO thread.
class NET_EXPORT HttpAuthPreferences {
// Simplified ctor with empty |auth_schemes|, empty |gssapi_library_name|, and
// |allow_gssapi_library_load| set to true.
#if defined(OS_POSIX) && !defined(OS_ANDROID)
// Simplified ctor with empty |gssapi_library_name| and
// |allow_gssapi_library_load| set to true.
// On platforms where this is not available, the ctor below is already
// equivalent to this.
explicit HttpAuthPreferences(const std::vector<std::string>& auth_schemes);
HttpAuthPreferences(const std::vector<std::string>& auth_schemes
#if defined(OS_CHROMEOS)
bool allow_gssapi_library_load
#elif defined(OS_POSIX) && !defined(OS_ANDROID)
const std::string& gssapi_library_name
virtual ~HttpAuthPreferences();
virtual bool IsSupportedScheme(const std::string& scheme) const;
virtual bool NegotiateDisableCnameLookup() const;
virtual bool NegotiateEnablePort() const;
#if defined(OS_POSIX)
virtual bool NtlmV2Enabled() const;
#if defined(OS_ANDROID)
virtual std::string AuthAndroidNegotiateAccountType() const;
#elif defined(OS_CHROMEOS)
virtual bool AllowGssapiLibraryLoad() const;
#elif defined(OS_POSIX)
virtual std::string GssapiLibraryName() const;
virtual bool CanUseDefaultCredentials(const GURL& auth_origin) const;
virtual bool CanDelegate(const GURL& auth_origin) const;
void set_negotiate_disable_cname_lookup(bool negotiate_disable_cname_lookup) {
negotiate_disable_cname_lookup_ = negotiate_disable_cname_lookup;
void set_negotiate_enable_port(bool negotiate_enable_port) {
negotiate_enable_port_ = negotiate_enable_port;
#if defined(OS_POSIX)
void set_ntlm_v2_enabled(bool ntlm_v2_enabled) {
ntlm_v2_enabled_ = ntlm_v2_enabled;
void SetServerWhitelist(const std::string& server_whitelist);
void SetDelegateWhitelist(const std::string& delegate_whitelist);
#if defined(OS_ANDROID)
void set_auth_android_negotiate_account_type(
const std::string& account_type) {
auth_android_negotiate_account_type_ = account_type;
// TODO(aberent) allow changes to auth scheme set after startup.
// See https://crbug/549273.
const std::set<std::string> auth_schemes_;
bool negotiate_disable_cname_lookup_;
bool negotiate_enable_port_;
#if defined(OS_POSIX)
bool ntlm_v2_enabled_;
#if defined(OS_ANDROID)
std::string auth_android_negotiate_account_type_;
#elif defined(OS_CHROMEOS)
const bool allow_gssapi_library_load_;
#elif defined(OS_POSIX)
// GSSAPI library name cannot change after startup, since changing it
// requires unloading the existing GSSAPI library, which could cause all
// sorts of problems for, for example, active Negotiate transactions.
const std::string gssapi_library_name_;
std::unique_ptr<URLSecurityManager> security_manager_;
} // namespace net