components/certificate_matching/certificate_principal_pattern.cc

// Copyright 2019 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "components/certificate_matching/certificate_principal_pattern.h"

#include <string>

#include "base/strings/string_piece.h"
#include "base/values.h"
#include "net/cert/x509_cert_types.h"
#include "net/cert/x509_certificate.h"

namespace certificate_matching {
namespace {

std::string GetOptionalStringKey(const base::Value& dictionary,
                                 base::StringPiece key) {
  auto* value = dictionary.FindStringKey(key);
  return value ? *value : std::string();
}

}  // namespace

CertificatePrincipalPattern::CertificatePrincipalPattern() = default;

CertificatePrincipalPattern::CertificatePrincipalPattern(
    std::string common_name,
    std::string locality,
    std::string organization,
    std::string organization_unit)
    : common_name_(std::move(common_name)),
      locality_(std::move(locality)),
      organization_(std::move(organization)),
      organization_unit_(std::move(organization_unit)) {}

CertificatePrincipalPattern::CertificatePrincipalPattern(
    const CertificatePrincipalPattern& rhs) = default;

CertificatePrincipalPattern::CertificatePrincipalPattern(
    CertificatePrincipalPattern&& rhs) = default;

CertificatePrincipalPattern::~CertificatePrincipalPattern() = default;

CertificatePrincipalPattern& CertificatePrincipalPattern::operator=(
    const CertificatePrincipalPattern& rhs) = default;
CertificatePrincipalPattern& CertificatePrincipalPattern::operator=(
    CertificatePrincipalPattern&& rhs) = default;

bool CertificatePrincipalPattern::Empty() const {
  return common_name_.empty() && locality_.empty() && organization_.empty() &&
         organization_unit_.empty();
}

bool CertificatePrincipalPattern::Matches(
    const net::CertPrincipal& principal) const {
  if (!common_name_.empty() && common_name_ != principal.common_name) {
    return false;
  }

  if (!locality_.empty() && locality_ != principal.locality_name) {
    return false;
  }

  if (!organization_.empty()) {
    if (std::find(principal.organization_names.begin(),
                  principal.organization_names.end(),
                  organization_) == principal.organization_names.end()) {
      return false;
    }
  }

  if (!organization_unit_.empty()) {
    if (std::find(principal.organization_unit_names.begin(),
                  principal.organization_unit_names.end(),
                  organization_unit_) ==
        principal.organization_unit_names.end()) {
      return false;
    }
  }

  return true;
}

// static
CertificatePrincipalPattern CertificatePrincipalPattern::ParseFromOptionalDict(
    const base::Value* dict,
    base::StringPiece key_common_name,
    base::StringPiece key_locality,
    base::StringPiece key_organization,
    base::StringPiece key_organization_unit) {
  if (!dict || !dict->is_dict())
    return CertificatePrincipalPattern();
  return CertificatePrincipalPattern(
      GetOptionalStringKey(*dict, key_common_name),
      GetOptionalStringKey(*dict, key_locality),
      GetOptionalStringKey(*dict, key_organization),
      GetOptionalStringKey(*dict, key_organization_unit));
}

}  // namespace certificate_matching