components/trusted_vault/trusted_vault_connection_impl.h

// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_TRUSTED_VAULT_TRUSTED_VAULT_CONNECTION_IMPL_H_
#define COMPONENTS_TRUSTED_VAULT_TRUSTED_VAULT_CONNECTION_IMPL_H_

#include <memory>
#include <vector>

#include "base/memory/scoped_refptr.h"
#include "base/time/time.h"
#include "components/trusted_vault/securebox.h"
#include "components/trusted_vault/trusted_vault_access_token_fetcher.h"
#include "components/trusted_vault/trusted_vault_connection.h"
#include "url/gurl.h"

namespace network {
class PendingSharedURLLoaderFactory;
class SharedURLLoaderFactory;
}  // namespace network

namespace trusted_vault {

enum class SecurityDomainId;

// This class is created on UI thread and used/destroyed on trusted vault
// backend thread.
class TrustedVaultConnectionImpl : public TrustedVaultConnection {
 public:
  using JoinSecurityDomainsCallback =
      base::OnceCallback<void(TrustedVaultRegistrationStatus,
                              int /*last_key_version=*/)>;

  // Specifies how long JoinSecurityDomainRequest could be delayed due to
  // retries in case of transient errors. Exposed for testing.
  static constexpr base::TimeDelta kMaxJoinSecurityDomainRetryDuration =
      base::Hours(1);

  TrustedVaultConnectionImpl(
      SecurityDomainId security_domain,
      const GURL& trusted_vault_service_url,
      std::unique_ptr<network::PendingSharedURLLoaderFactory>
          pending_url_loader_factory,
      std::unique_ptr<TrustedVaultAccessTokenFetcher> access_token_fetcher);

  TrustedVaultConnectionImpl(const TrustedVaultConnectionImpl& other) = delete;
  TrustedVaultConnectionImpl& operator=(
      const TrustedVaultConnectionImpl& other) = delete;
  ~TrustedVaultConnectionImpl() override;

  std::unique_ptr<Request> RegisterAuthenticationFactor(
      const CoreAccountInfo& account_info,
      const MemberKeysSource& member_keys_source,
      const SecureBoxPublicKey& authentication_factor_public_key,
      AuthenticationFactorTypeAndRegistrationParams
          authentication_factor_type_and_registration_params,
      RegisterAuthenticationFactorCallback callback) override;

  std::unique_ptr<Request> RegisterLocalDeviceWithoutKeys(
      const CoreAccountInfo& account_info,
      const SecureBoxPublicKey& device_public_key,
      RegisterAuthenticationFactorCallback callback) override;

  std::unique_ptr<Request> DownloadNewKeys(
      const CoreAccountInfo& account_info,
      const TrustedVaultKeyAndVersion& last_trusted_vault_key_and_version,
      std::unique_ptr<SecureBoxKeyPair> device_key_pair,
      DownloadNewKeysCallback callback) override;

  std::unique_ptr<Request> DownloadIsRecoverabilityDegraded(
      const CoreAccountInfo& account_info,
      IsRecoverabilityDegradedCallback callback) override;

  std::unique_ptr<TrustedVaultConnection::Request>
  DownloadAuthenticationFactorsRegistrationState(
      const CoreAccountInfo& account_info,
      DownloadAuthenticationFactorsRegistrationStateCallback callback,
      base::RepeatingClosure keep_alive_callback) override;

  std::unique_ptr<Request> DownloadAuthenticationFactorsRegistrationState(
      const CoreAccountInfo& account_info,
      std::set<trusted_vault_pb::SecurityDomainMember_MemberType>
          recovery_factor_filter,
      DownloadAuthenticationFactorsRegistrationStateCallback callback,
      base::RepeatingClosure keep_alive_callback) override;

 private:
  std::unique_ptr<Request> SendJoinSecurityDomainsRequest(
      const CoreAccountInfo& account_info,
      const MemberKeysSource& member_keys_source,
      const SecureBoxPublicKey& authentication_factor_public_key,
      AuthenticationFactorTypeAndRegistrationParams
          authentication_factor_type_and_registration_params,
      JoinSecurityDomainsCallback callback);

  const SecurityDomainId security_domain_;

  // SharedURLLoaderFactory is created lazily, because it needs to be done on
  // the backend sequence, while this class ctor is called on UI thread.
  scoped_refptr<network::SharedURLLoaderFactory> GetOrCreateURLLoaderFactory();

  std::unique_ptr<network::PendingSharedURLLoaderFactory>
      pending_url_loader_factory_;
  const std::unique_ptr<TrustedVaultAccessTokenFetcher> access_token_fetcher_;

  // Instantiated upon first need using |pending_url_loader_factory_|.
  scoped_refptr<network::SharedURLLoaderFactory> url_loader_factory_;

  GURL trusted_vault_service_url_;

  const bool enable_registration_state_security_domain_filtering_;
};

}  // namespace trusted_vault

#endif  // COMPONENTS_TRUSTED_VAULT_TRUSTED_VAULT_CONNECTION_IMPL_H_