components/content_relationship_verification/response_header_verifier.h

// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_CONTENT_RELATIONSHIP_VERIFICATION_RESPONSE_HEADER_VERIFIER_H_
#define COMPONENTS_CONTENT_RELATIONSHIP_VERIFICATION_RESPONSE_HEADER_VERIFIER_H_

#include <string>

namespace content_relationship_verification {

// Verification status for a certain Android package name based on the returned
// |kEmbedderAncestorHeader|-header.
enum class ResponseHeaderVerificationResult {
  kAllow = 0,  // '*', or package_name listed.
  kDisallow =
      1,  // 'none', or package name not contained in listed package names.
  kMissing = 2,  // missing header
};

class ResponseHeaderVerifier {
 public:
  // Verify if the provided |package_name| is verified via the embedder
  // ancestor header.
  static ResponseHeaderVerificationResult Verify(
      const std::string& package_name,
      const std::string& embedder_ancestors_header_value);
};

extern const char kEmbedderAncestorHeader[];
}  // namespace content_relationship_verification

#endif  // COMPONENTS_CONTENT_RELATIONSHIP_VERIFICATION_RESPONSE_HEADER_VERIFIER_H_