1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include "chrome/browser/password_manager/password_store_win.h" 6 7 #include <map> 8 9 #include "base/bind.h" 10 #include "base/logging.h" 11 #include "base/memory/scoped_ptr.h" 12 #include "base/strings/string_util.h" 13 #include "base/strings/utf_string_conversions.h" 14 #include "components/os_crypt/ie7_password_win.h" 15 #include "components/password_manager/core/browser/password_manager.h" 16 #include "components/password_manager/core/browser/webdata/password_web_data_service_win.h" 17 #include "content/public/browser/browser_thread.h" 18 19 using autofill::PasswordForm; 20 using content::BrowserThread; 21 using password_manager::PasswordStoreDefault; 22 23 // Handles requests to PasswordWebDataService. 24 class PasswordStoreWin::DBHandler : public WebDataServiceConsumer { 25 public: 26 DBHandler(PasswordWebDataService* web_data_service, 27 PasswordStoreWin* password_store) 28 : web_data_service_(web_data_service), 29 password_store_(password_store) { 30 } 31 32 ~DBHandler(); 33 34 // Requests the IE7 login for |form|. This is async. |callback_runner| will be 35 // run when complete. 36 void GetIE7Login( 37 const PasswordForm& form, 38 const PasswordStoreWin::ConsumerCallbackRunner& callback_runner); 39 40 private: 41 struct RequestInfo { 42 RequestInfo() {} 43 44 RequestInfo(PasswordForm* request_form, 45 const PasswordStoreWin::ConsumerCallbackRunner& runner) 46 : form(request_form), 47 callback_runner(runner) {} 48 49 PasswordForm* form; 50 PasswordStoreWin::ConsumerCallbackRunner callback_runner; 51 }; 52 53 // Holds info associated with in-flight GetIE7Login requests. 54 typedef std::map<PasswordWebDataService::Handle, RequestInfo> 55 PendingRequestMap; 56 57 // Gets logins from IE7 if no others are found. Also copies them into 58 // Chrome's WebDatabase so we don't need to look next time. 59 std::vector<autofill::PasswordForm*> GetIE7Results( 60 const WDTypedResult* result, 61 const PasswordForm& form); 62 63 // WebDataServiceConsumer implementation. 64 virtual void OnWebDataServiceRequestDone( 65 PasswordWebDataService::Handle handle, 66 const WDTypedResult* result) OVERRIDE; 67 68 scoped_refptr<PasswordWebDataService> web_data_service_; 69 70 // This creates a cycle between us and PasswordStore. The cycle is broken 71 // from PasswordStoreWin::Shutdown, which deletes us. 72 scoped_refptr<PasswordStoreWin> password_store_; 73 74 PendingRequestMap pending_requests_; 75 76 DISALLOW_COPY_AND_ASSIGN(DBHandler); 77 }; 78 79 PasswordStoreWin::DBHandler::~DBHandler() { 80 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 81 for (PendingRequestMap::const_iterator i = pending_requests_.begin(); 82 i != pending_requests_.end(); 83 ++i) { 84 web_data_service_->CancelRequest(i->first); 85 delete i->second.form; 86 } 87 } 88 89 void PasswordStoreWin::DBHandler::GetIE7Login( 90 const PasswordForm& form, 91 const PasswordStoreWin::ConsumerCallbackRunner& callback_runner) { 92 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 93 IE7PasswordInfo info; 94 info.url_hash = 95 ie7_password::GetUrlHash(base::UTF8ToWide(form.origin.spec())); 96 PasswordWebDataService::Handle handle = 97 web_data_service_->GetIE7Login(info, this); 98 pending_requests_[handle] = 99 RequestInfo(new PasswordForm(form), callback_runner); 100 } 101 102 std::vector<PasswordForm*> PasswordStoreWin::DBHandler::GetIE7Results( 103 const WDTypedResult *result, 104 const PasswordForm& form) { 105 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 106 std::vector<PasswordForm*> matching_forms; 107 108 const WDResult<IE7PasswordInfo>* r = 109 static_cast<const WDResult<IE7PasswordInfo>*>(result); 110 IE7PasswordInfo info = r->GetValue(); 111 112 if (!info.encrypted_data.empty()) { 113 // We got a result. 114 // Delete the entry. If it's good we will add it to the real saved password 115 // table. 116 web_data_service_->RemoveIE7Login(info); 117 std::vector<ie7_password::DecryptedCredentials> credentials; 118 std::wstring url = base::ASCIIToWide(form.origin.spec()); 119 if (ie7_password::DecryptPasswords(url, 120 info.encrypted_data, 121 &credentials)) { 122 for (size_t i = 0; i < credentials.size(); ++i) { 123 PasswordForm* autofill = new PasswordForm(); 124 autofill->username_value = credentials[i].username; 125 autofill->password_value = credentials[i].password; 126 autofill->signon_realm = form.signon_realm; 127 autofill->origin = form.origin; 128 autofill->preferred = true; 129 autofill->ssl_valid = form.origin.SchemeIsSecure(); 130 autofill->date_created = info.date_created; 131 132 matching_forms.push_back(autofill); 133 // Add this PasswordForm to the saved password table. We're on the DB 134 // thread already, so we use AddLoginImpl. 135 password_store_->AddLoginImpl(*autofill); 136 } 137 } 138 } 139 return matching_forms; 140 } 141 142 void PasswordStoreWin::DBHandler::OnWebDataServiceRequestDone( 143 PasswordWebDataService::Handle handle, 144 const WDTypedResult* result) { 145 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 146 147 PendingRequestMap::iterator i = pending_requests_.find(handle); 148 DCHECK(i != pending_requests_.end()); 149 150 scoped_ptr<PasswordForm> form(i->second.form); 151 PasswordStoreWin::ConsumerCallbackRunner callback_runner( 152 i->second.callback_runner); 153 pending_requests_.erase(i); 154 155 if (!result) { 156 // The WDS returns NULL if it is shutting down. Run callback with empty 157 // result. 158 callback_runner.Run(std::vector<autofill::PasswordForm*>()); 159 return; 160 } 161 162 DCHECK_EQ(PASSWORD_IE7_RESULT, result->GetType()); 163 std::vector<autofill::PasswordForm*> matched_forms = 164 GetIE7Results(result, *form); 165 166 callback_runner.Run(matched_forms); 167 } 168 169 PasswordStoreWin::PasswordStoreWin( 170 scoped_refptr<base::SingleThreadTaskRunner> main_thread_runner, 171 scoped_refptr<base::SingleThreadTaskRunner> db_thread_runner, 172 password_manager::LoginDatabase* login_database, 173 PasswordWebDataService* web_data_service) 174 : PasswordStoreDefault(main_thread_runner, 175 db_thread_runner, 176 login_database) { 177 db_handler_.reset(new DBHandler(web_data_service, this)); 178 } 179 180 PasswordStoreWin::~PasswordStoreWin() { 181 } 182 183 void PasswordStoreWin::ShutdownOnDBThread() { 184 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 185 db_handler_.reset(); 186 } 187 188 void PasswordStoreWin::Shutdown() { 189 BrowserThread::PostTask( 190 BrowserThread::DB, FROM_HERE, 191 base::Bind(&PasswordStoreWin::ShutdownOnDBThread, this)); 192 PasswordStoreDefault::Shutdown(); 193 } 194 195 void PasswordStoreWin::GetIE7LoginIfNecessary( 196 const PasswordForm& form, 197 const ConsumerCallbackRunner& callback_runner, 198 const std::vector<autofill::PasswordForm*>& matched_forms) { 199 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::DB)); 200 if (matched_forms.empty() && db_handler_.get()) { 201 db_handler_->GetIE7Login(form, callback_runner); 202 } else { 203 // No need to get IE7 login. 204 callback_runner.Run(matched_forms); 205 } 206 } 207 208 void PasswordStoreWin::GetLoginsImpl( 209 const PasswordForm& form, 210 AuthorizationPromptPolicy prompt_policy, 211 const ConsumerCallbackRunner& callback_runner) { 212 ConsumerCallbackRunner get_ie7_login = 213 base::Bind(&PasswordStoreWin::GetIE7LoginIfNecessary, 214 this, form, callback_runner); 215 PasswordStoreDefault::GetLoginsImpl(form, prompt_policy, get_ie7_login); 216 } 217
