request_handler_for_psm_auto_enrollment.cc 3.6 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192
  1. // Copyright 2021 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include "components/policy/test_support/request_handler_for_psm_auto_enrollment.h"
  5. #include "base/containers/contains.h"
  6. #include "base/strings/stringprintf.h"
  7. #include "components/policy/core/common/cloud/cloud_policy_constants.h"
  8. #include "components/policy/proto/device_management_backend.pb.h"
  9. #include "components/policy/test_support/client_storage.h"
  10. #include "components/policy/test_support/policy_storage.h"
  11. #include "components/policy/test_support/test_server_helpers.h"
  12. #include "net/http/http_status_code.h"
  13. #include "net/test/embedded_test_server/http_request.h"
  14. #include "net/test/embedded_test_server/http_response.h"
  15. using net::test_server::HttpRequest;
  16. using net::test_server::HttpResponse;
  17. namespace em = enterprise_management;
  18. namespace policy {
  19. namespace {
  20. constexpr const char* kPsmMembershipEncryptedTestIds[] = {
  21. "54455354/111111", // Brand code "TEST" (as hex), serial number "111111".
  22. };
  23. } // namespace
  24. RequestHandlerForPsmAutoEnrollment::RequestHandlerForPsmAutoEnrollment(
  25. EmbeddedPolicyTestServer* parent)
  26. : EmbeddedPolicyTestServer::RequestHandler(parent) {}
  27. RequestHandlerForPsmAutoEnrollment::~RequestHandlerForPsmAutoEnrollment() =
  28. default;
  29. std::string RequestHandlerForPsmAutoEnrollment::RequestType() {
  30. return dm_protocol::kValueRequestPsmHasDeviceState;
  31. }
  32. std::unique_ptr<HttpResponse> RequestHandlerForPsmAutoEnrollment::HandleRequest(
  33. const HttpRequest& request) {
  34. em::DeviceManagementRequest device_management_request;
  35. device_management_request.ParseFromString(request.content);
  36. const em::PrivateSetMembershipRequest& psm_request =
  37. device_management_request.private_set_membership_request();
  38. em::DeviceManagementResponse device_management_response;
  39. em::PrivateSetMembershipResponse* psm_response =
  40. device_management_response.mutable_private_set_membership_response();
  41. const auto& rlwe_request = psm_request.rlwe_request();
  42. if (rlwe_request.has_oprf_request()) {
  43. if (rlwe_request.oprf_request().encrypted_ids_size() == 0) {
  44. return CreateHttpResponse(
  45. net::HTTP_BAD_REQUEST,
  46. "PSM RLWE OPRF request must contain encrypted_ids field");
  47. }
  48. psm_response->mutable_rlwe_response()
  49. ->mutable_oprf_response()
  50. ->add_doubly_encrypted_ids()
  51. ->set_queried_encrypted_id(
  52. rlwe_request.oprf_request().encrypted_ids(0));
  53. } else if (rlwe_request.has_query_request()) {
  54. if (rlwe_request.query_request().queries_size() == 0) {
  55. return CreateHttpResponse(
  56. net::HTTP_BAD_REQUEST,
  57. "PSM RLWE query request must contain queries field");
  58. }
  59. auto* pir_response = psm_response->mutable_rlwe_response()
  60. ->mutable_query_response()
  61. ->add_pir_responses();
  62. const auto& encrypted_id =
  63. rlwe_request.query_request().queries(0).queried_encrypted_id();
  64. pir_response->set_queried_encrypted_id(encrypted_id);
  65. pir_response->mutable_pir_response()->set_plaintext_entry_size(
  66. base::Contains(kPsmMembershipEncryptedTestIds, encrypted_id)
  67. ? kPirResponseHasMembership
  68. : kPirResponseHasNoMembership);
  69. } else {
  70. return CreateHttpResponse(
  71. net::HTTP_BAD_REQUEST,
  72. "PSM RLWE oprf_request, or query_request fields must be filled");
  73. }
  74. return CreateHttpResponse(net::HTTP_OK,
  75. device_management_response.SerializeAsString());
  76. }
  77. } // namespace policy