// Copyright 2019 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef ANDROID_WEBVIEW_BROWSER_NETWORK_SERVICE_AW_PROXYING_RESTRICTED_COOKIE_MANAGER_H_
#define ANDROID_WEBVIEW_BROWSER_NETWORK_SERVICE_AW_PROXYING_RESTRICTED_COOKIE_MANAGER_H_

#include <optional>
#include <string>

#include "android_webview/browser/aw_cookie_access_policy.h"
#include "base/memory/raw_ptr.h"
#include "base/memory/weak_ptr.h"
#include "content/public/browser/global_routing_id.h"
#include "mojo/public/cpp/bindings/remote.h"
#include "net/base/network_delegate.h"
#include "net/cookies/site_for_cookies.h"
#include "net/storage_access_api/status.h"
#include "services/network/public/mojom/restricted_cookie_manager.mojom.h"

class GURL;

namespace android_webview {

// A RestrictedCookieManager conditionally returns cookies from an underlying
// RestrictedCookieManager, after consulting WebView's cookie settings.
// We need to do this because Chromium typically configures this per
// BrowserContext but Android developers can set cookie permissions per WebView.
// To work around this, we need to feed down to the restricted cookie manager
// if we wish to disable 3PCs _per_ request.
class AwProxyingRestrictedCookieManager
    : public network::mojom::RestrictedCookieManager {
 public:
  // Creates a AwProxyingRestrictedCookieManager that lives on IO thread,
  // binding it to handle communications from |receiver|. The requests will be
  // delegated to |underlying_rcm|. The resulting object will be owned by the
  // pipe corresponding to |request| and will in turn own |underlying_rcm|.
  //
  // Expects to be called on the UI thread.
  static void CreateAndBind(
      mojo::PendingRemote<network::mojom::RestrictedCookieManager>
          underlying_rcm,
      bool is_service_worker,
      int process_id,
      int frame_id,
      const net::SiteForCookies& site_for_cookies,
      mojo::PendingReceiver<network::mojom::RestrictedCookieManager> receiver,
      AwCookieAccessPolicy* aw_cookie_access_policy);

  AwProxyingRestrictedCookieManager(const AwProxyingRestrictedCookieManager&) =
      delete;
  AwProxyingRestrictedCookieManager& operator=(
      const AwProxyingRestrictedCookieManager&) = delete;

  ~AwProxyingRestrictedCookieManager() override;

  // network::mojom::RestrictedCookieManager interface:
  void GetAllForUrl(const GURL& url,
                    const net::SiteForCookies& /*site_for_cookies*/,
                    const url::Origin& top_frame_origin,
                    net::StorageAccessApiStatus /*storage_access_api_status*/,
                    network::mojom::CookieManagerGetOptionsPtr options,
                    bool is_ad_tagged,
                    bool apply_devtools_overrides,
                    bool force_disable_third_party_cookies,
                    GetAllForUrlCallback callback) override;
  void SetCanonicalCookie(
      network::mojom::RestrictedCanonicalCookieParamsPtr cookie_params,
      const GURL& url,
      const net::SiteForCookies& /*site_for_cookies*/,
      const url::Origin& top_frame_origin,
      net::StorageAccessApiStatus /*storage_access_api_status*/,
      bool is_ad_tagged,
      bool apply_devtools_overrides,
      SetCanonicalCookieCallback callback) override;
  void AddChangeListener(
      const GURL& url,
      const net::SiteForCookies& /*site_for_cookies*/,
      const url::Origin& top_frame_origin,
      net::StorageAccessApiStatus /*storage_access_api_status*/,
      mojo::PendingRemote<network::mojom::CookieChangeListener> listener,
      AddChangeListenerCallback callback) override;

  void SetCookieFromString(
      const GURL& url,
      const net::SiteForCookies& /*site_for_cookies*/,
      const url::Origin& top_frame_origin,
      net::StorageAccessApiStatus /*storage_access_api_status*/,
      bool is_ad_tagged,
      bool apply_devtools_overrides,
      const std::string& cookie) override;

  void GetCookiesString(
      const GURL& url,
      const net::SiteForCookies& /*site_for_cookies*/,
      const url::Origin& top_frame_origin,
      net::StorageAccessApiStatus /*storage_access_api_status*/,
      bool get_version_shared_memory,
      bool is_ad_tagged,
      bool apply_devtools_overrides,
      bool force_disable_third_party_cookies,
      GetCookiesStringCallback callback) override;

  void CookiesEnabledFor(
      const GURL& url,
      const net::SiteForCookies& /*site_for_cookies*/,
      const url::Origin& top_frame_origin,
      net::StorageAccessApiStatus /*storage_access_api_status*/,
      bool apply_devtools_overrides,
      CookiesEnabledForCallback callback) override;

  // This one is internal.
  net::NetworkDelegate::PrivacySetting AllowCookies(const GURL& url) const;

 private:
  AwProxyingRestrictedCookieManager(
      mojo::PendingRemote<network::mojom::RestrictedCookieManager>
          underlying_restricted_cookie_manager,
      const std::optional<const content::GlobalRenderFrameHostToken>&
          global_frame_token,
      const net::SiteForCookies& site_for_cookies,
      AwCookieAccessPolicy* cookie_access_policy);

  static void CreateAndBindOnIoThread(
      mojo::PendingRemote<network::mojom::RestrictedCookieManager>
          underlying_rcm,
      const std::optional<const content::GlobalRenderFrameHostToken>&
          global_frame_token,
      const net::SiteForCookies& site_for_cookies,
      mojo::PendingReceiver<network::mojom::RestrictedCookieManager> receiver,
      AwCookieAccessPolicy* cookie_access_policy);

  mojo::Remote<network::mojom::RestrictedCookieManager>
      underlying_restricted_cookie_manager_;
  std::optional<const content::GlobalRenderFrameHostToken> global_frame_token_;

  raw_ref<AwCookieAccessPolicy> cookie_access_policy_;

  // Latched cookie policy state (used when kWebViewLatchedCookiePolicy
  // enabled). These values are captured at construction time and used
  // throughout the RCM's lifetime to enable shared memory cookie versioning.
  bool latched_accept_cookies_ = true;
  bool latched_accept_third_party_ = false;

  // We are storing the SiteForCookies we get from ContentBrowserClient here
  // from the browser process. This is different from the site_for_cookies
  // parameter that gets provided on method calls to the
  // ProxyingRestrictedCookiManager because those parameters come from the
  // renderer which we can't trust entirely.
  const net::SiteForCookies site_for_cookies_;

  base::WeakPtrFactory<AwProxyingRestrictedCookieManager> weak_factory_{this};
};

}  // namespace android_webview

#endif  // ANDROID_WEBVIEW_BROWSER_NETWORK_SERVICE_AW_PROXYING_RESTRICTED_COOKIE_MANAGER_H_