chromium/chrome/browser/ash/policy/enrollment/account_status_check_fetcher_unittest.cc

// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/ash/policy/enrollment/account_status_check_fetcher.h"

#include <memory>
#include <string>

#include "base/functional/bind.h"
#include "base/functional/callback.h"
#include "base/functional/callback_helpers.h"
#include "base/metrics/histogram_functions.h"
#include "base/run_loop.h"
#include "base/test/metrics/histogram_tester.h"
#include "base/values.h"
#include "chrome/browser/browser_process.h"
#include "chrome/test/base/testing_browser_process.h"
#include "components/policy/core/common/cloud/mock_device_management_service.h"
#include "content/public/test/browser_task_environment.h"
#include "services/network/public/cpp/weak_wrapper_shared_url_loader_factory.h"
#include "services/network/test/test_url_loader_factory.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"

namespace policy {
namespace {

using ::testing::ElementsAre;
namespace em = ::enterprise_management;

// bool parameter in these tests controls whether
// `AccountStatusCheckFetcher` should fetch the value of Enrollment
// Nudge policy or not.
class AccountStatusCheckFetcherUnitTest : public testing::TestWithParam<bool> {
 public:
  AccountStatusCheckFetcherUnitTest() = default;
  ~AccountStatusCheckFetcherUnitTest() override = default;

  void SetUpAccountStatusCheckFetcher(const std::string& email) {
    service_ =
        std::make_unique<FakeDeviceManagementService>(&job_creation_handler_);
    service_->ScheduleInitialization(0);
    base::RunLoop().RunUntilIdle();
    shared_url_loader_factory_ =
        base::MakeRefCounted<network::WeakWrapperSharedURLLoaderFactory>(
            &url_loader_factory_);
    fetcher_ = std::make_unique<AccountStatusCheckFetcher>(
        email, service_.get(), shared_url_loader_factory_);
  }

  void SetReply(const em::DeviceManagementResponse& response) {
    EXPECT_CALL(job_creation_handler_, OnJobCreation)
        .WillOnce(DoAll(service_->SendJobOKAsync(response)))
        .RetiresOnSaturation();
  }

  void SetFailReply(int net_error, int response_code) {
    EXPECT_CALL(job_creation_handler_, OnJobCreation)
        .WillOnce(
            DoAll(service_->SendJobResponseAsync(net_error, response_code)))
        .RetiresOnSaturation();
  }

  void OnFetchCompleted(base::OnceClosure finish_callback,
                        bool fetch_succeeded,
                        AccountStatus status) {
    fetch_succeeded_ = fetch_succeeded;
    status_ = status;
    std::move(finish_callback).Run();
  }

  void SyncFetch() {
    base::RunLoop run_loop;
    base::OnceClosure callback = run_loop.QuitClosure();
    fetcher_->Fetch(
        base::BindOnce(&AccountStatusCheckFetcherUnitTest::OnFetchCompleted,
                       base::Unretained(this), std::move(callback)),
        /*fetch_entollment_nudge_policy=*/GetParam());
    run_loop.Run();
  }

  em::DeviceManagementResponse CreateResponse(
      em::CheckUserAccountResponse::UserAccountType account_type,
      em::CheckUserAccountResponse::EnrollmentNudgeType enrollment_nudge_type,
      bool is_domain_verified) {
    em::DeviceManagementResponse response;
    response.mutable_check_user_account_response()->set_user_account_type(
        account_type);
    if (GetParam()) {
      response.mutable_check_user_account_response()->set_enrollment_nudge_type(
          enrollment_nudge_type);
    }
    response.mutable_check_user_account_response()->set_domain_verified(
        is_domain_verified);
    return response;
  }

  void CheckHistograms(
      const AccountStatus::Type& expected_account_type,
      const EnrollmentNudgePolicyFetchResult& expected_enr_nudge_policy) {
    std::vector<base::Bucket> account_status_samples =
        histogram_tester_.GetAllSamples("Enterprise.AccountStatusCheckResult");
    std::vector<base::Bucket> enrollment_nudge_samples =
        histogram_tester_.GetAllSamples(
            "Enterprise.EnrollmentNudge.PolicyFetchResult");

    if (!GetParam()) {
      EXPECT_THAT(account_status_samples,
                  ElementsAre(base::Bucket(
                      static_cast<int>(expected_account_type), 1)));
      EXPECT_TRUE(enrollment_nudge_samples.empty());
    } else {
      EXPECT_THAT(enrollment_nudge_samples,
                  ElementsAre(base::Bucket(
                      static_cast<int>(expected_enr_nudge_policy), 1)));
      EXPECT_TRUE(account_status_samples.empty());
    }
  }

  em::DeviceManagementResponse dummy_response_;
  std::unique_ptr<AccountStatusCheckFetcher> fetcher_;
  base::HistogramTester histogram_tester_;

 protected:
  bool fetch_succeeded_ = false;
  AccountStatus status_ = {.type = AccountStatus::Type::kUnknown,
                           .enrollment_required = false};

 private:
  content::BrowserTaskEnvironment task_environment_;
  network::TestURLLoaderFactory url_loader_factory_;
  scoped_refptr<network::SharedURLLoaderFactory> shared_url_loader_factory_;
  testing::StrictMock<MockJobCreationHandler> job_creation_handler_;
  std::unique_ptr<FakeDeviceManagementService> service_;
};

TEST_P(AccountStatusCheckFetcherUnitTest, NetworkFailure) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetFailReply(net::OK, DeviceManagementService::kServiceUnavailable);
  SyncFetch();
  EXPECT_FALSE(fetch_succeeded_);
}

TEST_P(AccountStatusCheckFetcherUnitTest, DasherWithUnknownEnrollmentNudge) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(
      em::CheckUserAccountResponse::DASHER,
      em::CheckUserAccountResponse::UNKNOWN_ENROLLMENT_NUDGE_TYPE,
      /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {.type = AccountStatus::Type::kDasher,
                                         .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kUnknown);
}

TEST_P(AccountStatusCheckFetcherUnitTest, DasherWithEnrollmentNudgeSetToNone) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(em::CheckUserAccountResponse::DASHER,
                          em::CheckUserAccountResponse::NONE,
                          /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {.type = AccountStatus::Type::kDasher,
                                         .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kAllowConsumerSignIn);
}

TEST_P(AccountStatusCheckFetcherUnitTest, DasherWithEnrollmentRequired) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(em::CheckUserAccountResponse::DASHER,
                          em::CheckUserAccountResponse::ENROLLMENT_REQUIRED,
                          /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {.type = AccountStatus::Type::kDasher,
                                         .enrollment_required = GetParam()};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kEnrollmentRequired);
}

TEST_P(AccountStatusCheckFetcherUnitTest, ConsumerWithConsumerDomain) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(
      em::CheckUserAccountResponse::CONSUMER,
      em::CheckUserAccountResponse::UNKNOWN_ENROLLMENT_NUDGE_TYPE,
      /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {
      .type = AccountStatus::Type::kConsumerWithConsumerDomain,
      .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kUnknown);
}

TEST_P(AccountStatusCheckFetcherUnitTest, ConsumerWithBusinessDomain) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(
      em::CheckUserAccountResponse::CONSUMER,
      em::CheckUserAccountResponse::UNKNOWN_ENROLLMENT_NUDGE_TYPE,
      /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {
      .type = AccountStatus::Type::kConsumerWithBusinessDomain,
      .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kUnknown);
}

TEST_P(AccountStatusCheckFetcherUnitTest, OrganisationalAccountVerified) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(
      em::CheckUserAccountResponse::NOT_EXIST,
      em::CheckUserAccountResponse::UNKNOWN_ENROLLMENT_NUDGE_TYPE,
      /*is_domain_verified=*/true));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {
      .type = AccountStatus::Type::kOrganisationalAccountVerified,
      .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kUnknown);
}

TEST_P(AccountStatusCheckFetcherUnitTest, OrganisationalAccountUnverified) {
  SetUpAccountStatusCheckFetcher("[email protected]");
  SetReply(CreateResponse(
      em::CheckUserAccountResponse::NOT_EXIST,
      em::CheckUserAccountResponse::UNKNOWN_ENROLLMENT_NUDGE_TYPE,
      /*is_domain_verified=*/false));
  SyncFetch();
  EXPECT_TRUE(fetch_succeeded_);
  const AccountStatus expected_status = {
      .type = AccountStatus::Type::kOrganisationalAccountUnverified,
      .enrollment_required = false};
  EXPECT_EQ(status_, expected_status);
  CheckHistograms(expected_status.type,
                  EnrollmentNudgePolicyFetchResult::kUnknown);
}

INSTANTIATE_TEST_SUITE_P(All,
                         AccountStatusCheckFetcherUnitTest,
                         ::testing::Bool());

}  // namespace
}  // namespace policy