[remoting] More refactoring for SecurityKeyAuthHandler [chromium/src : main]

0 views
Skip to first unread message

Yuwei Huang (Gerrit)

unread,
Jun 23, 2026, 12:30:55 AM (6 days ago) Jun 23
to chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

Yuwei Huang added 5 comments

File remoting/host/desktop_process_main.cc
Line 93, Patchset 3: remoting::SecurityKeyAuthHandler::Init(std::move(options));
Yuwei Huang . resolved

Why do you only call `Init` for POSIX? It is possible that we later add init options specifically for Windows.

Yuwei Huang

Done

File remoting/host/desktop_session_agent.cc
Line 275, Patchset 3: io_task_runner_, SecurityKeyAuthHandler::GetSocketName());
Yuwei Huang . resolved

Why do you need to pass this? Is this for testing? If so, can you make this optional and defaulted to `GetSocketName()`?

Yuwei Huang

Done

File remoting/host/remoting_me2me_host.cc
Line 1138, Patchset 3: security_key_extension_supported_ = false;
Yuwei Huang . resolved

Is the `security_key_extension_supported_` variable still needed, or can it be removed?

Yuwei Huang

Done

File remoting/host/security_key/security_key_auth_handler.h
Line 39, Patchset 3: // Initializes the global configuration. Should be called at host startup.
Yuwei Huang . resolved

"Must be called before `Create` is called."

Yuwei Huang

Done

File remoting/host/session_policies_from_dict.cc
Line 75, Patchset 3: session_policies.allow_gnubby_forwarding =
Yuwei Huang . resolved

Please also add this to remoting/proto/google/internal/remoting/cloud/v1alpha/session_policies.proto and add the conversion logic.

Yuwei Huang

Done

Open in Gerrit

Related details

Attention set is empty
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
Gerrit-Change-Number: 7980007
Gerrit-PatchSet: 7
Gerrit-Owner: Yuwei Huang <yuw...@chromium.org>
Gerrit-Comment-Date: Tue, 23 Jun 2026 04:30:36 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Yuwei Huang <yuw...@chromium.org>
satisfied_requirement
unsatisfied_requirement
open
diffy

Yuwei Huang (Gerrit)

unread,
Jun 23, 2026, 12:37:44 AM (6 days ago) Jun 23
to chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

Yuwei Huang added 3 comments

Commit Message
Line 33, Patchset 7 (Latest): hook and a platform-specific ResetTaskRunnerForTesting() hook.
Yuwei Huang . unresolved

Where is this hook?

File remoting/host/remoting_me2me_host.cc
Line 2062, Patchset 7 (Latest): if (security_key_auth_policy_enabled_ &&
Yuwei Huang . unresolved

This should be replaced with a check to `allow_gnubby_forwarding`.

File remoting/host/security_key/security_key_auth_handler_posix.h
Line 40, Patchset 7 (Latest): SecurityKeyAuthHandlerPosix();
Yuwei Huang . unresolved

The docstring here describes `socket_name` and `file_task_runner` parameters, but this is the default constructor with no parameters. The docstring probably belongs to the private constructor below.

Open in Gerrit

Related details

Attention set is empty
Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
    Gerrit-Change-Number: 7980007
    Gerrit-PatchSet: 7
    Gerrit-Owner: Yuwei Huang <yuw...@chromium.org>
    Gerrit-Comment-Date: Tue, 23 Jun 2026 04:37:27 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Yuwei Huang (Gerrit)

    unread,
    Jun 23, 2026, 3:44:57 AM (6 days ago) Jun 23
    to Chromium LUCI CQ, chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

    Yuwei Huang added 4 comments

    Commit Message
    Line 33, Patchset 7: hook and a platform-specific ResetTaskRunnerForTesting() hook.
    Yuwei Huang . resolved

    Where is this hook?

    Yuwei Huang

    Done

    File remoting/host/desktop_process_main.cc
    Line 41, Patchset 14 (Latest):#include "remoting/host/security_key/security_key_auth_handler.h"
    Yuwei Huang . unresolved

    This include needs to be moved outside of the `#if BUILDFLAG(IS_POSIX)` block. `remoting::SecurityKeyAuthHandler::Init()` is now called unconditionally below, so if `IS_POSIX` is false (e.g., on Windows), the build will fail because `SecurityKeyAuthHandler` is not declared.

    File remoting/host/remoting_me2me_host.cc
    Line 2062, Patchset 7: if (security_key_auth_policy_enabled_ &&
    Yuwei Huang . resolved

    This should be replaced with a check to `allow_gnubby_forwarding`.

    Yuwei Huang

    Done

    File remoting/host/security_key/security_key_auth_handler_posix.h
    Line 40, Patchset 7: SecurityKeyAuthHandlerPosix();
    Yuwei Huang . resolved

    The docstring here describes `socket_name` and `file_task_runner` parameters, but this is the default constructor with no parameters. The docstring probably belongs to the private constructor below.

    Yuwei Huang

    Done

    Open in Gerrit

    Related details

    Attention set is empty
    Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
    Gerrit-Change-Number: 7980007
    Gerrit-PatchSet: 14
    Gerrit-Owner: Yuwei Huang <yuw...@chromium.org>
    Gerrit-Reviewer: Yuwei Huang <yuw...@chromium.org>
    Gerrit-Comment-Date: Tue, 23 Jun 2026 07:44:24 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    Comment-In-Reply-To: Yuwei Huang <yuw...@chromium.org>
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Yuwei Huang (Gerrit)

    unread,
    Jun 23, 2026, 3:53:09 AM (6 days ago) Jun 23
    to Chromium LUCI CQ, chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

    Yuwei Huang added 1 comment

    File remoting/host/desktop_process_main.cc
    Line 41, Patchset 14:#include "remoting/host/security_key/security_key_auth_handler.h"
    Yuwei Huang . resolved

    This include needs to be moved outside of the `#if BUILDFLAG(IS_POSIX)` block. `remoting::SecurityKeyAuthHandler::Init()` is now called unconditionally below, so if `IS_POSIX` is false (e.g., on Windows), the build will fail because `SecurityKeyAuthHandler` is not declared.

    Yuwei Huang

    Done

    Open in Gerrit

    Related details

    Attention set is empty
    Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
      Gerrit-Change-Number: 7980007
      Gerrit-PatchSet: 15
      Gerrit-Owner: Yuwei Huang <yuw...@chromium.org>
      Gerrit-Reviewer: Yuwei Huang <yuw...@chromium.org>
      Gerrit-Comment-Date: Tue, 23 Jun 2026 07:52:54 +0000
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Yuwei Huang (Gerrit)

      unread,
      Jun 23, 2026, 3:53:17 AM (6 days ago) Jun 23
      to Chromium LUCI CQ, chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

      Yuwei Huang voted Commit-Queue+1

      Commit-Queue+1
      Open in Gerrit

      Related details

      Attention set is empty
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement satisfiedCode-Owners
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
      Gerrit-Change-Number: 7980007
      Gerrit-PatchSet: 15
      Gerrit-Owner: Yuwei Huang <yuw...@chromium.org>
      Gerrit-Reviewer: Yuwei Huang <yuw...@chromium.org>
      Gerrit-Comment-Date: Tue, 23 Jun 2026 07:53:02 +0000
      Gerrit-HasComments: No
      Gerrit-Has-Labels: Yes
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Yuwei Huang (Gerrit)

      unread,
      Jun 23, 2026, 5:36:48 PM (5 days ago) Jun 23
      to Chromium LUCI CQ, chromium...@chromium.org, chromotin...@chromium.org, chromium-a...@chromium.org, extension...@chromium.org

      Yuwei Huang abandoned this change.

      View Change

      Abandoned

      Yuwei Huang abandoned this change

      Related details

      Attention set is empty
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: abandon
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I74e90fdac1d1154722587f4acc4aa6ca47a8ed32
      Gerrit-Change-Number: 7980007
      Gerrit-PatchSet: 18
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy
      Reply all
      Reply to author
      Forward
      0 new messages