Merge lp:~gary-wzl77/account-plugins/mcloud-plugin-lp1587282 into lp:account-plugins

[Gary.Wang]

Add mcloud plugin.

Add mcloud plugin

Testing instructions:
1) manually install the account-plugin-mcloud package
2) download and install mcloud scope package from
   https://drive.google.com/open?id=0B2H9ECPSSfqIcGtmUEdZNHpVNVU
3) launch mcloud scope and click "Login to MCloud"

[Alberto Mardegan (mardy)]

Hi Gary, thanks for this plugin!
Do you have a link to the OAuth documentation for mccloud? Better if in English :-)

I don't believe that mccould OAuth implementation is special; what you have coded as WORKAROUND 1 & 2 seem to be the normal web flow. I think you can remove those two workarounds, and just change the .provider file by replacing "user_agent" with "web_server", then add your ClientSecret in there too, and it should work.

Once you get it to work, can you also try removing the "DisableStateParameter" option, and see if it continues working? It's preferable not to use that option, because it disables a security feature.

As for the user agent, could you please file a bug against https://launchpad.net/ubuntu/+source/webbrowser-app and ask for a user-agent override to be added in Ubuntu.WebView?

If we manage to get all the above done, then we won't need any workarounds in the plugin, and we can avoid duplicating the code here. :-)

review: Needs Information

[Gary.Wang (gary-wzl77)]

Thanks for your hints. mandy
 You can find the mcloud OAuth doc here,
 http://caiyun.feixin.10086.cn/Mcloud/dev/
 sorry it's written in Chinese. I guess google translate can help on this :)

  Also I tried to modify the provider file according to your tips
  1. web_server mechanism (with DisableStateParameter removed )
       server popups error page

       however If we specify DisableStateParameter in provider
       log:
       browser-request.cpp 123 ~BrowserRequestPrivate
       browser-request.cpp 323 closeView
       qml: Authentication error, code 1
       qml: Removing credentials...

       AccountService.NoAccountError. That's because session data returned from server doesn't contains user account information.

   2. user_agent mechanism
      log:
       bowser-request.cpp 123 ~BrowserRequestPrivate
       browser-request.cpp 323 closeView
       qml: Authentication error, code 3
       qml: Removing credentials...
       qml: ====== PLUGIN FINISHED ======

     Root cause is the url format that cmcc server give us back is not correct when it navigates to our redirect url with authorized code.
     http://developer.ubuntu.com/en/?code=7598B08A870A5.....
     The correct one should be like as following
     http://developer.ubuntu.com/en/#code=7598B08A870A5.....

     Error occurs when authentication flow runs here
     https://gitlab.com/accounts-sso/signon-plugin-oauth2/blob/master/src/oauth2plugin.cpp#L355

     That's why I apply workaround1 & 2 in this mechanism to create fake "access token".
     Actually, we can check if url contains '?' in this step.
     But to be honest, I don't like this "fix" since redirection url format is incompliant with OAuth2.0 specs.

    I create a test scope to reproduce above issues, Please take a look.
    https://code.launchpad.net/~gary-wzl77/+junk/maccount

   Thanks.

[Alberto Mardegan (mardy)]

On 01/06/2016 14:48, Gary.Wang wrote:
> Also I tried to modify the provider file according to your tips
> 1. web_server mechanism (with DisableStateParameter removed )
> server popups error page
>
> however If we specify DisableStateParameter in provider
> log:
> browser-request.cpp 123 ~BrowserRequestPrivate
> browser-request.cpp 323 closeView
> qml: Authentication error, code 1
> qml: Removing credentials...
>
> AccountService.NoAccountError. That's because session data returned from server doesn't contains user account information.

Can you please run the following command

  echo "LoggingLevel=2" > ~/.config/signond.conf

and then try again with the web_server method, and show me the contents
of the syslog? (in a pastebin)

I pushed my changes at lp:~mardy/account-plugins/mcloud-plugin-lp1587282
but I'm unable to test them because I don't know how to login. :-(
I managed to create an account in cmpassport.com, but I don't know what
I should enter in the login screen here. Can you help me?

[Gary.Wang (gary-wzl77)]

Sorry, I think I would give your the test account in advance. I sent you via email. Please have a check.

I attach the link for syslog in pastebin
https://pastebin.canonical.com/157865/

Here is the log after running online-accounts-service
https://pastebin.canonical.com/157864/

Please let me know if there is anything I can do for you.
Thanks.

[Alberto Mardegan (mardy)]

Hi Gary, good news! :-)

Thanks to your help with the account, after some attempts I got the plugin working. My code is in lp:~mardy/account-plugins/mcloud-plugin-lp1587282 (I'll prepare a merge proposal of my branch into yours).
Unfortunately it requires a little change in the signon-plugin-oauth (https://gitlab.com/accounts-sso/signon-plugin-oauth2/commit/e812eb3e76a1221074e3cf27208aacced5091e42) but I'll take care of landing that one.

I didn't have any problem because of the UserAgent, but I was testing on my desktop, so maybe on the phone it's different.

[Gary.Wang (gary-wzl77)]

Hi mandy
     That's great. Please have a check if it works on the phone.
     Thanks so much for your help on this. :)

=== modified file '.bzrignore'
--- .bzrignore	2016-05-31 09:02:02 +0000
+++ .bzrignore	2016-05-31 09:02:02 +0000
@@ -28,6 +28,7 @@
 /debian/account-plugin-google/
 /debian/account-plugin-icons/
 /debian/account-plugin-identica/
+/debian/account-plugin-mcloud/
 /debian/account-plugin-owncloud/
 /debian/account-plugin-sina/
 /debian/account-plugin-sohu/
 
=== modified file 'Makefile.am'
--- Makefile.am	2016-05-31 09:02:02 +0000
+++ Makefile.am	2016-05-31 09:02:02 +0000
@@ -89,6 +89,7 @@
 	data/providers/identica.provider.in.in \
 	data/providers/linkedin.provider.in.in \
 	data/providers/instagram.provider.in.in \
+	data/providers/mcloud.provider.in.in \
 	data/providers/owncloud.provider.in.in \
 	data/providers/sina.provider.in.in \
 	data/providers/sohu.provider.in.in \
@@ -139,6 +140,7 @@
 # https://bugs.launchpad.net/bugs/1571587
 iconsdir = $(datadir)/icons/hicolor/32x32/apps
 dist_icons_DATA = \
+	data/icons/mcloud.png \
 	data/icons/owncloud.png \
 	data/icons/vk.png
 
 
=== modified file 'configure.ac'
--- configure.ac	2016-05-31 09:02:02 +0000
+++ configure.ac	2016-05-31 09:02:02 +0000
@@ -228,6 +228,20 @@
 AC_SUBST(SOHU_CLIENT_ID, ["$sohu_client_id"])
 AC_SUBST(SOHU_CLIENT_SECRET, ["$sohu_client_secret"])
 
+# Set Mcloud client id/secret
+AC_ARG_WITH(mcloud-client-id,
+            [AS_HELP_STRING([--with-mcloud-client-id],
+                            [Mcloud client id])],
+                            [mcloud_client_id=$withval],
+                            [mcloud_client_id="APP1ZtqoN3R0002"])
+AC_ARG_WITH(mcloud-client-secret,
+            [AS_HELP_STRING([--with-mcloud-client-secret],
+                            [Mcloud client secret])],
+                            [mcloud_client_secret=$withval],
+                            [mcloud_client_secret="A70EFCDC91456349E7FDECF0A33574AC"])
+AC_SUBST(MCLOUD_CLIENT_ID, ["$mcloud_client_id"])
+AC_SUBST(MCLOUD_CLIENT_SECRET, ["$mcloud_client_secret"])
+
 # Set VK client id
 AC_ARG_WITH(vk-client-id,
             [AS_HELP_STRING([--with-vk-client-id],
@@ -252,6 +266,7 @@
 	data/providers/identica.provider.in
 	data/providers/linkedin.provider.in
 	data/providers/instagram.provider.in
+	data/providers/mcloud.provider.in
 	data/providers/owncloud.provider.in
 	data/providers/sina.provider.in
 	data/providers/sohu.provider.in
 
=== added file 'data/icons/mcloud.png'
 Binary files data/icons/mcloud.png	1970-01-01 00:00:00 +0000 and data/icons/mcloud.png	2016-05-31 09:02:02 +0000 differ
=== added file 'data/providers/mcloud.provider.in.in'
--- data/providers/mcloud.provider.in.in	1970-01-01 00:00:00 +0000
+++ data/providers/mcloud.provider.in.in	2016-05-31 09:02:02 +0000
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<provider id="mcloud">
+  <name>MCloud</name>
+  <icon>mcloud</icon>
+  <translations>MCloud</translations>
+  <domains>.*10086\.cn</domains>
+  <plugin>generic-oauth</plugin>
+  <single-account>true</single-account>
+  <template>
+    <group name="auth">
+      <setting name="method">oauth2</setting>
+      <setting name="mechanism">user_agent</setting>
+      <group name="oauth2">
+        <group name="user_agent">
+          <setting name="Host">caiyun.feixin.10086.cn</setting>
+          <setting name="AuthPath">authorize.jsp</setting>
+          <setting name="TokenPath">access_token</setting>
+          <setting name="RedirectUri">http://developer.ubuntu.com/en/</setting>
+          <setting name="ResponseType">code</setting>
+          <setting name="ClientId">@MCLOUD_CLIENT_ID@</setting>
+          <setting type="as" name="Scope">['nd_cloud']</setting>          
+          <setting name="ForceClientAuthViaRequestBody" type="b">true</setting>
+          <setting name="DisableStateParameter" type="b">true</setting>
+          <setting type="as" name="AllowedSchemes">['https', 'http']</setting>
+        </group>
+      </group>
+    </group>
+  </template>
+</provider>
 
=== added file 'debian/account-plugin-mcloud.install'
--- debian/account-plugin-mcloud.install	1970-01-01 00:00:00 +0000
+++ debian/account-plugin-mcloud.install	2016-05-31 09:02:02 +0000
@@ -0,0 +1,4 @@
+usr/share/accounts/providers/mcloud.provider
+usr/share/accounts/qml-plugins/mcloud/*.qml
+usr/share/icons/hicolor/32x32/apps/mcloud.png
+
 
=== modified file 'debian/control'
--- debian/control	2016-05-31 09:02:02 +0000
+++ debian/control	2016-05-31 09:02:02 +0000
@@ -144,6 +144,14 @@
 Description: GNOME Control Center account plugin for single signon - Instagram
  GNOME Control Center account plugins for single signon
 
+Package: account-plugin-mcloud
+Architecture: all
+Depends: ${misc:Depends},
+         ubuntu-system-settings-online-accounts,
+Description: Account plugin for online accounts - mCloud
+ Online Accounts plugin provide the user interface to create accounts for
+ third party services.
+
 Package: account-plugin-owncloud
 Architecture: all
 Depends: ${misc:Depends},
 
=== modified file 'debian/rules'
--- debian/rules	2016-05-31 09:02:02 +0000
+++ debian/rules	2016-05-31 09:02:02 +0000
@@ -22,6 +22,8 @@
 		--with-linkedin-consumer-secret="BazRki2LE8eZtcqh" \
 		--with-instagram-client-id="01c3df41a2274a14882adea8e8ebbd46" \
 		--with-instagram-client-secret="4751ccdc39c648719ea83cfb1c866c26" \
+		--with-mcloud-client-id="APP1ZtqoN3R0002" \
+		--with-mcloud-client-secret="A70EFCDC91456349E7FDECF0A33574AC" \
 		--with-vk-client-id="5402699"
 
 override_dh_install:
 
=== added directory 'qml/mcloud'
=== added file 'qml/mcloud/ErrorItem.qml'
--- qml/mcloud/ErrorItem.qml	1970-01-01 00:00:00 +0000
+++ qml/mcloud/ErrorItem.qml	2016-05-31 09:02:02 +0000
@@ -0,0 +1,48 @@
+/*
+ * Copyright (C) 2015 Canonical Ltd.
+ *
+ * Contact: Alberto Mardegan <[e-mail]>
+ *
+ * This program is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License version 3, as published
+ * by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranties of
+ * MERCHANTABILITY, SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR
+ * PURPOSE.  See the GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+import QtQuick 2.0
+import Ubuntu.Components 0.1
+import Ubuntu.Components.ListItems 0.1 as ListItem
+
+Item {
+    id: root
+
+    signal retryRequested()
+
+    Column {
+        anchors {
+            verticalCenter: parent.verticalCenter
+            left: parent.left; right: parent.right
+        }
+        spacing: units.gu(2)
+
+        Label {
+            anchors { left: parent.left; right: parent.right }
+            text: i18n.dtr("ubuntu-system-settings-online-accounts", "This service is not available right now. Try again later.")
+            wrapMode: Text.WordWrap
+            horizontalAlignment: Text.AlignHCenter
+        }
+
+        Button {
+            anchors.horizontalCenter: parent.horizontalCenter
+            text: i18n.dtr("ubuntu-system-settings-online-accounts", "Try Again")
+            onClicked: root.retryRequested()
+        }
+    }
+}
 
=== added file 'qml/mcloud/Main.qml'
--- qml/mcloud/Main.qml	1970-01-01 00:00:00 +0000
+++ qml/mcloud/Main.qml	2016-05-31 09:02:02 +0000
@@ -0,0 +1,7 @@
+import Ubuntu.OnlineAccounts.Plugin 1.0
+import "." as Local
+
+OAuthMain {
+    creationComponent: Local.OAuth {
+  }
+}
 
=== added file 'qml/mcloud/OAuth.qml'
--- qml/mcloud/OAuth.qml	1970-01-01 00:00:00 +0000
+++ qml/mcloud/OAuth.qml	2016-05-31 09:02:02 +0000
@@ -0,0 +1,283 @@
+/*
+ * Copyright (C) 2013-2016 Canonical Ltd.
+ *
+ * Contact: Alberto Mardegan <[e-mail]>
+ *
+ * This program is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License version 3, as published
+ * by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranties of
+ * MERCHANTABILITY, SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR
+ * PURPOSE.  See the GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+import QtQuick 2.0
+import Ubuntu.Components 1.3
+import Ubuntu.Components.ListItems 1.3 as ListItem
+import Ubuntu.Components.Popups 1.3
+import Ubuntu.OnlineAccounts 0.1
+import Ubuntu.OnlineAccounts.Plugin 1.0
+
+Item {
+    id: root
+
+    /* To override the parameters coming from the .provider file: */
+    property variant authenticationParameters: {}
+    /* To override the default access control list: */
+    property variant accessControlList: ["unconfined"]
+
+    property variant authReply
+    property bool isNewAccount: false
+    property variant __account: account
+    property bool __isAuthenticating: false
+    property alias globalAccountService: globalAccountSettings
+    property bool loading: loader.status == Loader.Null || loader.status == Loader.Loading
+
+    signal authenticated(variant reply)
+    signal authenticationError(variant error)
+    signal finished
+
+    anchors.fill: parent
+
+    Component.onCompleted: {
+        isNewAccount = (account.accountId === 0)
+        enableAccount()
+        authenticate()
+    }
+
+    RequestHandler {
+        id: requestHandler
+        onRequestChanged: {
+            if (request) {
+                console.log("RequestHandler captured request!")
+                loader.setSource("WebView.qml", {
+                    "signonRequest": request
+                })
+            } else {
+                console.log("Request destroyed!")
+                loader.source = ""
+            }
+        }
+    }
+
+    Credentials {
+        id: creds
+        caption: account.provider.id
+        acl: accessControlList
+        onCredentialsIdChanged: root.credentialsStored()
+    }
+
+    AccountService {
+        id: globalAccountSettings
+        objectHandle: account.accountServiceHandle
+        credentials: creds
+        autoSync: false
+
+        onAuthenticated: {
+            __isAuthenticating = false
+            authReply = reply
+            root.authenticated(reply)
+        }
+        onAuthenticationError: {
+            __isAuthenticating = false
+            root.authenticationError(error)
+        }
+    }
+
+    AccountServiceModel {
+        id: accountServices
+        includeDisabled: true
+        account: __account.objectHandle
+    }
+
+    ListItem.Base {
+        visible: loading && !errorItem.visible
+        height: units.gu(7)
+        showDivider: false
+        anchors.top: parent.top
+
+        Item {
+            height: units.gu(5)
+            width: units.gu(30)
+            anchors.horizontalCenter: parent.horizontalCenter
+            anchors.top: parent.top
+            anchors.margins: units.gu(1)
+
+            ActivityIndicator {
+                id: loadingIndicator
+                anchors.verticalCenter: parent.verticalCenter
+                anchors.left: parent.left
+                anchors.leftMargin: units.gu(5)
+                running: loading
+                z: 1
+            }
+            Label {
+                text: i18n.dtr("ubuntu-system-settings-online-accounts", "Loading…")
+                anchors.verticalCenter: parent.verticalCenter
+                anchors.left: loadingIndicator.right
+                anchors.leftMargin: units.gu(3)
+            }
+        }
+    }
+
+    Loader {
+        id: loader
+        anchors {
+            top: parent.top
+            left: parent.left
+            right: parent.right
+            bottom: Qt.inputMethod.visible ? osk.top : cancelButton.top
+        }
+        focus: true
+        visible: !loading
+    }
+
+    ErrorItem {
+        id: errorItem
+        anchors { fill: parent; margins: units.gu(4) }
+        visible: false
+        onRetryRequested: {
+            root.credentialsStored()
+            visible = false
+        }
+    }
+
+    KeyboardRectangle {
+        id: osk
+    }
+
+    ListItem.SingleControl {
+        id: cancelButton
+        anchors.bottom: parent.bottom
+        showDivider: false
+        control: Button {
+            text: i18n.dtr("ubuntu-system-settings-online-accounts", "Cancel")
+            width: parent.width - units.gu(4)
+            onClicked: root.cancel()
+        }
+    }
+
+    AccountServiceModel {
+        id: possiblyDuplicateAccounts
+        service: "global"
+        provider: __account.provider.id
+    }
+
+    function authenticate() {
+        console.log("Authenticating...")
+        creds.sync()
+    }
+
+    function credentialsStored() {
+        console.log("Credentials stored, id: " + creds.credentialsId)
+        if (creds.credentialsId == 0) return
+        var parameters = {}
+        parameters[requestHandler.matchKey] = requestHandler.matchId
+        parameters["providerId"] = account.provider.id
+        for (var p in authenticationParameters) {
+            parameters[p] = authenticationParameters[p]
+        }
+        __isAuthenticating = true
+        globalAccountSettings.authenticate(parameters)
+    }
+
+    function cancel() {
+        if (__isAuthenticating) {
+            /* This will cause the authentication to fail, and this method will
+             * be invoked again to delete the credentials. */
+            globalAccountSettings.cancelAuthentication()
+            return
+        }
+        if (isNewAccount && creds.credentialsId != 0) {
+            console.log("Removing credentials...")
+            creds.remove()
+            creds.removed.connect(finished)
+        } else {
+            finished()
+        }
+    }
+
+    function enableAccount() {
+        globalAccountSettings.updateServiceEnabled(true)
+    }
+
+    function getUserName(reply, callback) {
+        /* This should work for OAuth 1.0a; for OAuth 2.0 this function needs
+         * to be reimplemented */
+        if ('ScreenName' in reply) return reply.ScreenName
+        else if ('UserId' in reply) return reply.UserId
+        return ''
+    }
+
+    function accountIsDuplicate(userName) {
+        var model = possiblyDuplicateAccounts
+        for (var i = 0; i < model.count; i++) {
+            if (model.get(i, "displayName") == userName)
+                return true
+        }
+        return false
+    }
+
+    function __gotUserName(userName, reply) {
+        console.log("UserName: " + userName)
+        if (userName != '') {
+            if (accountIsDuplicate(userName)) {
+                var dialog = PopupUtils.open(Qt.resolvedUrl("DuplicateAccount.qml"))
+                dialog.closed.connect(cancel)
+                return
+            }
+            account.updateDisplayName(userName)
+        }
+        beforeSaving(reply)
+    }
+
+    function saveAccount() {
+        account.synced.connect(finished)
+        account.sync()
+    }
+
+    /* reimplement this function in plugins in order to perform some actions
+     * before quitting the plugin */
+    function beforeSaving(reply) {
+        saveAccount()
+    }
+
+    function __getUserNameAndSave(reply) {
+        /* If the completeCreation function is defined, run it */
+        if (typeof(completeCreation) == "function") {
+            console.warn("The completeCreation method is deprecated; use getUserName() or beforeSaving() instead")
+            completeCreation(reply)
+            return
+        }
+
+        var userName = getUserName(reply, function(name) {
+            __gotUserName(name, reply)
+        })
+        if (typeof(userName) == "string") {
+            __gotUserName(userName, reply)
+        } else if (userName === false) {
+            cancel()
+            return
+        }
+        // otherwise (userName === true), wait for the callback to be invoked
+    }
+
+    onAuthenticated: __getUserNameAndSave(reply)
+
+    onAuthenticationError: {
+        console.log("Authentication error, code " + error.code)
+        if (error.code == AccountService.NetworkError) {
+            console.log("Network error")
+            errorItem.visible = true
+            return
+        }
+        root.cancel()
+    }
+
+    onFinished: loading = false
+}
 
=== added file 'qml/mcloud/WebView.qml'
--- qml/mcloud/WebView.qml	1970-01-01 00:00:00 +0000
+++ qml/mcloud/WebView.qml	2016-05-31 09:02:02 +0000
@@ -0,0 +1,94 @@
+import QtQuick 2.0
+import Ubuntu.Components 1.1
+import Ubuntu.Web 0.2
+
+WebView {
+    id: root
+
+    property QtObject signonRequest
+    readonly property string token_url: "https://ose.caiyun.feixin.10086.cn/oauthApp/OAuth2/getToken"
+    readonly property string redirect_url: "http://developer.ubuntu.com/en/"
+    readonly property string client_id: "APP1ZtqoN3R0002"
+    readonly property string client_pass: "A70EFCDC91456349E7FDECF0A33574AC"
+
+    Component.onCompleted: {
+        signonRequest.authenticated.connect(onAuthenticated)
+        url = signonRequest.startUrl
+    }
+
+    //1.WORKAROUND: we need to retrieve refresh token instead of access token.
+    function fetchRefreshToken(code) {
+        var http = new XMLHttpRequest()
+        var body = "grant_type=authorization_code&code="+code+"&redirect_uri="+redirect_url
+
+        http.open("POST", token_url, true);
+        http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
+        http.setRequestHeader("Authorization", "Basic " + Qt.btoa(client_id + ":" + client_pass));
+        http.onreadystatechange = function() {
+            if (http.readyState === 4 && http.status == 200) {
+                var response = JSON.parse(http.responseText)
+                //create a fake access_token with refresh token. 
+                var urlStr = redirect_url+"#access_token="+response.refresh_token
+                var authUrl = Qt.resolvedUrl(urlStr);
+                signonRequest.currentUrl = authUrl
+            } else {
+                console.log("error: " + http.status)
+            }   
+        };  
+
+        http.send(body);
+    } 
+
+    onLoadingStateChanged: {
+        if (loading) {
+            signonRequest.onLoadStarted()
+        } else if (lastLoadSucceeded) {
+            signonRequest.onLoadFinished(true)
+        } else {
+            signonRequest.onLoadFinished(false)
+        }
+    }
+
+    onUrlChanged: {
+        //2.WORKAROUND: retrieve refresh token if code is fetched
+        var code_pattern= new RegExp("\\?code=.*&");
+        var urlStr = url.toString()
+        if (code_pattern.test(urlStr)){
+            var code = urlStr.match(/\?code=(.*)&/)[1];
+            console.log("code::", code)
+            fetchRefreshToken(code)
+        } else {
+            signonRequest.currentUrl = url
+        }
+    }
+
+    //3.WORKAROUND: Apply desktop useragent to prevent server from detecting android client,
+    //which causes authentication failure.
+    context: WebContext {
+        dataPath: signonRequest ? signonRequest.rootDir : ""
+        userAgent: "Mozilla/5.0 (Linux; Ubuntu 14.04) AppleWebKit/537.36 Chromium/35.0.1870.2 Safari/537.36"
+    }
+
+    function onAuthenticated() {
+        /* Get the cookies and set them on the request */
+        console.log("Authenticated; getting cookies")
+        context.cookieManager.getCookiesResponse.connect(onGotCookies)
+        context.cookieManager.getAllCookies()
+        visible = false
+    }
+
+    function onGotCookies(requestId, cookies) {
+        signonRequest.setCookies(cookies)
+    }
+
+    /* Taken from webbrowser-app */
+    ProgressBar {
+        anchors.top: parent.top
+        anchors.left: parent.left
+        anchors.right: parent.right
+        height: units.dp(3)
+        showProgressPercentage: false
+        visible: root.loading
+        value: root.loadProgress / 100
+    }
+}