GitLab

Grant permissions to the Imprivata login screen to use
chrome.platformKeys and chrome.enterprise.platformkeys
(_permission_features.json). The Imprivata in-session extension
does not need to be added here since it already has access
to them as a regular extension.

The login screen also needs to be able to sign with the private
key obtained from chrome.platformKeys.getKeyPairBySpki()
multiple times. Thus we add an allowlist to SignTask
(extension_platform_keys_service.cc) in order to approve
multiple sign operations in the Imprivata login screen.
The Imprivata in-session extension will be covered by the
KeyPermissions user policy.

Bug: 1073466, 1065112

Change-Id: Iaf9bb6f1522706b76406c43604097f74dbcf1326
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2193615
Commit-Queue: Maria Petrisor <mpetrisor@chromium.org>
Reviewed-by: Devlin <rdevlin.cronin@chromium.org>
Reviewed-by: Maksim Ivanov <emaxx@chromium.org>
Reviewed-by: Pavol Marko <pmarko@chromium.org>
Reviewed-by: Alexander Hendrich <hendrich@chromium.org>
Cr-Commit-Position: refs/heads/master@{#781299}