Disable updating credentials by background thread

Bug: 1115255
Change-Id: I29378e7a30a1997480e09580ff172e2e8ac1029b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2350112
Commit-Queue: Yusuf Sengul <yusufsn@google.com>
Commit-Queue: Rakesh Soma <rakeshsoma@google.com>
Reviewed-by: Rakesh Soma <rakeshsoma@google.com>
Auto-Submit: Yusuf Sengul <yusufsn@google.com>
Cr-Commit-Position: refs/heads/master@{#797011}

chrome/credential_provider/gaiacp/gaia_credential_provider.cc

@@ -209,7 +209,8 @@ unsigned __stdcall BackgroundTokenHandleUpdater::PeriodicTokenHandleUpdate(
                         "credentials";
     }
 
-    event_handler->UpdateCredentialsIfNeeded(user_access_changed);
+    if (GetGlobalFlagOrDefault(kRegUpdateCredentialsOnChange, 1))
+      event_handler->UpdateCredentialsIfNeeded(user_access_changed);
   }
 
   return 0;

chrome/credential_provider/gaiacp/mdm_utils.cc

@@ -51,6 +51,8 @@ constexpr wchar_t kRegDeviceDetailsUploadStatus[] =
 constexpr wchar_t kRegDeviceDetailsUploadFailures[] =
     L"device_details_upload_failures";
 constexpr wchar_t kRegGlsPath[] = L"gls_path";
+constexpr wchar_t kRegUpdateCredentialsOnChange[] =
+    L"update_credentials_on_change";
 constexpr wchar_t kRegUserDeviceResourceId[] = L"device_resource_id";
 constexpr wchar_t kUserPasswordLsaStoreKeyPrefix[] =
 #if BUILDFLAG(GOOGLE_CHROME_BRANDING)

chrome/credential_provider/gaiacp/mdm_utils.h

@@ -70,6 +70,10 @@ extern const int kMaxNumConsecutiveUploadDeviceFailures;
 // it is empty, developer mode isn't enabled.
 extern const wchar_t kRegDeveloperMode[];
 
+// Enables updating credentials on login UI when the enforcement of any GCPW
+// associated account changes.
+extern const wchar_t kRegUpdateCredentialsOnChange[];
+
 // Maximum allowed time delta after which user policies should be refreshed
 // again.
 extern const base::TimeDelta kMaxTimeDeltaSinceLastUserPolicyRefresh;