lacros: Add stubs for platform_keys.

This CL adds stubs to finish flushing out the platform keys extension
APIs. This CL has no intended behavior change on ash -- it just renames
some files.

Bug: 1164523
Change-Id: I2d201f7f648f86c26c97c5612280b52706b80a06
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2625750Reviewed-by: Karan Bhatia <karandeepb@chromium.org>
Reviewed-by: dpapad <dpapad@chromium.org>
Reviewed-by: Michael Ershov <miersh@google.com>
Reviewed-by: Maksim Ivanov <emaxx@chromium.org>
Reviewed-by: Pavol Marko <pmarko@chromium.org>
Commit-Queue: Erik Chen <erikchen@chromium.org>
Cr-Commit-Position: refs/heads/master@{#843206}

chrome/browser/extensions/BUILD.gn

@@ -942,6 +942,7 @@ static_library("extensions") {
     sources += [
       "api/enterprise_device_attributes/enterprise_device_attributes_api.h",
       "api/enterprise_platform_keys/enterprise_platform_keys_api.h",
+      "api/platform_keys/platform_keys_api.h",
     ]
     deps += [ "//chromeos/crosapi/mojom" ]
     if (is_chromeos_lacros) {
@@ -950,6 +951,8 @@ static_library("extensions") {
         "api/enterprise_device_attributes/enterprise_device_attributes_api_lacros.h",
         "api/enterprise_platform_keys/enterprise_platform_keys_api_lacros.cc",
         "api/enterprise_platform_keys/enterprise_platform_keys_api_lacros.h",
+        "api/platform_keys/platform_keys_api_lacros.cc",
+        "api/platform_keys/platform_keys_api_lacros.h",
       ]
       deps += [ "//chromeos/lacros" ]
     }
@@ -992,8 +995,8 @@ static_library("extensions") {
       "api/networking_cast_private/networking_cast_private_api.h",
       "api/networking_private/networking_private_ui_delegate_chromeos.cc",
       "api/networking_private/networking_private_ui_delegate_chromeos.h",
-      "api/platform_keys/platform_keys_api.cc",
-      "api/platform_keys/platform_keys_api.h",
+      "api/platform_keys/platform_keys_api_ash.cc",
+      "api/platform_keys/platform_keys_api_ash.h",
       "api/platform_keys/verify_trust_api.cc",
       "api/platform_keys/verify_trust_api.h",
       "api/settings_private/chromeos_resolve_time_zone_by_geolocation_method_short.cc",

chrome/browser/extensions/api/platform_keys/platform_keys_api.h

@@ -2,101 +2,19 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+// This file is included from autogenerated files based on
+// chrome/common/extensions/api/platform_keys.idl
+// chrome/common/extensions/api/platform_keys_internal.idl
+
 #ifndef CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_H_
 #define CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_H_
 
-#include <string>
-#include <vector>
-
-#include "base/optional.h"
-#include "chrome/browser/chromeos/platform_keys/platform_keys.h"
-#include "extensions/browser/extension_function.h"
-
-namespace net {
-class X509Certificate;
-typedef std::vector<scoped_refptr<X509Certificate>> CertificateList;
-}  // namespace net
-
-namespace extensions {
-namespace platform_keys {
-
-extern const char kErrorInvalidToken[];
-extern const char kErrorInvalidX509Cert[];
-
-// Returns a known token if |token_id| is valid and returns nullopt for both
-// empty or unknown |token_id|.
-base::Optional<chromeos::platform_keys::TokenId> ApiIdToPlatformKeysTokenId(
-    const std::string& token_id);
-
-// Converts a token id from ::chromeos::platform_keys to the platformKeys API
-// token id.
-std::string PlatformKeysTokenIdToApiId(
-    chromeos::platform_keys::TokenId platform_keys_token_id);
-
-}  // namespace platform_keys
-
-class PlatformKeysInternalSelectClientCertificatesFunction
-    : public ExtensionFunction {
- private:
-  ~PlatformKeysInternalSelectClientCertificatesFunction() override;
-  ResponseAction Run() override;
-
-  // Called when the certificates were selected. If an error occurred, |certs|
-  // will be null.
-  void OnSelectedCertificates(std::unique_ptr<net::CertificateList> matches,
-                              chromeos::platform_keys::Status status);
-
-  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.selectClientCertificates",
-                             PLATFORMKEYSINTERNAL_SELECTCLIENTCERTIFICATES)
-};
-
-class PlatformKeysInternalGetPublicKeyFunction : public ExtensionFunction {
- private:
-  ~PlatformKeysInternalGetPublicKeyFunction() override;
-  ResponseAction Run() override;
-
-  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKey",
-                             PLATFORMKEYSINTERNAL_GETPUBLICKEY)
-};
-
-class PlatformKeysInternalGetPublicKeyBySpkiFunction
-    : public ExtensionFunction {
- private:
-  ~PlatformKeysInternalGetPublicKeyBySpkiFunction() override;
-  ResponseAction Run() override;
-
-  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKeyBySpki",
-                             PLATFORMKEYSINTERNAL_GETPUBLICKEYBYSPKI)
-};
-
-class PlatformKeysInternalSignFunction : public ExtensionFunction {
- private:
-  ~PlatformKeysInternalSignFunction() override;
-  ResponseAction Run() override;
-
-  // Called when the signature was generated. If an error occurred,
-  // |signature| will be empty.
-  void OnSigned(const std::string& signature,
-                chromeos::platform_keys::Status status);
-
-  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.sign",
-                             PLATFORMKEYSINTERNAL_SIGN)
-};
-
-class PlatformKeysVerifyTLSServerCertificateFunction
-    : public ExtensionFunction {
- private:
-  ~PlatformKeysVerifyTLSServerCertificateFunction() override;
-  ResponseAction Run() override;
-
-  void FinishedVerification(const std::string& error,
-                            int verify_result,
-                            int cert_status);
-
-  DECLARE_EXTENSION_FUNCTION("platformKeys.verifyTLSServerCertificate",
-                             PLATFORMKEYS_VERIFYTLSSERVERCERTIFICATE)
-};
+#include "build/chromeos_buildflags.h"
 
-}  // namespace extensions
+#if BUILDFLAG(IS_CHROMEOS_LACROS)
+#include "chrome/browser/extensions/api/platform_keys/platform_keys_api_lacros.h"
+#else
+#include "chrome/browser/extensions/api/platform_keys/platform_keys_api_ash.h"
+#endif
 
 #endif  // CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_H_

chrome/browser/extensions/api/platform_keys/platform_keys_api.cc → chrome/browser/extensions/api/platform_keys/platform_keys_api_ash.cc

@@ -2,7 +2,7 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-#include "chrome/browser/extensions/api/platform_keys/platform_keys_api.h"
+#include "chrome/browser/extensions/api/platform_keys/platform_keys_api_ash.h"
 
 #include <stddef.h>
 #include <utility>

chrome/browser/extensions/api/platform_keys/platform_keys_api_ash.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_ASH_H_
+#define CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_ASH_H_
+
+#include <string>
+#include <vector>
+
+#include "base/optional.h"
+#include "chrome/browser/chromeos/platform_keys/platform_keys.h"
+#include "extensions/browser/extension_function.h"
+
+namespace net {
+class X509Certificate;
+typedef std::vector<scoped_refptr<X509Certificate>> CertificateList;
+}  // namespace net
+
+namespace extensions {
+namespace platform_keys {
+
+extern const char kErrorInvalidToken[];
+extern const char kErrorInvalidX509Cert[];
+
+// Returns a known token if |token_id| is valid and returns nullopt for both
+// empty or unknown |token_id|.
+base::Optional<chromeos::platform_keys::TokenId> ApiIdToPlatformKeysTokenId(
+    const std::string& token_id);
+
+// Converts a token id from ::chromeos::platform_keys to the platformKeys API
+// token id.
+std::string PlatformKeysTokenIdToApiId(
+    chromeos::platform_keys::TokenId platform_keys_token_id);
+
+}  // namespace platform_keys
+
+class PlatformKeysInternalSelectClientCertificatesFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalSelectClientCertificatesFunction() override;
+  ResponseAction Run() override;
+
+  // Called when the certificates were selected. If an error occurred, |certs|
+  // will be null.
+  void OnSelectedCertificates(std::unique_ptr<net::CertificateList> matches,
+                              chromeos::platform_keys::Status status);
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.selectClientCertificates",
+                             PLATFORMKEYSINTERNAL_SELECTCLIENTCERTIFICATES)
+};
+
+class PlatformKeysInternalGetPublicKeyFunction : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalGetPublicKeyFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKey",
+                             PLATFORMKEYSINTERNAL_GETPUBLICKEY)
+};
+
+class PlatformKeysInternalGetPublicKeyBySpkiFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalGetPublicKeyBySpkiFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKeyBySpki",
+                             PLATFORMKEYSINTERNAL_GETPUBLICKEYBYSPKI)
+};
+
+class PlatformKeysInternalSignFunction : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalSignFunction() override;
+  ResponseAction Run() override;
+
+  // Called when the signature was generated. If an error occurred,
+  // |signature| will be empty.
+  void OnSigned(const std::string& signature,
+                chromeos::platform_keys::Status status);
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.sign",
+                             PLATFORMKEYSINTERNAL_SIGN)
+};
+
+class PlatformKeysVerifyTLSServerCertificateFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysVerifyTLSServerCertificateFunction() override;
+  ResponseAction Run() override;
+
+  void FinishedVerification(const std::string& error,
+                            int verify_result,
+                            int cert_status);
+
+  DECLARE_EXTENSION_FUNCTION("platformKeys.verifyTLSServerCertificate",
+                             PLATFORMKEYS_VERIFYTLSSERVERCERTIFICATE)
+};
+
+}  // namespace extensions
+
+#endif  // CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_ASH_H_

chrome/browser/extensions/api/platform_keys/platform_keys_api_lacros.cc

+// Copyright 2021 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/extensions/api/platform_keys/platform_keys_api_lacros.h"
+
+namespace extensions {
+
+PlatformKeysInternalSelectClientCertificatesFunction::
+    ~PlatformKeysInternalSelectClientCertificatesFunction() {}
+
+ExtensionFunction::ResponseAction
+PlatformKeysInternalSelectClientCertificatesFunction::Run() {
+  return RespondNow(Error("Not implemented."));
+}
+
+PlatformKeysInternalGetPublicKeyFunction::
+    ~PlatformKeysInternalGetPublicKeyFunction() {}
+
+ExtensionFunction::ResponseAction
+PlatformKeysInternalGetPublicKeyFunction::Run() {
+  return RespondNow(Error("Not implemented."));
+}
+
+PlatformKeysInternalGetPublicKeyBySpkiFunction::
+    ~PlatformKeysInternalGetPublicKeyBySpkiFunction() = default;
+
+ExtensionFunction::ResponseAction
+PlatformKeysInternalGetPublicKeyBySpkiFunction::Run() {
+  return RespondNow(Error("Not implemented."));
+}
+
+PlatformKeysInternalSignFunction::~PlatformKeysInternalSignFunction() {}
+
+ExtensionFunction::ResponseAction PlatformKeysInternalSignFunction::Run() {
+  return RespondNow(Error("Not implemented."));
+}
+
+PlatformKeysVerifyTLSServerCertificateFunction::
+    ~PlatformKeysVerifyTLSServerCertificateFunction() {}
+
+ExtensionFunction::ResponseAction
+PlatformKeysVerifyTLSServerCertificateFunction::Run() {
+  return RespondNow(Error("Not implemented."));
+}
+
+}  // namespace extensions

chrome/browser/extensions/api/platform_keys/platform_keys_api_lacros.h

+// Copyright 2021 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_LACROS_H_
+#define CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_LACROS_H_
+
+#include "extensions/browser/extension_function.h"
+
+namespace extensions {
+
+class PlatformKeysInternalSelectClientCertificatesFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalSelectClientCertificatesFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.selectClientCertificates",
+                             PLATFORMKEYSINTERNAL_SELECTCLIENTCERTIFICATES)
+};
+
+class PlatformKeysInternalGetPublicKeyFunction : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalGetPublicKeyFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKey",
+                             PLATFORMKEYSINTERNAL_GETPUBLICKEY)
+};
+
+class PlatformKeysInternalGetPublicKeyBySpkiFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalGetPublicKeyBySpkiFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.getPublicKeyBySpki",
+                             PLATFORMKEYSINTERNAL_GETPUBLICKEYBYSPKI)
+};
+
+class PlatformKeysInternalSignFunction : public ExtensionFunction {
+ private:
+  ~PlatformKeysInternalSignFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeysInternal.sign",
+                             PLATFORMKEYSINTERNAL_SIGN)
+};
+
+class PlatformKeysVerifyTLSServerCertificateFunction
+    : public ExtensionFunction {
+ private:
+  ~PlatformKeysVerifyTLSServerCertificateFunction() override;
+  ResponseAction Run() override;
+
+  DECLARE_EXTENSION_FUNCTION("platformKeys.verifyTLSServerCertificate",
+                             PLATFORMKEYS_VERIFYTLSSERVERCERTIFICATE)
+};
+
+}  // namespace extensions
+
+#endif  // CHROME_BROWSER_EXTENSIONS_API_PLATFORM_KEYS_PLATFORM_KEYS_API_LACROS_H_

chrome/common/extensions/api/_permission_features.json

@@ -283,7 +283,7 @@
   },
   "enterprise.platformKeys": [{
     "channel": "stable",
-    "platforms": ["chromeos"],
+    "platforms": ["chromeos", "lacros"],
     "extension_types": ["extension", "platform_app", "legacy_packaged_app"],
     "location": "policy"
   },
@@ -637,7 +637,7 @@
   "platformKeys": [{
     "channel": "stable",
     "extension_types": ["extension", "platform_app"],
-    "platforms": ["chromeos"]
+    "platforms": ["chromeos", "lacros"]
   }, {
     "channel": "stable",
     "dependencies": ["behavior:imprivata_login_screen_extension"],

chrome/common/extensions/api/api_sources.gni

@@ -84,6 +84,8 @@ if (is_chromeos_ash || is_chromeos_lacros) {
     "enterprise_device_attributes.idl",
     "enterprise_platform_keys.idl",
     "enterprise_platform_keys_internal.idl",
+    "platform_keys_internal.idl",
+    "platform_keys.idl",
   ]
 }
 
@@ -107,8 +109,6 @@ if (is_chromeos_ash) {
     "login_screen_storage.idl",
     "login_screen_ui.idl",
     "login_state.idl",
-    "platform_keys.idl",
-    "platform_keys_internal.idl",
     "quick_unlock_private.idl",
     "terminal_private.json",
     "users_private.idl",

chrome/renderer/BUILD.gn

@@ -352,14 +352,19 @@ static_library("renderer") {
     deps += [ "//third_party/wtl" ]
   }
 
+  if (is_chromeos_ash || is_chromeos_lacros) {
+    sources += [
+      "extensions/platform_keys_natives.cc",
+      "extensions/platform_keys_natives.h",
+    ]
+  }
+
   if (is_chromeos_ash) {
     sources += [
       "extensions/file_browser_handler_custom_bindings.cc",
       "extensions/file_browser_handler_custom_bindings.h",
       "extensions/file_manager_private_custom_bindings.cc",
       "extensions/file_manager_private_custom_bindings.h",
-      "extensions/platform_keys_natives.cc",
-      "extensions/platform_keys_natives.h",
     ]
     if (use_cups) {
       configs += [ "//printing:cups" ]

chrome/renderer/extensions/chrome_extensions_dispatcher_delegate.cc

@@ -43,10 +43,13 @@
 #include "third_party/blink/public/platform/web_url.h"
 #include "third_party/blink/public/web/web_security_policy.h"
 
+#if BUILDFLAG(IS_CHROMEOS_ASH) || BUILDFLAG(IS_CHROMEOS_LACROS)
+#include "chrome/renderer/extensions/platform_keys_natives.h"
+#endif
+
 #if BUILDFLAG(IS_CHROMEOS_ASH)
 #include "chrome/renderer/extensions/file_browser_handler_custom_bindings.h"
 #include "chrome/renderer/extensions/file_manager_private_custom_bindings.h"
-#include "chrome/renderer/extensions/platform_keys_natives.h"
 #if defined(USE_CUPS)
 #include "chrome/renderer/extensions/printing_hooks_delegate.h"
 #endif
@@ -67,6 +70,11 @@ void ChromeExtensionsDispatcherDelegate::RegisterNativeHandlers(
       "sync_file_system",
       std::unique_ptr<NativeHandler>(
           new extensions::SyncFileSystemCustomBindings(context)));
+#if BUILDFLAG(IS_CHROMEOS_ASH) || BUILDFLAG(IS_CHROMEOS_LACROS)
+  module_system->RegisterNativeHandler(
+      "platform_keys_natives",
+      std::make_unique<extensions::PlatformKeysNatives>(context));
+#endif  // BUILDFLAG(IS_CHROMEOS_ASH) || BUILDFLAG(IS_CHROMEOS_LACROS)
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   module_system->RegisterNativeHandler(
       "file_browser_handler",
@@ -76,10 +84,6 @@ void ChromeExtensionsDispatcherDelegate::RegisterNativeHandlers(
       "file_manager_private",
       std::unique_ptr<NativeHandler>(
           new extensions::FileManagerPrivateCustomBindings(context)));
-  module_system->RegisterNativeHandler(
-      "platform_keys_natives",
-      std::unique_ptr<NativeHandler>(
-          new extensions::PlatformKeysNatives(context)));
 #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
   module_system->RegisterNativeHandler(
       "notifications_private",
@@ -138,9 +142,7 @@ void ChromeExtensionsDispatcherDelegate::PopulateSourceMap(
   source_map->RegisterSource("tts", IDR_TTS_CUSTOM_BINDINGS_JS);
   source_map->RegisterSource("ttsEngine", IDR_TTS_ENGINE_CUSTOM_BINDINGS_JS);
 
-#if BUILDFLAG(IS_CHROMEOS_ASH)
-  source_map->RegisterSource("certificateProvider",
-                             IDR_CERTIFICATE_PROVIDER_CUSTOM_BINDINGS_JS);
+#if BUILDFLAG(IS_CHROMEOS_ASH) || BUILDFLAG(IS_CHROMEOS_LACROS)
   source_map->RegisterSource("enterprise.platformKeys",
                              IDR_ENTERPRISE_PLATFORM_KEYS_CUSTOM_BINDINGS_JS);
   source_map->RegisterSource("enterprise.platformKeys.internalAPI",
@@ -151,12 +153,6 @@ void ChromeExtensionsDispatcherDelegate::PopulateSourceMap(
                              IDR_ENTERPRISE_PLATFORM_KEYS_SUBTLE_CRYPTO_JS);
   source_map->RegisterSource("enterprise.platformKeys.Token",
                              IDR_ENTERPRISE_PLATFORM_KEYS_TOKEN_JS);
-  source_map->RegisterSource("fileBrowserHandler",
-                             IDR_FILE_BROWSER_HANDLER_CUSTOM_BINDINGS_JS);
-  source_map->RegisterSource("fileManagerPrivate",
-                             IDR_FILE_MANAGER_PRIVATE_CUSTOM_BINDINGS_JS);
-  source_map->RegisterSource("fileSystemProvider",
-                             IDR_FILE_SYSTEM_PROVIDER_CUSTOM_BINDINGS_JS);
   source_map->RegisterSource("platformKeys",
                              IDR_PLATFORM_KEYS_CUSTOM_BINDINGS_JS);
   source_map->RegisterSource("platformKeys.getPublicKeyUtil",
@@ -167,6 +163,17 @@ void ChromeExtensionsDispatcherDelegate::PopulateSourceMap(
   source_map->RegisterSource("platformKeys.SubtleCrypto",
                              IDR_PLATFORM_KEYS_SUBTLE_CRYPTO_JS);
   source_map->RegisterSource("platformKeys.utils", IDR_PLATFORM_KEYS_UTILS_JS);
+#endif
+
+#if BUILDFLAG(IS_CHROMEOS_ASH)
+  source_map->RegisterSource("certificateProvider",
+                             IDR_CERTIFICATE_PROVIDER_CUSTOM_BINDINGS_JS);
+  source_map->RegisterSource("fileBrowserHandler",
+                             IDR_FILE_BROWSER_HANDLER_CUSTOM_BINDINGS_JS);
+  source_map->RegisterSource("fileManagerPrivate",
+                             IDR_FILE_MANAGER_PRIVATE_CUSTOM_BINDINGS_JS);
+  source_map->RegisterSource("fileSystemProvider",
+                             IDR_FILE_SYSTEM_PROVIDER_CUSTOM_BINDINGS_JS);
   source_map->RegisterSource("terminalPrivate",
                              IDR_TERMINAL_PRIVATE_CUSTOM_BINDINGS_JS);
 

chrome/renderer/resources/renderer_resources.grd

@@ -43,22 +43,24 @@
         <include name="IDR_TTS_ENGINE_CUSTOM_BINDINGS_JS" file="extensions\tts_engine_custom_bindings.js" type="BINDATA" />
         <include name="IDR_WEBRTC_DESKTOP_CAPTURE_PRIVATE_CUSTOM_BINDINGS_JS" file="extensions\webrtc_desktop_capture_private_custom_bindings.js" type="BINDATA" />
         <include name="IDR_WEBRTC_LOGGING_PRIVATE_CUSTOM_BINDINGS_JS" file="extensions\webrtc_logging_private_custom_bindings.js" type="BINDATA" />
-        <if expr="chromeos">
-          <include name="IDR_CERTIFICATE_PROVIDER_CUSTOM_BINDINGS_JS" file="extensions\certificate_provider_custom_bindings.js" type="BINDATA" />
+        <if expr="chromeos or lacros">
           <include name="IDR_ENTERPRISE_PLATFORM_KEYS_CUSTOM_BINDINGS_JS" file="extensions\enterprise_platform_keys_custom_bindings.js" type="BINDATA" />
           <include name="IDR_ENTERPRISE_PLATFORM_KEYS_INTERNAL_API_JS" file="extensions\enterprise_platform_keys\internal_api.js" type="BINDATA" />
           <include name="IDR_ENTERPRISE_PLATFORM_KEYS_KEY_PAIR_JS" file="extensions\enterprise_platform_keys\key_pair.js" type="BINDATA" />
           <include name="IDR_ENTERPRISE_PLATFORM_KEYS_SUBTLE_CRYPTO_JS" file="extensions\enterprise_platform_keys\subtle_crypto.js" type="BINDATA" />
           <include name="IDR_ENTERPRISE_PLATFORM_KEYS_TOKEN_JS" file="extensions\enterprise_platform_keys\token.js" type="BINDATA" />
-          <include name="IDR_FILE_BROWSER_HANDLER_CUSTOM_BINDINGS_JS" file="extensions\file_browser_handler_custom_bindings.js" type="BINDATA" />
-          <include name="IDR_FILE_MANAGER_PRIVATE_CUSTOM_BINDINGS_JS" file="extensions\file_manager_private_custom_bindings.js" type="BINDATA" />
-          <include name="IDR_FILE_SYSTEM_PROVIDER_CUSTOM_BINDINGS_JS" file="extensions\file_system_provider_custom_bindings.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_CUSTOM_BINDINGS_JS" file="extensions\platform_keys_custom_bindings.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_GET_PUBLIC_KEY_JS" file="extensions\platform_keys\get_public_key.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_INTERNAL_API_JS" file="extensions\platform_keys\internal_api.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_KEY_JS" file="extensions\platform_keys\key.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_SUBTLE_CRYPTO_JS" file="extensions\platform_keys\subtle_crypto.js" type="BINDATA" />
           <include name="IDR_PLATFORM_KEYS_UTILS_JS" file="extensions\platform_keys\utils.js" type="BINDATA" />
+        </if>
+        <if expr="chromeos">
+          <include name="IDR_CERTIFICATE_PROVIDER_CUSTOM_BINDINGS_JS" file="extensions\certificate_provider_custom_bindings.js" type="BINDATA" />
+          <include name="IDR_FILE_BROWSER_HANDLER_CUSTOM_BINDINGS_JS" file="extensions\file_browser_handler_custom_bindings.js" type="BINDATA" />
+          <include name="IDR_FILE_MANAGER_PRIVATE_CUSTOM_BINDINGS_JS" file="extensions\file_manager_private_custom_bindings.js" type="BINDATA" />
+          <include name="IDR_FILE_SYSTEM_PROVIDER_CUSTOM_BINDINGS_JS" file="extensions\file_system_provider_custom_bindings.js" type="BINDATA" />
           <include name="IDR_TERMINAL_PRIVATE_CUSTOM_BINDINGS_JS" file="extensions\terminal_private_custom_bindings.js" type="BINDATA" />
 
           <!-- ChromeOS IME Mojo service and bindings. -->