[Findit] Use PubSub built-in authentication for push endpoint.

[Findit] Use PubSub built-in authentication for push endpoint.

After b/25788912, subscription in the same project as the push endpoint could bypass the authentication as shown in this CL. The authentication approach is described in https://cloud.google.com/pubsub/prereqs.

This approach is verified through dummy apps on both appspot and googleplex.
That means Fracas could also do push delivery instead of pull.

BUG=600460
Committed: https://chromium.googlesource.com/infra/infra/+/24b1aae2d3e97b2fc14deae85b73691535157aae

[stgao, 2016-05-03 00:46:45]

Description was changed from

==========
[Findit] Use PubSub built-in authentication for push endpoint.

BUG=600460
==========

to

==========
[Findit] Use PubSub built-in authentication for push endpoint.

After b/25788912, subscription in the same project as the push endpoint could
bypass the authentication as shown in this CL. The authentication approach is
described in https://cloud.google.com/pubsub/prereqs.

This approach is verified through dummy apps on both appspot and googleplex.
That means Fracas could also do push delivery instead of pull.

BUG=600460
==========

[stgao, 2016-05-03 00:48:06]

stgao@chromium.org changed reviewers:
+ katesonia@chromium.org, mbarbella@chromium.org, mimee@chromium.org

[stgao, 2016-05-03 00:48:07]

ptal

[Martin Barbella, 2016-05-03 05:22:19]

lgtm

[stgao, 2016-05-03 05:48:15]

The CQ bit was checked by stgao@chromium.org

[commit-bot: I haz the power, 2016-05-03 05:48:22]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1940843003/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1940843003/20001

[commit-bot: I haz the power, 2016-05-03 05:52:16]

Description was changed from

==========
[Findit] Use PubSub built-in authentication for push endpoint.

After b/25788912, subscription in the same project as the push endpoint could
bypass the authentication as shown in this CL. The authentication approach is
described in https://cloud.google.com/pubsub/prereqs.

This approach is verified through dummy apps on both appspot and googleplex.
That means Fracas could also do push delivery instead of pull.

BUG=600460
==========

to

==========
[Findit] Use PubSub built-in authentication for push endpoint.

After b/25788912, subscription in the same project as the push endpoint could
bypass the authentication as shown in this CL. The authentication approach is
described in https://cloud.google.com/pubsub/prereqs.

This approach is verified through dummy apps on both appspot and googleplex.
That means Fracas could also do push delivery instead of pull.

BUG=600460

Committed:
https://chromium.googlesource.com/infra/infra/+/24b1aae2d3e97b2fc14deae85b736...
==========

[commit-bot: I haz the power, 2016-05-03 05:52:18]

Committed patchset #2 (id:20001) as
https://chromium.googlesource.com/infra/infra/+/24b1aae2d3e97b2fc14deae85b736...