auth: Make luci-go services trust signatures produced by the token server.

server/auth/delegation/checker_test.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package delegation
 
 import (
         "encoding/base64"
         "os"
         "strings"
@@ skipping 170 matching lines @@
         signerID string
 }
 
 func newFakeTokenMinter() *fakeTokenMinter {
         return &fakeTokenMinter{
                 signer:   signingtest.NewSigner(0, nil),
                 signerID: "service:fake-signer",
         }
 }
 
-func (f *fakeTokenMinter) GetAuthServiceCertificates(c context.Context) (*signing.PublicCertificates, error) {
+func (f *fakeTokenMinter) GetCertificates(c context.Context, id identity.Identity) (*signing.PublicCertificates, error) {
         return f.signer.Certificates(c)
 }
 
 func (f *fakeTokenMinter) mintToken(c context.Context, subtoken *messages.Subtoken) string {
         blob, err := proto.Marshal(subtoken)
         if err != nil {
                 panic(err)
         }
         keyID, sig, err := f.signer.SignBytes(c, blob)
         if err != nil {
@@ skipping 15 matching lines @@
 type fakeGroups struct {
         groups map[string]string // if nil == no group checks
 }
 
 func (f *fakeGroups) IsMember(c context.Context, id identity.Identity, group string) (bool, error) {
         if f.groups == nil {
                 return true, nil
         }
         return f.groups[group] == string(id), nil
 }