auth: Make luci-go services trust signatures produced by the token server.

server/auth/authtest/db.go

 // Copyright 2015 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package authtest
 
 import (
         "net"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/server/secrets"
 
         "github.com/luci/luci-go/server/auth"
         "github.com/luci/luci-go/server/auth/authdb"
         "github.com/luci/luci-go/server/auth/identity"
+        "github.com/luci/luci-go/server/auth/signing"
 )
 
 // FakeDB implements user group checking part of db.DB (IsMember).
 //
 // It is a mapping "identity -> list of its groups". Intended to be used mostly
 // for testing request handlers, thus all other DB methods (that used by auth
 // system when authenticating the request) is not implement and panic when
 // called: the wast majority of request handlers are not calling them.
 type FakeDB map[identity.Identity][]string
 
@@ skipping 23 matching lines @@
 // IsAllowedOAuthClientID is part of authdb.DB interface. Panics.
 func (db FakeDB) IsAllowedOAuthClientID(c context.Context, email, clientID string) (bool, error) {
         panic("FakeDB.IsAllowedOAuthClientID must not be called")
 }
 
 // SharedSecrets is part of authdb.DB interface. Panics.
 func (db FakeDB) SharedSecrets(c context.Context) (secrets.Store, error) {
         panic("FakeDB.SharedSecrets must not be called")
 }
 
+// GetCertificates is part of authdb.DB interface. Panics.
+func (db FakeDB) GetCertificates(c context.Context, id identity.Identity) (*signing.PublicCertificates, error) {
+        panic("FakeDB.GetCertificates must not be called")
+}
+
 // GetWhitelistForIdentity is part of authdb.DB interface. Panics.
 func (db FakeDB) GetWhitelistForIdentity(c context.Context, ident identity.Identity) (string, error) {
         panic("FakeDB.GetWhitelistForIdentity must not be called")
 }
 
 // IsInWhitelist is part of authdb.DB interface. Panics.
 func (db FakeDB) IsInWhitelist(c context.Context, ip net.IP, whitelist string) (bool, error) {
         panic("FakeDB.IsInWhitelist must not be called")
 }
 
@@ skipping 26 matching lines @@
 }
 
 // Use installs the fake db into the context.
 func (db *FakeErroringDB) Use(c context.Context) context.Context {
         return auth.ModifyConfig(c, func(cfg *auth.Config) {
                 cfg.DBProvider = func(context.Context) (authdb.DB, error) {
                         return db, nil
                 }
         })
 }