auth: Make luci-go services trust signatures produced by the token server.

server/auth/signing/signingtest/signer.go

 // Copyright 2015 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package signingtest
 
 import (
         "crypto"
         "crypto/rsa"
         "crypto/sha1"
@@ skipping 49 matching lines @@
         keyName := sha1.Sum(der)
 
         // Put in default service info if necessary.
         if serviceInfo == nil {
                 serviceInfo = &signing.ServiceInfo{}
         }
 
         return &Signer{
                 priv: priv,
                 certs: signing.PublicCertificates{
+                        AppID:              serviceInfo.AppID,
                         ServiceAccountName: serviceInfo.ServiceAccountName,
                         Certificates: []signing.Certificate{
                                 {
                                         KeyName:            hex.EncodeToString(keyName[:]),
                                         X509CertificatePEM: string(pemOut),
                                 },
                         },
                         Timestamp: signing.JSONTime(time.Unix(1000000000, 0)),
                 },
                 serviceInfo: *serviceInfo,
@@ skipping 29 matching lines @@
 type notRandom struct {
         *rand.Rand
 }
 
 func (r notRandom) Read(p []byte) (n int, err error) {
         for i := range p {
                 p[i] = byte(r.Intn(256))
         }
         return len(p), nil
 }