token-server: Delegation config import, validation and evaluation.

server/auth/authtest/state.go

 // Copyright 2015 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package authtest
 
 import (
         "net"
 
         "github.com/luci/luci-go/server/auth"
@@ skipping 15 matching lines @@
         //
         // identity.AnonymousIdentity if not set.
         Identity identity.Identity
 
         // IdentityGroups is list of groups the calling identity belongs to.
         IdentityGroups []string
 
         // Error if not nil is returned by IsMember checks.
         Error error
 
+        // FakeDB is a mock authdb.DB implementation to use.
+        //
+        // If not nil, overrides 'IdentityGroups' and 'Error'.
+        FakeDB authdb.DB
+
         // PeerIdentityOverride may be set for PeerIdentity() to return custom value.
         //
         // By default PeerIdentity() returns Identity (i.e. no delegation is
         // happening).
         PeerIdentityOverride identity.Identity
 
         // PeerIPOverride may be set for PeerIP() to return custom value.
         //
         // By default PeerIP() returns "127.0.0.1".
         PeerIPOverride net.IP
 }
 
 var _ auth.State = (*FakeState)(nil)
 
 // DB is part of State interface.
 func (s *FakeState) DB() authdb.DB {
+        if s.FakeDB != nil {
+                return s.FakeDB
+        }
         return &FakeErroringDB{
                 FakeDB: FakeDB{s.User().Identity: s.IdentityGroups},
                 Error:  s.Error,
         }
 }
 
 // Method is part of State interface.
 func (s *FakeState) Method() auth.Method {
         return &FakeAuth{
                 User: s.User(),
@@ skipping 20 matching lines @@
         return s.PeerIdentityOverride
 }
 
 // PeerIP is part of State interface.
 func (s *FakeState) PeerIP() net.IP {
         if s.PeerIPOverride == nil {
                 return net.ParseIP("127.0.0.1")
         }
         return s.PeerIPOverride
 }