token-server: Delegation config import, validation and evaluation.

tokenserver/appengine/utils/identityset/identityset_test.go

Index: tokenserver/appengine/utils/identityset/identityset_test.go
diff --git a/tokenserver/appengine/utils/identityset/identityset_test.go b/tokenserver/appengine/utils/identityset/identityset_test.go
index f4e87ca06d4e24a0a3e765d3366e7e7846c9ede2..e59f4e70d5ba788924b2462551fd807d2b18877a 100644
--- a/tokenserver/appengine/utils/identityset/identityset_test.go
+++ b/tokenserver/appengine/utils/identityset/identityset_test.go
@@ -23,6 +23,7 @@ func TestFromStrings(t *testing.T) {
 		So(err, ShouldBeNil)
 		So(s, ShouldResemble, &Set{})
 		So(s.IsEmpty(), ShouldBeTrue)
+		So(s.ToStrings(), ShouldResemble, []string{})
 	})
 
 	Convey("Universal", t, func() {
@@ -30,6 +31,7 @@ func TestFromStrings(t *testing.T) {
 		So(err, ShouldBeNil)
 		So(s, ShouldResemble, &Set{All: true})
 		So(s.IsEmpty(), ShouldBeFalse)
+		So(s.ToStrings(), ShouldResemble, []string{"*"})
 	})
 
 	Convey("Normal", t, func() {
@@ -54,6 +56,12 @@ func TestFromStrings(t *testing.T) {
 			},
 		})
 		So(s.IsEmpty(), ShouldBeFalse)
+		So(s.ToStrings(), ShouldResemble, []string{
+			"group:abc",
+			"group:def",
+			"user:abc@example.com",
+			"user:def@example.com",
+		})
 	})
 
 	Convey("Bad group entry", t, func() {