token-server: Add protos for new API for generating service account tokens.

tokenserver/client/tokenclient.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package client
 
 import (
         "crypto/x509"
         "fmt"
 
         "github.com/golang/protobuf/proto"
         "golang.org/x/net/context"
         "google.golang.org/grpc"
         "google.golang.org/grpc/codes"
 
         "github.com/luci/luci-go/common/clock"
         "github.com/luci/luci-go/common/errors"
         "github.com/luci/luci-go/common/proto/google"
         "github.com/luci/luci-go/grpc/grpcutil"
 
         "github.com/luci/luci-go/tokenserver/api/minter/v1"
 )
 
 // Client can make signed requests to the token server.
 type Client struct {
         // Client is interface to use for raw RPC calls to the token server.
         //
         // Use minter.NewTokenMinterClient (or NewTokenMinterPRPCClient) to
         // create it. Note that transport-level authentication is not needed.
-        Client minter.TokenMinterClient
+        Client TokenMinterClient
 
         // Signer knows how to sign requests using some private key.
         Signer Signer
 }
 
+// TokenMinterClient is subset of minter.TokenMinterClient this package uses.
+type TokenMinterClient interface {
+        // MintMachineToken generates a new token for an authenticated machine.
+        MintMachineToken(context.Context, *minter.MintMachineTokenRequest, ...grpc.CallOption) (*minter.MintMachineTokenResponse, error)
+}
+
 // Signer knows how to sign requests using some private key.
 type Signer interface {
         // Algo returns an algorithm that the signer implements.
         Algo(ctx context.Context) (x509.SignatureAlgorithm, error)
 
         // Certificate returns ASN.1 DER blob with the certificate of the signer.
         Certificate(ctx context.Context) ([]byte, error)
 
         // Sign signs a blob using the private key.
         Sign(ctx context.Context, blob []byte) ([]byte, error)
@@ skipping 90 matching lines @@
                 }
         }
 
         // Must not happen. But better return an error than nil-panic if it does.
         if resp.TokenResponse == nil {
                 return nil, fmt.Errorf("token server didn't return a token")
         }
 
         return resp.TokenResponse, nil
 }