auth: Remove "shared" aka "global" secrets.

server/auth/authdb/db.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package authdb
 
 import (
         "net"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/server/auth/identity"
         "github.com/luci/luci-go/server/auth/signing"
-        "github.com/luci/luci-go/server/secrets"
 )
 
 // DB is interface to access a database of authorization related information.
 //
 // It is static read only object that represent snapshot of auth data at some
 // moment in time.
 type DB interface {
         // IsAllowedOAuthClientID returns true if given OAuth2 client_id can be used
         // to authenticate access for given email.
         IsAllowedOAuthClientID(c context.Context, email, clientID string) (bool, error)
 
         // IsMember returns true if the given identity belongs to any of the groups.
         //
         // Unknown groups are considered empty. May return errors if underlying
         // datastore has issues.
         IsMember(c context.Context, id identity.Identity, groups ...string) (bool, error)
 
-        // SharedSecrets is secrets.Store with secrets in Auth DB.
-        //
-        // Such secrets are usually generated on central Auth Service and are known
-        // to all trusted services (so that they can use them to exchange data).
-        SharedSecrets(c context.Context) (secrets.Store, error)
-
         // GetCertificates returns a bundle with certificates of a trusted signer.
         //
         // Returns (nil, nil) if the given signer is not trusted.
         //
         // Returns errors (usually transient) if the bundle can't be fetched.
         GetCertificates(c context.Context, id identity.Identity) (*signing.PublicCertificates, error)
 
         // GetWhitelistForIdentity returns name of the IP whitelist to use to check
         // IP of requests from given `ident`.
         //
@@ skipping 14 matching lines @@
         // Returns an error if the DB implementation is not using an auth service.
         GetAuthServiceURL(c context.Context) (string, error)
 
         // GetTokenServiceURL returns root URL ("https://<host>") of the token server.
         //
         // Returns an error if the DB implementation doesn't know how to retrieve it.
         //
         // Returns ("", nil) if the token server URL is not configured.
         GetTokenServiceURL(c context.Context) (string, error)
 }