auth: Remove "shared" aka "global" secrets.

server/auth/authdb/erroring.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package authdb
 
 import (
         "net"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/common/logging"
         "github.com/luci/luci-go/server/auth/identity"
         "github.com/luci/luci-go/server/auth/signing"
-        "github.com/luci/luci-go/server/secrets"
 )
 
 // ErroringDB implements DB by forbidding all access and returning errors.
 type ErroringDB struct {
         Error error // returned by all calls
 }
 
 // IsAllowedOAuthClientID returns true if given OAuth2 client_id can be used
 // to authenticate access for given email.
 func (db ErroringDB) IsAllowedOAuthClientID(c context.Context, email, clientID string) (bool, error) {
         logging.Errorf(c, "%s", db.Error)
         return false, db.Error
 }
 
 // IsMember returns true if the given identity belongs to any of the groups.
 //
 // Unknown groups are considered empty. May return errors if underlying
 // datastore has issues.
 func (db ErroringDB) IsMember(c context.Context, id identity.Identity, groups ...string) (bool, error) {
         logging.Errorf(c, "%s", db.Error)
         return false, db.Error
 }
 
-// SharedSecrets is secrets.Store with secrets in Auth DB.
-//
-// Such secrets are usually generated on central Auth Service and are known
-// to all trusted services (so that they can use them to exchange data).
-func (db ErroringDB) SharedSecrets(c context.Context) (secrets.Store, error) {
-        logging.Errorf(c, "%s", db.Error)
-        return nil, db.Error
-}
-
 // GetCertificates returns a bundle with certificates of a trusted signer.
 func (db ErroringDB) GetCertificates(c context.Context, id identity.Identity) (*signing.PublicCertificates, error) {
         logging.Errorf(c, "%s", db.Error)
         return nil, db.Error
 }
 
 // GetWhitelistForIdentity returns name of the IP whitelist to use to check
 // IP of requests from given `ident`.
 //
 // It's used to restrict access for certain account to certain IP subnets.
@@ skipping 15 matching lines @@
 
 // GetAuthServiceURL returns root URL ("https://<host>") of the auth service.
 func (db ErroringDB) GetAuthServiceURL(c context.Context) (string, error) {
         return "", db.Error
 }
 
 // GetTokenServiceURL returns root URL ("https://<host>") of the token service.
 func (db ErroringDB) GetTokenServiceURL(c context.Context) (string, error) {
         return "", db.Error
 }