auth: Remove "shared" aka "global" secrets.

server/auth/authdb/snapshot_test.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package authdb
 
 import (
         "encoding/json"
         "net"
         "net/http"
         "testing"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/server/auth/identity"
         "github.com/luci/luci-go/server/auth/internal"
         "github.com/luci/luci-go/server/auth/service/protocol"
         "github.com/luci/luci-go/server/auth/signing"
         "github.com/luci/luci-go/server/auth/signing/signingtest"
-        "github.com/luci/luci-go/server/secrets"
 
         . "github.com/smartystreets/goconvey/convey"
 )
 
 func TestSnapshotDB(t *testing.T) {
         Convey("IsAllowedOAuthClientID works", t, func() {
                 c := context.Background()
                 db, err := NewSnapshotDB(&protocol.AuthDB{
                         OauthClientId: strPtr("primary-client-id"),
                         OauthAdditionalClientIds: []string{
@@ skipping 62 matching lines @@
 
                 So(call("user:abc@example.com", "cycle"), ShouldBeFalse)
                 So(call("user:abc@example.com", "unknown"), ShouldBeFalse)
                 So(call("user:abc@example.com", "unknown nested"), ShouldBeFalse)
 
                 So(call("user:abc@example.com"), ShouldBeFalse)
                 So(call("user:abc@example.com", "unknown", "direct"), ShouldBeTrue)
                 So(call("user:abc@example.com", "via glob", "direct"), ShouldBeTrue)
         })
 
-        Convey("SharedSecrets works", t, func() {
-                c := context.Background()
-                db, err := NewSnapshotDB(&protocol.AuthDB{
-                        Secrets: []*protocol.AuthSecret{
-                                {
-                                        Name: strPtr("secret-1"),
-                                        Values: [][]byte{
-                                                []byte("current"),
-                                        },
-                                },
-                                {
-                                        Name: strPtr("secret-2"),
-                                        Values: [][]byte{
-                                                []byte("current"),
-                                                []byte("prev1"),
-                                                []byte("prev2"),
-                                        },
-                                },
-                                {
-                                        Name: strPtr("empty"),
-                                },
-                        },
-                }, "http://auth-service", 1234)
-                So(err, ShouldBeNil)
-
-                s, err := db.SharedSecrets(c)
-                So(err, ShouldBeNil)
-                So(s, ShouldResemble, secrets.StaticStore{
-                        "secret-1": {
-                                Current: secrets.NamedBlob{Blob: []byte("current")},
-                        },
-                        "secret-2": {
-                                Current: secrets.NamedBlob{Blob: []byte("current")},
-                                Previous: []secrets.NamedBlob{
-                                        {Blob: []byte("prev1")},
-                                        {Blob: []byte("prev2")},
-                                },
-                        },
-                })
-        })
-
         Convey("GetCertificates works", t, func(c C) {
                 db, err := NewSnapshotDB(&protocol.AuthDB{
                         OauthClientId: strPtr("primary-client-id"),
                         OauthAdditionalClientIds: []string{
                                 "additional-client-id-1",
                                 "additional-client-id-2",
                         },
                         TokenServerUrl: strPtr("http://token-server"),
                 }, "http://auth-service", 1234)
                 So(err, ShouldBeNil)
@@ skipping 122 matching lines @@
                         },
                 },
         }, "http://auth-service", 1234)
 
         b.ResetTimer()
 
         for i := 0; i < b.N; i++ {
                 db.IsMember(c, "user:somedude@example.com", "outer")
         }
 }