From a3a6a85b73887e8f7961ae25c828d64854f25b9f Mon Sep 17 00:00:00 2001 From: Ritel-T Date: Thu, 3 Sep 2026 23:32:34 +0900 Subject: [PATCH] test(admin): assert nested credential redaction in lite lists --- .../internal/handler/admin/account_handler_list_test.go | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/backend/internal/handler/admin/account_handler_list_test.go b/backend/internal/handler/admin/account_handler_list_test.go index d92a2e1328..f4304eb93d 100644 --- a/backend/internal/handler/admin/account_handler_list_test.go +++ b/backend/internal/handler/admin/account_handler_list_test.go @@ -49,7 +49,13 @@ func TestAccountHandlerListLiteUsesCompactDTOAndETag(t *testing.T) { require.Equal(t, true, liteItem["schedulable"]) require.NotContains(t, liteItem, "groups") require.NotContains(t, liteItem, "account_groups") - require.NotContains(t, liteItem, "access_token") + credentials, ok := liteItem["credentials"].(map[string]any) + require.True(t, ok) + require.Equal(t, "compact@example.com", credentials["email"]) + require.NotContains(t, credentials, "access_token") + credentialsStatus, ok := liteItem["credentials_status"].(map[string]any) + require.True(t, ok) + require.Equal(t, true, credentialsStatus["has_access_token"]) // The ETag must represent the same compact body and return 304 on refresh. rec304 := httptest.NewRecorder()