()
| 429 | |
| 430 | #[test] |
| 431 | fn extract_roles_flat_path() { |
| 432 | // Entra ID / Okta style: roles at top level |
| 433 | let json = serde_json::json!({ |
| 434 | "sub": "user1", |
| 435 | "roles": ["OpenShell.Admin", "OpenShell.User"] |
| 436 | }); |
| 437 | let mut claims: OidcClaims = serde_json::from_value(json).unwrap(); |
| 438 | claims.extract_roles("roles"); |
| 439 | assert_eq!(claims.roles, vec!["OpenShell.Admin", "OpenShell.User"]); |
| 440 | } |
| 441 | |
| 442 | #[test] |
| 443 | fn extract_roles_groups_path() { |
nothing calls this directly
no test coverage detected