()
| 441 | |
| 442 | #[test] |
| 443 | fn extract_roles_groups_path() { |
| 444 | // Okta style: groups claim |
| 445 | let json = serde_json::json!({ |
| 446 | "sub": "user1", |
| 447 | "groups": ["everyone", "openshell-admin"] |
| 448 | }); |
| 449 | let mut claims: OidcClaims = serde_json::from_value(json).unwrap(); |
| 450 | claims.extract_roles("groups"); |
| 451 | assert_eq!(claims.roles, vec!["everyone", "openshell-admin"]); |
| 452 | } |
| 453 | |
| 454 | #[test] |
| 455 | fn extract_roles_missing_claim() { |
nothing calls this directly
no test coverage detected