()
| 666 | |
| 667 | #[test] |
| 668 | fn creds_fail_when_keypair_cannot_load() { |
| 669 | // Identity resolved but its signing key can't be loaded — no token can |
| 670 | // be minted. This stands in for an "expired"/unusable credential, which |
| 671 | // in this self-signed-JWT model means "cannot sign right now". |
| 672 | let issue = evaluate_push_credentials(false, Some("alice"), Some("alice"), |_| false); |
| 673 | assert_eq!( |
| 674 | issue, |
| 675 | Some(CredentialIssue::KeypairUnavailable { |
| 676 | name: "alice".to_string() |
| 677 | }) |
| 678 | ); |
| 679 | } |
| 680 | |
| 681 | #[test] |
| 682 | fn credential_issue_messages_are_actionable() { |
nothing calls this directly
no test coverage detected