()
| 713 | |
| 714 | #[test] |
| 715 | fn creds_fail_when_keypair_cannot_load() { |
| 716 | // Identity resolved but its signing key can't be loaded — no token can |
| 717 | // be minted. This stands in for an "expired"/unusable credential, which |
| 718 | // in this self-signed-JWT model means "cannot sign right now". |
| 719 | let issue = evaluate_push_credentials(false, Some("alice"), Some("alice"), |_| false); |
| 720 | assert_eq!( |
| 721 | issue, |
| 722 | Some(CredentialIssue::KeypairUnavailable { |
| 723 | name: "alice".to_string() |
| 724 | }) |
| 725 | ); |
| 726 | } |
| 727 | |
| 728 | #[test] |
| 729 | fn credential_issue_messages_are_actionable() { |
nothing calls this directly
no test coverage detected