Function TestOpenAI_CreateInterceptor

provider/openai_test.go:198–326

(t *testing.T)

}

func TestOpenAI_CreateInterceptor(t *testing.T) {
	t.Parallel()

	tests := []struct {
		name               string
		route              string
		requestBody        string
		responseBody       string
		setHeaders         map[string]string
		wantAuthorization  string
		wantCredentialKind intercept.CredentialKind
		wantCredentialHint string
	}{
		{
			name:               "ChatCompletions_BYOK",
			route:              routeChatCompletions,
			requestBody:        `{"model": "gpt-4", "messages": [{"role": "user", "content": "hello"}], "stream": false}`,
			responseBody:       chatCompletionResponse,
			setHeaders:         map[string]string{"Authorization": "Bearer user-token"},
			wantAuthorization:  "Bearer user-token",
			wantCredentialKind: intercept.CredentialKindBYOK,
			wantCredentialHint: "us...en",
		},
		{
			name:               "ChatCompletions_Centralized",
			route:              routeChatCompletions,
			requestBody:        `{"model": "gpt-4", "messages": [{"role": "user", "content": "hello"}], "stream": false}`,
			responseBody:       chatCompletionResponse,
			setHeaders:         map[string]string{},
			wantAuthorization:  "Bearer centralized-key",
			wantCredentialKind: intercept.CredentialKindCentralized,
			wantCredentialHint: "ce...ey",
		},
		{
			name:               "Responses_BYOK",
			route:              routeResponses,
			requestBody:        `{"model": "gpt-5", "input": "hello", "stream": false}`,
			responseBody:       responsesAPIResponse,
			setHeaders:         map[string]string{"Authorization": "Bearer user-token"},
			wantAuthorization:  "Bearer user-token",
			wantCredentialKind: intercept.CredentialKindBYOK,
			wantCredentialHint: "us...en",
		},
		{
			name:               "Responses_Centralized",
			route:              routeResponses,
			requestBody:        `{"model": "gpt-5", "input": "hello", "stream": false}`,
			responseBody:       responsesAPIResponse,
			setHeaders:         map[string]string{},
			wantAuthorization:  "Bearer centralized-key",
			wantCredentialKind: intercept.CredentialKindCentralized,
			wantCredentialHint: "ce...ey",
		},
		// X-Api-Key should not appear in production since clients use Authorization,
		// but ensure it is stripped if it does arrive.
		{
			name:         "ChatCompletions_BYOK_XApiKeyStripped",
			route:        routeChatCompletions,