t
2bbf42b741
Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.
31 lines
736 B
Go
31 lines
736 B
Go
package response
|
|
|
|
import (
|
|
"encoding/json"
|
|
"testing"
|
|
|
|
"code.tczkiot.com/wlw/ai-agent/internal/models"
|
|
)
|
|
|
|
func TestBuildAIConfigResponseOmitsAPIKey(t *testing.T) {
|
|
payload, err := json.Marshal(BuildAIConfigResponse(&models.AIConfig{
|
|
ID: 1,
|
|
Name: "test",
|
|
APIKey: "sk-secret",
|
|
}))
|
|
if err != nil {
|
|
t.Fatalf("marshal response error = %v", err)
|
|
}
|
|
|
|
var decoded map[string]any
|
|
if err := json.Unmarshal(payload, &decoded); err != nil {
|
|
t.Fatalf("unmarshal response error = %v", err)
|
|
}
|
|
if _, ok := decoded["apiKey"]; ok {
|
|
t.Fatalf("apiKey should not be exposed: %s", payload)
|
|
}
|
|
if got, ok := decoded["hasApiKey"].(bool); !ok || !got {
|
|
t.Fatalf("hasApiKey = %v, want true: %s", decoded["hasApiKey"], payload)
|
|
}
|
|
}
|