package bus

import (
	"encoding/json"
	"testing"
)

// A value naming a credential anywhere in it is found (novox/hq ADR 0201) — the guard against the
// ordinary mistake — and a value that only mentions tokens as a count is not.
func TestACredentialNamedFieldIsFoundAnywhereInAValue(t *testing.T) {
	for value, want := range map[string]string{
		`{"url":"http://x","headers":{"Authorization":"Bearer s"}}`: "Authorization",
		`[{"name":"a","env":{"API_KEY":"s"}}]`:                      "API_KEY",
		`{"refresh_token":"s"}`:                                     "refresh_token",
		`{"clientSecret":"s"}`:                                      "clientSecret",
		`{"maxTokens":4096,"name":"a","generation":3}`:              "",
		`"just a string"`:                                           "",
	} {
		if got := credentialField(json.RawMessage(value)); got != want {
			t.Errorf("%s: found %q, want %q", value, got, want)
		}
	}
}