Function TestServeHTTP_StripCoderToken

coderd/aibridged/aibridged_test.go:407–508

(t *testing.T)

}

func TestServeHTTP_StripCoderToken(t *testing.T) {
	t.Parallel()

	cases := []struct {
		name          string
		reqHeaders    map[string]string
		expectPresent map[string]string // header → expected value
		expectAbsent  []string          // headers that must be gone
	}{
		{
			// Centralized: the client sets Authorization and X-Api-Key,
			// but does not include HeaderCoderToken.
			// All auth headers are stripped.
			name: "centralized",
			reqHeaders: map[string]string{
				"Authorization": "Bearer coder-token",
				"X-Api-Key":     "sk-ant-api03-user-key",
			},
			expectAbsent: []string{
				"Authorization",
				"X-Api-Key",
				agplaibridge.HeaderCoderToken,
			},
		},
		{
			// BYOK with access token: Coder token in BYOK header,
			// user's access token in Authorization. Only the
			// BYOK header is stripped.
			name: "byok bearer token",
			reqHeaders: map[string]string{
				agplaibridge.HeaderCoderToken: "coder-token",
				"Authorization":               "Bearer sk-ant-oat01-user-oauth-token",
			},
			expectPresent: map[string]string{
				"Authorization": "Bearer sk-ant-oat01-user-oauth-token",
			},
			expectAbsent: []string{
				agplaibridge.HeaderCoderToken,
			},
		},
		{
			// BYOK with personal API key: Coder token in BYOK header,
			// user's API key in X-Api-Key. Only the BYOK header is
			// stripped.
			name: "byok api key",
			reqHeaders: map[string]string{
				agplaibridge.HeaderCoderToken: "coder-token",
				"X-Api-Key":                   "sk-ant-api03-user-key",
			},
			expectPresent: map[string]string{
				"X-Api-Key": "sk-ant-api03-user-key",
			},
			expectAbsent: []string{
				agplaibridge.HeaderCoderToken,
			},
		},
	}