From ed170a8fefd7783fc08fd254bd7585a6d9e30605 Mon Sep 17 00:00:00 2001
From: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
Date: Thu, 30 Jul 2026 19:34:59 +0800
Subject: [PATCH] test(auth): strengthen identity guardrail isolation

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
---
 .../skillhub/auth/oauth/OAuthAdapterBoundaryTest.java       | 2 ++
 .../auth/token/ApiTokenAuthenticationFilterTest.java        | 6 ++++++
 2 files changed, 8 insertions(+)

diff --git a/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/oauth/OAuthAdapterBoundaryTest.java b/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/oauth/OAuthAdapterBoundaryTest.java
index 12bc9790..422d87e7 100644
--- a/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/oauth/OAuthAdapterBoundaryTest.java
+++ b/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/oauth/OAuthAdapterBoundaryTest.java
@@ -11,8 +11,10 @@ import org.junit.jupiter.api.Test;
 class OAuthAdapterBoundaryTest {
 
     private static final List<Class<?>> ADAPTERS = List.of(
+            OAuthClaimsExtractor.class,
             GitHubClaimsExtractor.class,
             GitLabClaimsExtractor.class,
+            CustomOAuth2UserService.class,
             CustomOidcUserService.class);
 
     private static final List<String> FORBIDDEN_DEPENDENCIES = List.of(
diff --git a/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/token/ApiTokenAuthenticationFilterTest.java b/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/token/ApiTokenAuthenticationFilterTest.java
index d9f030a9..fa9fb2cf 100644
--- a/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/token/ApiTokenAuthenticationFilterTest.java
+++ b/server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/token/ApiTokenAuthenticationFilterTest.java
@@ -10,6 +10,7 @@ import com.iflytek.skillhub.domain.user.UserAccount;
 import com.iflytek.skillhub.domain.user.UserAccountRepository;
 import com.iflytek.skillhub.domain.user.UserStatus;
 import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
 import org.springframework.mock.web.MockFilterChain;
 import org.springframework.mock.web.MockHttpServletRequest;
@@ -43,6 +44,11 @@ class ApiTokenAuthenticationFilterTest {
         scopeService
     );
 
+    @BeforeEach
+    void initializeSecurityContext() {
+        SecurityContextHolder.clearContext();
+    }
+
     @AfterEach
     void clearSecurityContext() {
         SecurityContextHolder.clearContext();