From 5048ff8c696bbd3f4f9b78738062aa0688c310ae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=AE=89=E6=AD=A3=E8=B6=85?= <anzhengchao@gmail.com>
Date: Tue, 14 Apr 2026 13:57:23 +0800
Subject: [PATCH] test(credentials): cover URL-safe secret keys (#2524)

---
 crates/credentials/src/credentials.rs | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/crates/credentials/src/credentials.rs b/crates/credentials/src/credentials.rs
index 5346b5082..ee91be452 100644
--- a/crates/credentials/src/credentials.rs
+++ b/crates/credentials/src/credentials.rs
@@ -474,6 +474,16 @@ mod tests {
         }
     }
 
+    #[test]
+    fn test_gen_secret_key_uses_url_safe_base64_without_padding() {
+        let key = gen_secret_key(32).expect("secret key should generate");
+
+        assert_eq!(key.len(), 32);
+        assert!(!key.contains('/'));
+        assert!(!key.contains('+'));
+        assert!(!key.contains('='));
+    }
+
     #[test]
     fn test_masked_debug() {
         // Test None