From 06617891fafa7c73c1c7110d404cb0a76812842d Mon Sep 17 00:00:00 2001 From: kolaente Date: Wed, 4 Mar 2026 19:56:45 +0100 Subject: [PATCH] test: verify email masking for external team name search --- pkg/webtests/user_project_test.go | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pkg/webtests/user_project_test.go b/pkg/webtests/user_project_test.go index f249899b2..9dc6d598f 100644 --- a/pkg/webtests/user_project_test.go +++ b/pkg/webtests/user_project_test.go @@ -83,4 +83,13 @@ func TestUserProject(t *testing.T) { require.NoError(t, err) assert.NotContains(t, rec.Body.String(), `user2`) }) + t.Run("external team member email masked when searching by name", func(t *testing.T) { + // User 10 searches for "Some one else" (user 11's name). + // Even though user 11 is found via external team, their email should be masked + // because the search was by name, not by email. + rec, err := newTestRequestWithUser(t, http.MethodPost, apiv1.UserList, &testuser10, "", map[string][]string{"s": {"Some one else"}}, nil) + require.NoError(t, err) + assert.Contains(t, rec.Body.String(), `user11`) + assert.NotContains(t, rec.Body.String(), `user11@example.com`) + }) }