[nexus] include oxide-scim- prefix in SCIM token response (#9301)

david-crespo · web-flow · commit a019b5954639 · 2025-10-29T00:43:11.000Z
Closes #9300
diff --git a/nexus/db-model/src/scim_client_bearer_token.rs b/nexus/db-model/src/scim_client_bearer_token.rs
@@ -47,7 +47,7 @@ impl From<ScimClientBearerToken> for views::ScimClientBearerTokenValue {
             id: t.id,
             time_created: t.time_created,
             time_expires: t.time_expires,
-            bearer_token: t.bearer_token,
+            bearer_token: format!("oxide-scim-{}", t.bearer_token),
         }
     }
 }
diff --git a/nexus/tests/integration_tests/scim.rs b/nexus/tests/integration_tests/scim.rs
@@ -446,7 +446,7 @@ async fn test_scim_client_token_bearer_auth(
     RequestBuilder::new(client, Method::GET, "/scim/v2/Users")
         .header(
             http::header::AUTHORIZATION,
-            format!("Bearer oxide-scim-{}", created_token.bearer_token),
+            format!("Bearer {}", created_token.bearer_token),
         )
         .allow_non_dropshot_errors()
         .expect_status(Some(StatusCode::INTERNAL_SERVER_ERROR))

Original file line number	Diff line number	Diff line change
`@@ -47,7 +47,7 @@ impl From<ScimClientBearerToken> for views::ScimClientBearerTokenValue {`
`47`	`47`	`id: t.id,`
`48`	`48`	`time_created: t.time_created,`
`49`	`49`	`time_expires: t.time_expires,`
`50`		`- bearer_token: t.bearer_token,`
	`50`	`+ bearer_token: format!("oxide-scim-{}", t.bearer_token),`
`51`	`51`	`}`
`52`	`52`	`}`
`53`	`53`	`}`
Original file line number	Diff line number	Diff line change
`@@ -446,7 +446,7 @@ async fn test_scim_client_token_bearer_auth(`
`446`	`446`	`RequestBuilder::new(client, Method::GET, "/scim/v2/Users")`
`447`	`447`	`.header(`
`448`	`448`	`http::header::AUTHORIZATION,`
`449`		`- format!("Bearer oxide-scim-{}", created_token.bearer_token),`
	`449`	`+ format!("Bearer {}", created_token.bearer_token),`
`450`	`450`	`)`
`451`	`451`	`.allow_non_dropshot_errors()`
`452`	`452`	`.expect_status(Some(StatusCode::INTERNAL_SERVER_ERROR))`