From efbc550dc90a3cc7013c80933b10e1029c2f5c73 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Mon, 11 May 2026 13:05:47 +0100
Subject: [PATCH] test: tighten gateway helper assertions

---
 src/gateway/server.config-patch.test.ts              |  8 +++-----
 .../ws-connection/handshake-auth-helpers.test.ts     | 12 ++++++------
 2 files changed, 9 insertions(+), 11 deletions(-)

diff --git a/src/gateway/server.config-patch.test.ts b/src/gateway/server.config-patch.test.ts
index 03b55ffead1a..b78a9016abb2 100644
--- a/src/gateway/server.config-patch.test.ts
+++ b/src/gateway/server.config-patch.test.ts
@@ -288,11 +288,9 @@ describe("gateway config methods", () => {
     expect(res.payload?.path).toBe("gateway.auth");
     expect(res.payload?.hintPath).toBe("gateway.auth");
     const tokenChild = res.payload?.children?.find((child) => child.key === "token");
-    expect(tokenChild).toMatchObject({
-      key: "token",
-      path: "gateway.auth.token",
-      hintPath: "gateway.auth.token",
-    });
+    expect(tokenChild?.key).toBe("token");
+    expect(tokenChild?.path).toBe("gateway.auth.token");
+    expect(tokenChild?.hintPath).toBe("gateway.auth.token");
     expect(res.payload?.schema?.properties).toBeUndefined();
   });
 
diff --git a/src/gateway/server/ws-connection/handshake-auth-helpers.test.ts b/src/gateway/server/ws-connection/handshake-auth-helpers.test.ts
index 5f379b8d3811..dc37ce5ad7f5 100644
--- a/src/gateway/server/ws-connection/handshake-auth-helpers.test.ts
+++ b/src/gateway/server/ws-connection/handshake-auth-helpers.test.ts
@@ -34,12 +34,12 @@ describe("handshake auth helpers", () => {
       browserRateLimiter,
     });
 
-    expect(resolved).toMatchObject({
-      hasBrowserOriginHeader: true,
-      enforceOriginCheckForAnyClient: true,
-      rateLimitClientIp: `${BROWSER_ORIGIN_RATE_LIMIT_KEY_PREFIX}https://app.example`,
-      authRateLimiter: browserRateLimiter,
-    });
+    expect(resolved.hasBrowserOriginHeader).toBe(true);
+    expect(resolved.enforceOriginCheckForAnyClient).toBe(true);
+    expect(resolved.rateLimitClientIp).toBe(
+      `${BROWSER_ORIGIN_RATE_LIMIT_KEY_PREFIX}https://app.example`,
+    );
+    expect(resolved.authRateLimiter).toBe(browserRateLimiter);
   });
 
   it("falls back to the legacy synthetic ip when the browser origin is invalid", () => {