Add test to check action_code is removed from validate_challenge response

Author: stevenclouston

authsignal/client_tests.py

@@ -201,8 +201,7 @@ def test_validate_challenge_returns_success_true_if_no_user_id_is_provided(self)
                 'state': 'CHALLENGE_SUCCEEDED', 
                 'stateUpdatedAt': '2024-07-11T22:39:23.613Z', 
                 'userId': 'legitimate_user_id', 
-                'action': 'signin', 
-                'actionCode': 'signin',
+                'action': 'signin',
                 'idempotencyKey': '6d09db21-1aa9-4b7f-826f-dbc6a0af79eb', 
                 'verificationMethod': 'EMAIL_MAGIC_LINK'
             },
@@ -215,5 +214,25 @@ def test_validate_challenge_returns_success_true_if_no_user_id_is_provided(self)
         self.assertEqual(response["state"], "CHALLENGE_SUCCEEDED")
         self.assertTrue(response["is_valid"])
 
+    @responses.activate
+    def test_action_code_is_omitted_from_validate_challenge_response(self):
+        responses.add(responses.POST, f"{base_url}/validate",
+            json={
+                'isValid': True, 
+                'state': 'CHALLENGE_SUCCEEDED', 
+                'stateUpdatedAt': '2024-07-11T22:39:23.613Z', 
+                'userId': 'legitimate_user_id', 
+                'action': 'signin', 
+                'actionCode': 'signin',
+                'idempotencyKey': '6d09db21-1aa9-4b7f-826f-dbc6a0af79eb', 
+                'verificationMethod': 'EMAIL_MAGIC_LINK'
+            },
+            status=200
+        )
+
+        response = self.authsignal_client.validate_challenge(token=self.jwt_token)
+
+        self.assertNotIn("action_code", response)
+
 if __name__ == "__main__":
     unittest.main()