test: cover token-cache rebuild and supplier exception paths

- DirectCdpTokenProcessorTest: add cases for the rebuild branch
  (cache cleared, cached-but-expired) and the wrap-on-rebuild-failure
  path. DirectCdpTokenProcessor is now at 100% line/branch coverage.
- TokenProcessorSupplierTest: add cases asserting SneakyThrows
  propagates supplier SQLExceptions through getToken / getAudience.

Author: KaviarasuSakthivadivel

jdbc-http/src/test/java/com/salesforce/datacloud/jdbc/auth/DirectCdpTokenProcessorTest.java

@@ -7,6 +7,8 @@
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.junit.jupiter.api.Assertions.assertThrows;
 
+import com.salesforce.datacloud.jdbc.auth.model.DataCloudTokenResponse;
+import java.lang.reflect.Field;
 import java.sql.SQLException;
 import java.util.Properties;
 import java.util.UUID;
@@ -113,6 +115,60 @@ void hasCdpTokenReturnsTrueWhenBothPresent() {
         assertThat(DirectCdpTokenProcessor.hasCdpToken(props)).isTrue();
     }
 
+    @Test
+    void getDataCloudTokenRebuildsWhenCachedTokenExpired() throws Exception {
+        DirectCdpTokenProcessor processor =
+                DirectCdpTokenProcessor.ofDestructive(propertiesForCdpToken(FAKE_TOKEN, TENANT_URL));
+
+        DataCloudTokenResponse expiredResponse = new DataCloudTokenResponse();
+        expiredResponse.setToken(FAKE_TOKEN);
+        expiredResponse.setInstanceUrl(TENANT_URL);
+        expiredResponse.setTokenType("Bearer");
+        expiredResponse.setExpiresIn(-1);
+        DataCloudToken expired = DataCloudToken.of(expiredResponse);
+        assertThat(expired.isAlive()).isFalse();
+
+        Field cache = DirectCdpTokenProcessor.class.getDeclaredField("cachedDataCloudToken");
+        cache.setAccessible(true);
+        cache.set(processor, expired);
+
+        DataCloudToken rebuilt = processor.getDataCloudToken();
+        assertThat(rebuilt).isNotSameAs(expired);
+        assertThat(rebuilt.isAlive()).isTrue();
+    }
+
+    @Test
+    void getDataCloudTokenRebuildsAfterCacheCleared() throws Exception {
+        DirectCdpTokenProcessor processor =
+                DirectCdpTokenProcessor.ofDestructive(propertiesForCdpToken(FAKE_TOKEN, TENANT_URL));
+
+        Field cache = DirectCdpTokenProcessor.class.getDeclaredField("cachedDataCloudToken");
+        cache.setAccessible(true);
+        cache.set(processor, null);
+
+        DataCloudToken rebuilt = processor.getDataCloudToken();
+        assertThat(rebuilt.getAccessToken()).isEqualTo("Bearer " + FAKE_TOKEN);
+        assertThat(rebuilt.getTenantId()).isEqualTo(FAKE_TENANT_ID);
+    }
+
+    @Test
+    void getDataCloudTokenWrapsRebuildFailure() throws Exception {
+        DirectCdpTokenProcessor processor =
+                DirectCdpTokenProcessor.ofDestructive(propertiesForCdpToken(FAKE_TOKEN, TENANT_URL));
+
+        Field cache = DirectCdpTokenProcessor.class.getDeclaredField("cachedDataCloudToken");
+        cache.setAccessible(true);
+        cache.set(processor, null);
+
+        Field tenantUrl = DirectCdpTokenProcessor.class.getDeclaredField("tenantUrl");
+        tenantUrl.setAccessible(true);
+        tenantUrl.set(processor, null);
+
+        SQLException ex = assertThrows(SQLException.class, processor::getDataCloudToken);
+        assertThat(ex.getSQLState()).isEqualTo("28000");
+        assertThat(cache.get(processor)).isNull();
+    }
+
     @Test
     void hasCdpTokenReturnsFalseWhenMissing() {
         assertThat(DirectCdpTokenProcessor.hasCdpToken(new Properties())).isFalse();

jdbc/src/test/java/com/salesforce/datacloud/jdbc/interceptor/TokenProcessorSupplierTest.java

@@ -5,12 +5,14 @@
 package com.salesforce.datacloud.jdbc.interceptor;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
 import static org.mockito.Mockito.mock;
 import static org.mockito.Mockito.when;
 
 import com.salesforce.datacloud.jdbc.auth.DataCloudToken;
 import com.salesforce.datacloud.jdbc.auth.DataCloudTokenProvider;
 import com.salesforce.datacloud.jdbc.auth.DirectCdpTokenProcessor;
+import java.sql.SQLException;
 import java.util.Properties;
 import lombok.val;
 import org.junit.jupiter.api.Test;
@@ -61,4 +63,24 @@ void delegatesToCustomSupplier() throws Exception {
         assertThat(supplier.getToken()).isEqualTo("Bearer custom");
         assertThat(supplier.getAudience()).isEqualTo("custom-tenant");
     }
+
+    @Test
+    void getTokenPropagatesSupplierException() {
+        val supplier = new TokenProcessorSupplier(() -> {
+            throw new SQLException("supplier failed");
+        });
+
+        assertThatThrownBy(supplier::getToken).isInstanceOf(SQLException.class).hasMessage("supplier failed");
+    }
+
+    @Test
+    void getAudiencePropagatesSupplierException() {
+        val supplier = new TokenProcessorSupplier(() -> {
+            throw new SQLException("supplier failed");
+        });
+
+        assertThatThrownBy(supplier::getAudience)
+                .isInstanceOf(SQLException.class)
+                .hasMessage("supplier failed");
+    }
 }