test(api/v2): assert admin project id via structured json

Author: kolaente

pkg/webtests/huma_admin_test.go

@@ -17,6 +17,7 @@
 package webtests
 
 import (
+	"encoding/json"
 	"net/http"
 	"testing"
 
@@ -76,15 +77,25 @@ func TestHumaAdminProjects(t *testing.T) {
 
 		res := adminReq(t, e, http.MethodGet, "/api/v2/admin/projects", admin, "")
 		require.Equal(t, http.StatusOK, res.Code, res.Body.String())
-		body := res.Body.String()
+
 		// v2 wraps lists in the Paginated envelope.
-		assert.Contains(t, body, `"items":`)
-		assert.Contains(t, body, `"total":`)
+		var envelope struct {
+			Items []struct {
+				ID int64 `json:"id"`
+			} `json:"items"`
+			Total int64 `json:"total"`
+		}
+		require.NoError(t, json.Unmarshal(res.Body.Bytes(), &envelope))
+
+		ids := make(map[int64]bool, len(envelope.Items))
+		for _, item := range envelope.Items {
+			ids[item.ID] = true
+		}
 		// Project 6 is owned by user6, not shared with user1 — the admin list
 		// surfaces it regardless of ownership.
-		assert.Contains(t, body, `"id":6`)
+		assert.True(t, ids[6], "expected project 6 in the admin list, got items %v", ids)
 		// Project 22 is archived; the admin list includes archived projects.
-		assert.Contains(t, body, `"id":22`)
+		assert.True(t, ids[22], "expected archived project 22 in the admin list, got items %v", ids)
 	})
 
 	t.Run("unauthenticated caller gets 401", func(t *testing.T) {