test(auth): cover project-scoped token parsing

Generated-By: PostHog Code
Task-Id: 07b377f9-4583-463c-b256-cc29621375e6

Author: dmarticus

packages/core/src/auth/auth.test.ts

@@ -1466,7 +1466,9 @@ describe("AuthService", () => {
       },
     );
 
-    it("loads project-scoped OAuth access without calling the organization endpoint", async () => {
+    // Regression for #3279: the current-org fallback still strands the picker
+    // when the backend rejects team-scoped tokens on organization endpoints.
+    it("loads project-scoped OAuth access when organization access is forbidden", async () => {
       let orgCalls = 0;
       let projectCalls = 0;
       vi.stubGlobal(

packages/core/src/auth/oauth.schemas.test.ts

@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { oAuthTokenResponse } from "./oauth.schemas";
+
+describe("oAuthTokenResponse", () => {
+  it("preserves project scopes from the token response", () => {
+    const token = oAuthTokenResponse.parse({
+      access_token: "access-token",
+      expires_in: 3600,
+      token_type: "Bearer",
+      refresh_token: "refresh-token",
+      scoped_teams: [42, 84],
+      scoped_organizations: [],
+    });
+
+    expect(token.scoped_teams).toEqual([42, 84]);
+  });
+});