Fix test: Add missing HTTP client and OIDC endpoints mock

The cacheWithInvalidTokensTest was failing because:
1. The config didn't have an HTTP client set
2. The config needed mocked OIDC endpoints

This fix adds:
- HTTP client to the test config
- Spy on config to inject mocked OIDC endpoints
- Import for OpenIDConnectEndpoints class

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: hectorcast-db

databricks-sdk-java/src/test/java/com/databricks/sdk/core/oauth/ExternalBrowserCredentialsProviderTest.java

@@ -7,6 +7,7 @@
 import com.databricks.sdk.core.DatabricksException;
 import com.databricks.sdk.core.FixtureServer;
 import com.databricks.sdk.core.HeaderFactory;
+import com.databricks.sdk.core.OpenIDConnectEndpoints;
 import com.databricks.sdk.core.commons.CommonsHttpClient;
 import com.databricks.sdk.core.http.HttpClient;
 import com.databricks.sdk.core.http.Request;
@@ -303,7 +304,8 @@ void cacheWithValidRefreshableTokenTest() throws IOException {
             any(DatabricksConfig.class),
             any(String.class),
             any(String.class),
-            any(TokenCache.class));
+            any(TokenCache.class),
+            any(OpenIDConnectEndpoints.class));
 
     // Verify token was NOT saved back to cache (we're using the cached one as-is).
     Mockito.verify(mockTokenCache, Mockito.never()).save(any(Token.class));
@@ -363,7 +365,7 @@ void cacheWithValidNonRefreshableTokenTest() throws IOException {
 
     // Verify performBrowserAuth was NOT called.
     Mockito.verify(provider, Mockito.never())
-        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class));
+        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class), any(OpenIDConnectEndpoints.class));
 
     // Verify no token was saved (we're using the cached one as-is).
     Mockito.verify(mockTokenCache, Mockito.never()).save(any(Token.class));
@@ -430,7 +432,9 @@ void cacheWithInvalidAccessTokenValidRefreshTest() throws IOException {
             any(DatabricksConfig.class),
             any(String.class),
             any(String.class),
-            any(TokenCache.class));
+            any(TokenCache.class),
+            any(OpenIDConnectEndpoints.class)
+        );
 
     // Verify token was saved back to cache
     Mockito.verify(mockTokenCache, Mockito.times(1)).save(any(Token.class));
@@ -508,7 +512,7 @@ void cacheWithInvalidAccessTokenRefreshFailingTest() throws IOException {
         Mockito.spy(new ExternalBrowserCredentialsProvider(mockTokenCache));
     Mockito.doReturn(cachedTokenSource)
         .when(provider)
-        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class));
+        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class), any(OpenIDConnectEndpoints.class));
 
     // Spy on the config to inject the endpoints
     DatabricksConfig spyConfig = Mockito.spy(config);
@@ -527,7 +531,7 @@ void cacheWithInvalidAccessTokenRefreshFailingTest() throws IOException {
 
     // Verify performBrowserAuth was called since refresh failed
     Mockito.verify(provider, Mockito.times(1))
-        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class));
+        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class), any(OpenIDConnectEndpoints.class));
 
     // Verify token was saved after browser auth (for the new token)
     Mockito.verify(mockTokenCache, Mockito.times(1)).save(any(Token.class));
@@ -572,17 +576,26 @@ void cacheWithInvalidTokensTest() throws IOException {
         new DatabricksConfig()
             .setAuthType("external-browser")
             .setHost("https://test.databricks.com")
-            .setClientId("test-client-id");
+            .setClientId("test-client-id")
+            .setHttpClient(mockHttpClient);
 
     // Create our provider and mock the browser auth method
     ExternalBrowserCredentialsProvider provider =
         Mockito.spy(new ExternalBrowserCredentialsProvider(mockTokenCache));
     Mockito.doReturn(cachedTokenSource)
         .when(provider)
-        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class));
+        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class), any(OpenIDConnectEndpoints.class));
+
+    // Spy on the config to inject the endpoints
+    OpenIDConnectEndpoints endpoints =
+        new OpenIDConnectEndpoints(
+            "https://test.databricks.com/oidc/v1/token",
+            "https://test.databricks.com/oidc/v1/authorize");
+    DatabricksConfig spyConfig = Mockito.spy(config);
+    Mockito.doReturn(endpoints).when(spyConfig).getOidcEndpoints();
 
     // Configure provider
-    HeaderFactory headerFactory = provider.configure(config);
+    HeaderFactory headerFactory = provider.configure(spyConfig);
     assertNotNull(headerFactory);
     // Verify headers contain the browser auth token (fallback)
     Map<String, String> headers = headerFactory.headers();
@@ -593,7 +606,7 @@ void cacheWithInvalidTokensTest() throws IOException {
 
     // Verify performBrowserAuth was called since we had an invalid token
     Mockito.verify(provider, Mockito.times(1))
-        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class));
+        .performBrowserAuth(any(DatabricksConfig.class), any(), any(), any(TokenCache.class), any(OpenIDConnectEndpoints.class));
 
     // Verify token was saved after browser auth (for the new token)
     Mockito.verify(mockTokenCache, Mockito.times(1)).save(any(Token.class));
@@ -609,7 +622,7 @@ void doNotAddOfflineAccessScopeWhenDisableOauthRefreshTokenIsTrue() {
             .setScopes(Arrays.asList("my-test-scope"));
 
     ExternalBrowserCredentialsProvider provider = new ExternalBrowserCredentialsProvider();
-    List<String> scopes = provider.getScopes(config);
+    List<String> scopes = provider.getScopes(config, null);
 
     assertEquals(1, scopes.size());
     assertTrue(scopes.contains("my-test-scope"));
@@ -625,7 +638,7 @@ void doNotRemoveUserProvidedScopesWhenDisableOauthRefreshTokenIsTrue() {
             .setScopes(Arrays.asList("my-test-scope", "offline_access"));
 
     ExternalBrowserCredentialsProvider provider = new ExternalBrowserCredentialsProvider();
-    List<String> scopes = provider.getScopes(config);
+    List<String> scopes = provider.getScopes(config, null);
 
     assertEquals(2, scopes.size());
     assertTrue(scopes.contains("offline_access"));
@@ -641,7 +654,7 @@ void addOfflineAccessScopeWhenDisableOauthRefreshTokenIsFalse() {
             .setScopes(Arrays.asList("my-test-scope"));
 
     ExternalBrowserCredentialsProvider provider = new ExternalBrowserCredentialsProvider();
-    List<String> scopes = provider.getScopes(config);
+    List<String> scopes = provider.getScopes(config, null);
 
     assertEquals(2, scopes.size());
     assertTrue(scopes.contains("offline_access"));