diff --git a/devfront/tests/devfront-clients-lifecycle.spec.ts b/devfront/tests/devfront-clients-lifecycle.spec.ts
index b2d0a296..656c1b40 100644
--- a/devfront/tests/devfront-clients-lifecycle.spec.ts
+++ b/devfront/tests/devfront-clients-lifecycle.spec.ts
@@ -282,16 +282,18 @@ test.describe("DevFront clients lifecycle", () => {
     ).toHaveValue("2");
   });
 
-  test("pkce headless login uses jwks uri only and shows cache actions", async ({
+  test("headless login uses jwks uri only and shows cache actions", async ({
     page,
   }) => {
     const state = {
       clients: [
         makeClient("client-headless-login", {
           name: "Headless Login App",
-          type: "pkce",
+          type: "private",
           metadata: {
-            request_object_signing_alg: "RS256",
+            headless_login_enabled: true,
+            headless_token_endpoint_auth_method: "private_key_jwt",
+            headless_jwks_uri: jwksUri,
           },
           headlessJwksCache: {
             clientId: "client-headless-login",
@@ -338,12 +340,6 @@ test.describe("DevFront clients lifecycle", () => {
 
     await page.goto("/clients/client-headless-login/settings");
 
-    await page
-      .getByRole("switch", {
-        name: /Headless Login \(자체 로그인 UI 사용\)|Headless Login \(Custom Login UI\)/i,
-      })
-      .click();
-
     await expect(
       page.getByRole("heading", {
         name: /공개키 등록|Public Key Registration/i,
@@ -363,7 +359,7 @@ test.describe("DevFront clients lifecycle", () => {
 
     await expect
       .poll(() => state.clients[0]?.tokenEndpointAuthMethod)
-      .toBe("none");
+      .toBe("private_key_jwt");
     await expect
       .poll(() => state.clients[0]?.metadata?.headless_login_enabled)
       .toBe(true);
@@ -455,17 +451,18 @@ test.describe("DevFront clients lifecycle", () => {
       .toBe(autoLoginUrl);
   });
 
-  test("pkce headless login blocks save when parsed jwks algorithm is unsupported", async ({
+  test("headless login blocks save when parsed jwks algorithm is unsupported", async ({
     page,
   }) => {
     const state = {
       clients: [
         makeClient("client-headless-unsupported", {
           name: "Unsupported Headless Login App",
-          type: "pkce",
+          type: "private",
           metadata: {
             headless_login_enabled: true,
-            request_object_signing_alg: "RS256",
+            headless_token_endpoint_auth_method: "private_key_jwt",
+            headless_jwks_uri: jwksUri,
           },
           headlessJwksCache: {
             clientId: "client-headless-unsupported",
@@ -511,16 +508,17 @@ test.describe("DevFront clients lifecycle", () => {
     ).toBeDisabled();
   });
 
-  test("pkce headless login blocks save when parsed jwks algorithm is missing", async ({
+  test("headless login blocks save when parsed jwks algorithm is missing", async ({
     page,
   }) => {
     const state = {
       clients: [
         makeClient("client-headless-missing-alg", {
           name: "Missing Alg Headless Login App",
-          type: "pkce",
+          type: "private",
           metadata: {
             headless_login_enabled: true,
+            headless_token_endpoint_auth_method: "private_key_jwt",
             headless_jwks_uri: jwksUri,
           },
           headlessJwksCache: {