코드체크 업데이트

backend/cmd/server/headless_login_e2e_test.go

@@ -419,6 +419,8 @@ func TestHeadlessPasswordLogin_E2E_ResponseIncludesDetailedCodeAndLogs(t *testin
 }
 
 func TestHeadlessPasswordLogin_E2E_DebugLogsIncludeDiagnostics(t *testing.T) {
+	t.Setenv("BACKEND_PUBLIC_URL", "")
+
 	privateKey, jwks := mustE2EHeadlessRSAJWK(t)
 	const receivedAudience = "https://sso.hmac.kr/api/v1/auth/headless/password/login"
 	clientAssertion := mustE2EHeadlessClientAssertion(
@@ -458,6 +460,8 @@ func TestHeadlessPasswordLogin_E2E_DebugLogsIncludeDiagnostics(t *testing.T) {
 }
 
 func TestHeadlessPasswordLogin_E2E_AcceptsForwardedHTTPSAudience(t *testing.T) {
+	t.Setenv("BACKEND_PUBLIC_URL", "")
+
 	privateKey, jwks := mustE2EHeadlessRSAJWK(t)
 	const receivedAudience = "https://sso.hmac.kr/api/v1/auth/headless/password/login"
 	clientAssertion := mustE2EHeadlessClientAssertion(

backend/internal/handler/auth_handler_login_test.go

@@ -894,6 +894,8 @@ func TestHeadlessPasswordLogin_HeadlessLoginClientSuccess(t *testing.T) {
 }
 
 func TestHeadlessPasswordLogin_AuditIncludesClientMetadata(t *testing.T) {
+	t.Setenv("BACKEND_PUBLIC_URL", "")
+
 	mockIdp := new(MockIdentityProvider)
 	mockIdp.On("SignIn", "employee001", "password").Return(&domain.AuthInfo{
 		SessionToken: &domain.Token{JWT: "valid-jwt", SessionID: "session-123"},

backend/internal/handler/rp_manifest_handler_test.go

@@ -11,6 +11,8 @@ import (
 )
 
 func TestRPManifestJSONIncludesIAMAndExternalKeyContract(t *testing.T) {
+	t.Setenv("BACKEND_PUBLIC_URL", "")
+
 	app := fiber.New()
 	h := NewRPManifestHandler()
 	app.Get("/.well-known/baron-rp-manifest.json", h.GetJSON)

backend/internal/handler/tenant_handler_test.go

@@ -112,6 +112,7 @@ func (m *MockUserRepoForHandler) Delete(ctx context.Context, id string) error {
 	m.deletedIDs = append(m.deletedIDs, id)
 	return nil
 }
+
 func (m *MockUserRepoForHandler) FindByEmail(ctx context.Context, email string) (*domain.User, error) {
 	return nil, nil
 }

backend/internal/service/user_group_service_test.go

@@ -55,6 +55,7 @@ func (m *MockUserRepository) Update(ctx context.Context, user *domain.User) erro
 	m.updatedUsers = append(m.updatedUsers, copied)
 	return nil
 }
+
 func (m *MockUserRepository) Delete(ctx context.Context, id string) error {
 	return m.Called(ctx, id).Error(0)
 }

backend/internal/service/worksmobile_mapper_test.go

@@ -213,6 +213,8 @@ func TestResolveWorksmobileDomainIDFromTenantIgnoresRootDomainMappings(t *testin
 }
 
 func TestResolveWorksmobileDomainIDFromTenantRequiresFamilyDomainEnv(t *testing.T) {
+	t.Setenv("SAMAN_DOMAIN_ID", "")
+
 	rootConfig := domain.JSONMap{
 		"worksmobile": map[string]any{
 			"domainMappings": map[string]any{