public void ToString_ExcludesSensitiveParameters(string parameter) { // Arrange var message = new OpenIddictMessage(); message.AddParameter(parameter, "secret value"); // Act and assert var element = JsonSerializer.Deserialize <JsonElement>(message.ToString()); Assert.DoesNotContain("secret value", message.ToString()); Assert.Equal("[redacted]", element.GetProperty(parameter).GetString()); }