@Test
    void verifyGetWithDecodedSecret() throws Throwable {
        val casuser = getUsernameUnderTest();
        lenient().when(cipherExecutor.encode(PLAIN_SECRET)).thenReturn("abc321");
        lenient().when(cipherExecutor.decode("abc321")).thenReturn(PLAIN_SECRET);
        val repo = getRegistry("verifyGetWithDecodedSecret");
        var acct = getAccount("verifyGetWithDecodedSecret", casuser);
        acct.setSecretKey(PLAIN_SECRET);
        val toSave = OneTimeTokenAccount.builder()
            .username(acct.getUsername())
            .secretKey(acct.getSecretKey())
            .validationCode(acct.getValidationCode())
            .scratchCodes(acct.getScratchCodes())
            .name(casuser)
            .build();
        repo.save(toSave);

        acct = repo.get(casuser).iterator().next();
        assertEquals(PLAIN_SECRET, acct.getSecretKey());
    }
This is {@link BaseOneTimeTokenCredentialRepositoryTests}.

@author Timur Duehr
@since 6.0.0
support/cas-server-support-gauth/src/test/java/org/apereo/cas/gauth/credential/BaseOneTimeTokenCredentialRepositoryTests.java