fix: preserve provider auth metadata

apps/aether-gateway/src/handlers/public/system_modules_helpers/keys_grouped.rs

@@ -1,16 +1,27 @@
 use super::enabled_key_capability_short_names;
-use crate::handlers::shared::unix_secs_to_rfc3339;
-use crate::provider_key_auth::provider_key_effective_api_formats;
+use crate::handlers::shared::{parse_catalog_auth_config_json, unix_secs_to_rfc3339};
+use crate::provider_key_auth::{
+    provider_key_auth_config_uses_header_authorization, provider_key_effective_api_formats,
+};
 use crate::AppState;
+use aether_data_contracts::repository::provider_catalog::StoredProviderCatalogKey;
 use aether_scheduler_core::provider_key_circuit_payload_is_active_open_at;
 use serde_json::json;
 use std::collections::{BTreeMap, HashMap};
 use std::time::{SystemTime, UNIX_EPOCH};
 
-fn grouped_key_masked_label(auth_type: &str) -> &'static str {
-    match auth_type.trim() {
+fn grouped_key_masked_label(state: &AppState, key: &StoredProviderCatalogKey) -> &'static str {
+    match key.auth_type.trim() {
         "service_account" | "vertex_ai" => "[Service Account]",
-        "oauth" => "[OAuth Token]",
+        "oauth" => {
+            if provider_key_auth_config_uses_header_authorization(
+                parse_catalog_auth_config_json(state, key).as_ref(),
+            ) {
+                "[OAuth Header]"
+            } else {
+                "[OAuth Token]"
+            }
+        }
         _ => "[API Key]",
     }
 }
@@ -150,7 +161,7 @@ pub(crate) async fn build_admin_keys_grouped_by_format_payload(
                 "provider_id": key.provider_id,
                 "name": key.name,
                 "auth_type": key.auth_type,
-                "api_key_masked": grouped_key_masked_label(&key.auth_type),
+                "api_key_masked": grouped_key_masked_label(state, &key),
                 "internal_priority": key.internal_priority,
                 "global_priority_by_format": key.global_priority_by_format,
                 "rate_multipliers": key.rate_multipliers,