diff --git a/internal/keycloak/client_test.go b/internal/keycloak/client_test.go
index 129dff6..08ad32d 100644
--- a/internal/keycloak/client_test.go
+++ b/internal/keycloak/client_test.go
@@ -16,16 +16,16 @@ import (
 // paths the HTTPAdapter actually calls. Each path is a single handler that
 // asserts the request shape and returns the bare-minimum valid response.
 type stubKC struct {
-	srv          *httptest.Server
-	tokenCalls   atomic.Int32
-	orgCalls     atomic.Int32
-	userCalls    atomic.Int32
-	memberCalls  atomic.Int32
-	emailCalls   atomic.Int32
-	healthCalls  atomic.Int32
-	syncCalls    atomic.Int32
+	srv         *httptest.Server
+	tokenCalls  atomic.Int32
+	orgCalls    atomic.Int32
+	userCalls   atomic.Int32
+	memberCalls atomic.Int32
+	emailCalls  atomic.Int32
+	healthCalls atomic.Int32
+	syncCalls   atomic.Int32
 
-	tokenFails  atomic.Bool // when true, /token returns 401 once
+	tokenFails atomic.Bool // when true, /token returns 401 once
 }
 
 func newStubKC(t *testing.T) *stubKC {