feat(firewall): complete rule-match audit context

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:46:27 -04:00
parent abc5bfcccc
commit 12037da367
6 changed files with 144 additions and 1 deletions
@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXT\Unit\Models\Firewall;
+
+use KTXC\Models\Firewall\FirewallLogObject;
+use KTXC\Models\Firewall\FirewallRuleObject;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+class FirewallLogObjectTest extends TestCase
+{
+    #[TestDox('Rule ID and scope survive firewall log serialization')]
+    public function testRuleContextSerialization(): void
+    {
+        $log = (new FirewallLogObject())
+            ->setRuleId('rule-123')
+            ->setRuleScope(FirewallRuleObject::SCOPE_SYSTEM);
+
+        $restored = (new FirewallLogObject())->jsonDeserialize($log->jsonSerialize());
+
+        self::assertSame('rule-123', $restored->getRuleId());
+        self::assertSame(FirewallRuleObject::SCOPE_SYSTEM, $restored->getRuleScope());
+    }
+
+    #[TestDox('Unknown rule scopes are rejected from firewall logs')]
+    public function testRuleScopeValidation(): void
+    {
+        $this->expectException(\InvalidArgumentException::class);
+
+        (new FirewallLogObject())->setRuleScope('unknown');
+    }
+}