feat: Introduce typed authentication failure event

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>

tests/php/Unit/Event/AuthenticationFailedEventTest.php

@@ -0,0 +1,43 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXT\Unit\Event;
+
+use KTXC\Security\Event\AuthenticationFailedEvent;
+use KTXC\Security\Event\SecurityEvent;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+final class AuthenticationFailedEventTest extends TestCase
+{
+    #[Test]
+    #[TestDox('Authentication failure state is typed and complete at construction')]
+    public function constructsTypedState(): void
+    {
+        $event = new AuthenticationFailedEvent(
+            '203.0.113.10',
+            'device-a',
+            'user-a',
+            'Invalid credentials',
+            'tenant-a',
+            'identity-a',
+            'Test Agent',
+            '/login',
+            'POST',
+        );
+
+        self::assertSame(AuthenticationFailedEvent::class, $event->getName());
+        self::assertSame('203.0.113.10', $event->getIpAddress());
+        self::assertSame('device-a', $event->getDeviceFingerprint());
+        self::assertSame('user-a', $event->getUserId());
+        self::assertSame('Invalid credentials', $event->getReason());
+        self::assertSame('tenant-a', $event->getTenantId());
+        self::assertSame('identity-a', $event->getIdentityId());
+        self::assertSame('Test Agent', $event->getUserAgent());
+        self::assertSame('/login', $event->getRequestPath());
+        self::assertSame('POST', $event->getRequestMethod());
+        self::assertSame(SecurityEvent::SEVERITY_WARNING, $event->getSeverity());
+    }
+}

tests/php/Unit/Event/SecurityEventTest.php

@@ -17,7 +17,7 @@ final class SecurityEventTest extends TestCase
     {
         self::assertSame(
             SecurityEvent::SEVERITY_WARNING,
-            (new SecurityEvent(SecurityEvent::AUTH_FAILURE))->getSeverity(),
+            (new SecurityEvent(SecurityEvent::AUTH_LOGOUT))->getSeverity(),
         );
         self::assertSame(
             SecurityEvent::SEVERITY_ERROR,
@@ -38,7 +38,7 @@ final class SecurityEventTest extends TestCase
     public function allowsSeverityOverride(): void
     {
         $event = new SecurityEvent(
-            SecurityEvent::AUTH_FAILURE,
+            SecurityEvent::AUTH_LOGOUT,
             severity: SecurityEvent::SEVERITY_CRITICAL,
         );