|
|
|
@@ -210,7 +210,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $log->getEventType() === FirewallLogObject::EVENT_RULE_MATCH;
|
|
|
|
|
}))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::accessDenied(
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::accessDenied(
|
|
|
|
|
'203.0.113.10',
|
|
|
|
|
null,
|
|
|
|
|
'tenant-rule',
|
|
|
|
@@ -234,7 +234,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $log->getRuleScope() === FirewallRuleObject::SCOPE_SYSTEM;
|
|
|
|
|
}))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::accessDenied(
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::accessDenied(
|
|
|
|
|
'203.0.113.10',
|
|
|
|
|
null,
|
|
|
|
|
'system-rule',
|
|
|
|
@@ -252,7 +252,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
$this->store->expects($this->never())->method('createLog');
|
|
|
|
|
|
|
|
|
|
$this->service->logSecurityEvent(
|
|
|
|
|
\KTXF\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
@@ -271,7 +271,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $metadata['windowSeconds'] === 60;
|
|
|
|
|
}))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::rateLimitExceeded(
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::rateLimitExceeded(
|
|
|
|
|
'203.0.113.10',
|
|
|
|
|
101,
|
|
|
|
|
60,
|
|
|
|
@@ -296,8 +296,8 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $log->getMetadata()['detector'] === 'payload-signature';
|
|
|
|
|
}))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::create(
|
|
|
|
|
\KTXF\Event\SecurityEvent::SUSPICIOUS_ACTIVITY,
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::create(
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::SUSPICIOUS_ACTIVITY,
|
|
|
|
|
'203.0.113.20',
|
|
|
|
|
null,
|
|
|
|
|
['detector' => 'payload-signature']
|
|
|
|
@@ -323,8 +323,8 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $log->getIdentityId() === 'operator';
|
|
|
|
|
}))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = new \KTXF\Event\SecurityEvent(
|
|
|
|
|
\KTXF\Event\SecurityEvent::FIREWALL_RULE_DISABLED,
|
|
|
|
|
$event = new \KTXC\Security\Event\SecurityEvent(
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::FIREWALL_RULE_DISABLED,
|
|
|
|
|
[
|
|
|
|
|
'ruleId' => 'rule-123',
|
|
|
|
|
'ruleScope' => FirewallRuleObject::SCOPE_SYSTEM,
|
|
|
|
@@ -349,8 +349,8 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&& $log->getMetadata()['changeReason'] === 'Tighten controls'
|
|
|
|
|
))
|
|
|
|
|
->willReturnArgument(0);
|
|
|
|
|
$event = new \KTXF\Event\SecurityEvent(
|
|
|
|
|
\KTXF\Event\SecurityEvent::FIREWALL_SETTINGS_UPDATED,
|
|
|
|
|
$event = new \KTXC\Security\Event\SecurityEvent(
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::FIREWALL_SETTINGS_UPDATED,
|
|
|
|
|
['changeReason' => 'Tighten controls']
|
|
|
|
|
);
|
|
|
|
|
$event->setTenantId('tenant-a')->setIdentityId('operator');
|
|
|
|
@@ -376,7 +376,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
->willReturn(4);
|
|
|
|
|
$this->events->expects($this->never())->method('dispatch');
|
|
|
|
|
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event->setTenantId('tenant-a');
|
|
|
|
|
$this->service->handleAuthFailure($event);
|
|
|
|
|
|
|
|
|
@@ -400,7 +400,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
->with('tenant-a', '203.0.113.10', 300)
|
|
|
|
|
->willReturn(0);
|
|
|
|
|
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event->setTenantId('tenant-a');
|
|
|
|
|
$this->service->handleAuthFailure($event);
|
|
|
|
|
}
|
|
|
|
@@ -449,12 +449,12 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
&$lifecycleOrigin
|
|
|
|
|
): void {
|
|
|
|
|
$publishedTenants[] = $event->getTenantId();
|
|
|
|
|
if ($event->getName() === \KTXF\Event\SecurityEvent::FIREWALL_RULE_CREATED) {
|
|
|
|
|
if ($event->getName() === \KTXC\Security\Event\SecurityEvent::FIREWALL_RULE_CREATED) {
|
|
|
|
|
$lifecycleOrigin = $event->get('origin');
|
|
|
|
|
}
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event->setTenantId('tenant-event');
|
|
|
|
|
$this->service->handleAuthFailure($event);
|
|
|
|
|
|
|
|
|
@@ -478,7 +478,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
$this->events->expects($this->never())->method('dispatch');
|
|
|
|
|
|
|
|
|
|
$this->service->handleAuthFailure(
|
|
|
|
|
\KTXF\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
@@ -492,7 +492,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
->willReturn(0);
|
|
|
|
|
|
|
|
|
|
$this->service->handleAuthFailure(
|
|
|
|
|
\KTXF\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
@@ -504,7 +504,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
$this->store->expects($this->never())->method('depositRule');
|
|
|
|
|
|
|
|
|
|
$this->service->handleAuthFailure(
|
|
|
|
|
\KTXF\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
\KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10')
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
@@ -518,7 +518,7 @@ class FirewallServiceTest extends TestCase
|
|
|
|
|
->method('countRecentFailures')
|
|
|
|
|
->with('tenant-a', '203.0.113.10', 300)
|
|
|
|
|
->willReturn(1);
|
|
|
|
|
$event = \KTXF\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$event = \KTXC\Security\Event\SecurityEvent::authFailure('203.0.113.10');
|
|
|
|
|
$eventId = $event->getEventId();
|
|
|
|
|
|
|
|
|
|
$this->service->handleAuthFailure($event);
|
|
|
|
|