refactor(security): add typed authentication-success event

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-08-05 23:42:24 -04:00
parent f4df769b3c
commit a5be782c51
7 changed files with 149 additions and 24 deletions
@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+namespace KTXT\Unit\Event;
+
+use KTXC\Security\Event\AuthenticationSucceededEvent;
+use KTXC\Security\Event\SecurityEvent;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+final class AuthenticationSucceededEventTest extends TestCase
+{
+    #[Test]
+    #[TestDox('Successful-authentication state is typed and complete at construction')]
+    public function constructsTypedState(): void
+    {
+        $event = new AuthenticationSucceededEvent(
+            '203.0.113.10',
+            'user-a',
+            'tenant-a',
+            'device-a',
+        );
+
+        self::assertSame(AuthenticationSucceededEvent::class, $event->getName());
+        self::assertSame('203.0.113.10', $event->getIpAddress());
+        self::assertSame('user-a', $event->getUserId());
+        self::assertSame('tenant-a', $event->getTenantId());
+        self::assertSame('device-a', $event->getDeviceFingerprint());
+        self::assertSame(['userId' => 'user-a'], $event->getData());
+        self::assertSame(SecurityEvent::SEVERITY_INFO, $event->getSeverity());
+    }
+
+    #[Test]
+    #[TestDox('Successful authentication requires an IP address and user ID')]
+    public function rejectsIncompleteAuthenticationContext(): void
+    {
+        foreach ([
+            ['', 'user-a'],
+            ['203.0.113.10', ''],
+        ] as $arguments) {
+            try {
+                new AuthenticationSucceededEvent(...$arguments);
+                self::fail('Incomplete successful-authentication context was accepted.');
+            } catch (\InvalidArgumentException) {
+                $this->addToAssertionCount(1);
+            }
+        }
+    }
+}