fix(firewall): account for authentication failures exactly once

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 23:01:38 -04:00
parent 7aa8a27b1b
commit a5c10e9b9b
9 changed files with 112 additions and 11 deletions
@@ -28,12 +28,13 @@ final class CoreModuleTest extends TestCase
        $module->boot();
        $definitions = $registry->definitions();

-        self::assertCount(10, $definitions);
+        self::assertCount(9, $definitions);
        self::assertSame(['core'], array_values(array_unique(array_column($definitions, 'module'))));
        self::assertSame(
            FirewallService::class,
            $registry->listeners(SecurityEvent::AUTH_FAILURE, DeliveryMode::Immediate)[0]->service,
        );
+        self::assertSame([], $registry->listeners(SecurityEvent::AUTH_FAILURE, DeliveryMode::Deferred));
        foreach ([
            SecurityEvent::RATE_LIMIT_EXCEEDED,
            SecurityEvent::SUSPICIOUS_ACTIVITY,