<?php

declare(strict_types=1);

namespace KTXT\Unit\Event;

use KTXC\Security\Event\RateLimitExceededEvent;
use KTXC\Security\Event\SecurityEventSeverity;
use PHPUnit\Framework\Attributes\Test;
use PHPUnit\Framework\Attributes\TestDox;
use PHPUnit\Framework\TestCase;

final class RateLimitExceededEventTest extends TestCase
{
    #[Test]
    #[TestDox('Rate-limit state is typed and complete at construction')]
    public function constructsTypedState(): void
    {
        $event = new RateLimitExceededEvent(
            '203.0.113.10',
            101,
            60,
            '/login',
            'tenant-a',
        );

        self::assertSame(RateLimitExceededEvent::class, $event->label());
        self::assertSame('203.0.113.10', $event->getIpAddress());
        self::assertSame(101, $event->getRequestCount());
        self::assertSame(60, $event->getWindowSeconds());
        self::assertSame('/login', $event->getEndpoint());
        self::assertSame('/login', $event->getRequestPath());
        self::assertSame('tenant-a', $event->tenantIdentifier());
        self::assertSame('101 requests in 60 seconds', $event->getReason());
        self::assertSame(SecurityEventSeverity::ERROR, $event->getSeverity());
    }

    #[Test]
    #[TestDox('Rate-limit detection rejects invalid measurements')]
    public function rejectsInvalidMeasurements(): void
    {
        foreach ([
            ['', 101, 60, '/login'],
            ['203.0.113.10', 0, 60, '/login'],
            ['203.0.113.10', 101, 0, '/login'],
            ['203.0.113.10', 101, 60, ''],
        ] as $arguments) {
            try {
                new RateLimitExceededEvent(...$arguments);
                self::fail('Invalid rate-limit measurements were accepted.');
            } catch (\InvalidArgumentException) {
                $this->addToAssertionCount(1);
            }
        }
    }
}