57 lines
1.8 KiB
PHP
57 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace KTXT\Unit\Event;
|
|
|
|
use KTXC\Security\Event\RateLimitExceededEvent;
|
|
use KTXC\Security\Event\SecurityEventSeverity;
|
|
use PHPUnit\Framework\Attributes\Test;
|
|
use PHPUnit\Framework\Attributes\TestDox;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
final class RateLimitExceededEventTest extends TestCase
|
|
{
|
|
#[Test]
|
|
#[TestDox('Rate-limit state is typed and complete at construction')]
|
|
public function constructsTypedState(): void
|
|
{
|
|
$event = new RateLimitExceededEvent(
|
|
'203.0.113.10',
|
|
101,
|
|
60,
|
|
'/login',
|
|
'tenant-a',
|
|
);
|
|
|
|
self::assertSame(RateLimitExceededEvent::class, $event->label());
|
|
self::assertSame('203.0.113.10', $event->getIpAddress());
|
|
self::assertSame(101, $event->getRequestCount());
|
|
self::assertSame(60, $event->getWindowSeconds());
|
|
self::assertSame('/login', $event->getEndpoint());
|
|
self::assertSame('/login', $event->getRequestPath());
|
|
self::assertSame('tenant-a', $event->tenantIdentifier());
|
|
self::assertSame('101 requests in 60 seconds', $event->getReason());
|
|
self::assertSame(SecurityEventSeverity::ERROR, $event->getSeverity());
|
|
}
|
|
|
|
#[Test]
|
|
#[TestDox('Rate-limit detection rejects invalid measurements')]
|
|
public function rejectsInvalidMeasurements(): void
|
|
{
|
|
foreach ([
|
|
['', 101, 60, '/login'],
|
|
['203.0.113.10', 0, 60, '/login'],
|
|
['203.0.113.10', 101, 0, '/login'],
|
|
['203.0.113.10', 101, 60, ''],
|
|
] as $arguments) {
|
|
try {
|
|
new RateLimitExceededEvent(...$arguments);
|
|
self::fail('Invalid rate-limit measurements were accepted.');
|
|
} catch (\InvalidArgumentException) {
|
|
$this->addToAssertionCount(1);
|
|
}
|
|
}
|
|
}
|
|
}
|