CI / Docker compose check (push) Successful in 13s
CI / Env docs check (push) Successful in 14s
CI / Nginx config check (push) Successful in 15s
CI / Frontend major deps (push) Successful in 25s
CI / Frontend deps check (push) Successful in 26s
CI / Secrets scan (push) Successful in 35s
CI / Go build (push) Successful in 42s
CI / Frontend build (push) Successful in 45s
CI / Knip (push) Successful in 23s
CI / Frontend a11y check (push) Successful in 1m13s
CI / go mod tidy (push) Successful in 37s
CI / Go vet (prod) (push) Successful in 2m5s
CI / Go vet (dev) (push) Successful in 2m16s
CI / Frontend QC (audit) (push) Successful in 45s
CI / Go vulnerabilities (push) Successful in 1m29s
CI / Staticcheck (prod) (push) Successful in 3m3s
CI / Staticcheck (dev) (push) Successful in 3m46s
CI / Frontend QC (typecheck) (push) Successful in 2m1s
CI / golangci-lint (push) Successful in 4m19s
CI / Security scan (prod) (push) Successful in 4m23s
CI / Security scan (dev) (push) Successful in 4m35s
CI / Frontend QC (lint) (push) Successful in 1m51s
CI / Svelte strict check (push) Successful in 1m21s
CI / Tests (prod) (push) Successful in 3m39s
CI / Tests (dev) (push) Failing after 3m50s
CI / Race (prod) (push) Successful in 7m4s
CI / Race (dev) (push) Failing after 7m12s
165 lines
4.0 KiB
Go
165 lines
4.0 KiB
Go
package mw
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
"time"
|
|
|
|
"crussell/clock"
|
|
)
|
|
|
|
// TestProgressiveRateLimiter_CleanupRemovesStaleEntries verifies that
|
|
// IPs with no activity for 60s are cleaned up.
|
|
func TestProgressiveRateLimiter_CleanupRemovesStaleEntries(t *testing.T) {
|
|
prl := NewProgressiveRateLimiter()
|
|
|
|
prl.mu.Lock()
|
|
prl.requests["stale-ip"] = &ipProgressiveState{
|
|
timestamps: []time.Time{clock.Now().Add(-120 * time.Second)},
|
|
}
|
|
prl.mu.Unlock()
|
|
|
|
prl.Cleanup()
|
|
|
|
prl.mu.RLock()
|
|
_, exists := prl.requests["stale-ip"]
|
|
prl.mu.RUnlock()
|
|
if exists {
|
|
t.Error("expected stale IP to be cleaned up")
|
|
}
|
|
}
|
|
|
|
// ============================================================
|
|
// RateLimiter Cleanup Tests
|
|
// ============================================================
|
|
|
|
// TestRateLimiter_Cleanup verifies that stale entries are removed.
|
|
func TestRateLimiter_Cleanup(t *testing.T) {
|
|
rl := NewRateLimiter(10, time.Minute)
|
|
|
|
rl.mu.Lock()
|
|
rl.requests["stale-key"] = []time.Time{clock.Now().Add(-5 * time.Minute)}
|
|
rl.requests["fresh-key"] = []time.Time{clock.Now()}
|
|
rl.mu.Unlock()
|
|
|
|
rl.Cleanup()
|
|
|
|
rl.mu.RLock()
|
|
_, staleExists := rl.requests["stale-key"]
|
|
_, freshExists := rl.requests["fresh-key"]
|
|
rl.mu.RUnlock()
|
|
|
|
if staleExists {
|
|
t.Error("expected stale-key to be removed")
|
|
}
|
|
if !freshExists {
|
|
t.Error("expected fresh-key to be preserved")
|
|
}
|
|
}
|
|
|
|
// TestRateLimiter_Cleanup_EmptyMap handles an empty requests map.
|
|
func TestRateLimiter_Cleanup_EmptyMap(t *testing.T) {
|
|
rl := NewRateLimiter(10, time.Minute)
|
|
|
|
rl.mu.Lock()
|
|
rl.requests = make(map[string][]time.Time)
|
|
rl.mu.Unlock()
|
|
|
|
rl.Cleanup()
|
|
|
|
rl.mu.RLock()
|
|
count := len(rl.requests)
|
|
rl.mu.RUnlock()
|
|
if count != 0 {
|
|
t.Errorf("expected empty map, got %d entries", count)
|
|
}
|
|
}
|
|
|
|
// TestCleanupAllRateLimiters iterates all registered limiters.
|
|
func TestCleanupAllRateLimiters(t *testing.T) {
|
|
registeredLimitersMu.Lock()
|
|
saved := registeredLimiters
|
|
registeredLimitersMu.Unlock()
|
|
defer func() {
|
|
registeredLimitersMu.Lock()
|
|
registeredLimiters = saved
|
|
registeredLimitersMu.Unlock()
|
|
}()
|
|
|
|
rl1 := NewRateLimiter(10, time.Minute)
|
|
rl2 := NewRateLimiter(20, time.Minute)
|
|
|
|
rl1.mu.Lock()
|
|
rl1.requests["rl1-stale"] = []time.Time{clock.Now().Add(-5 * time.Minute)}
|
|
rl1.mu.Unlock()
|
|
|
|
rl2.mu.Lock()
|
|
rl2.requests["rl2-stale"] = []time.Time{clock.Now().Add(-5 * time.Minute)}
|
|
rl2.mu.Unlock()
|
|
|
|
_, err := CleanupAllRateLimiters(context.Background())
|
|
if err != nil {
|
|
t.Errorf("expected nil error, got %v", err)
|
|
}
|
|
|
|
rl1.mu.RLock()
|
|
_, rl1Stale := rl1.requests["rl1-stale"]
|
|
rl1.mu.RUnlock()
|
|
|
|
rl2.mu.RLock()
|
|
_, rl2Stale := rl2.requests["rl2-stale"]
|
|
rl2.mu.RUnlock()
|
|
|
|
if rl1Stale {
|
|
t.Error("expected rl1-stale to be removed")
|
|
}
|
|
if rl2Stale {
|
|
t.Error("expected rl2-stale to be removed")
|
|
}
|
|
}
|
|
|
|
// TestCleanupAllRateLimiters_Empty does not panic with no registered limiters.
|
|
func TestCleanupAllRateLimiters_Empty(t *testing.T) {
|
|
registeredLimitersMu.Lock()
|
|
saved := registeredLimiters
|
|
registeredLimiters = nil
|
|
registeredLimitersMu.Unlock()
|
|
defer func() {
|
|
registeredLimitersMu.Lock()
|
|
registeredLimiters = saved
|
|
registeredLimitersMu.Unlock()
|
|
}()
|
|
|
|
_, err := CleanupAllRateLimiters(context.Background())
|
|
if err != nil {
|
|
t.Errorf("expected nil error, got %v", err)
|
|
}
|
|
}
|
|
|
|
// TestCleanupProgressiveRateLimiter cleans the global limiter.
|
|
func TestCleanupProgressiveRateLimiter(t *testing.T) {
|
|
globalProgressiveLimiter.mu.Lock()
|
|
saved := globalProgressiveLimiter.requests
|
|
globalProgressiveLimiter.requests = map[string]*ipProgressiveState{
|
|
"global-stale": {timestamps: []time.Time{clock.Now().Add(-120 * time.Second)}},
|
|
}
|
|
globalProgressiveLimiter.mu.Unlock()
|
|
defer func() {
|
|
globalProgressiveLimiter.mu.Lock()
|
|
globalProgressiveLimiter.requests = saved
|
|
globalProgressiveLimiter.mu.Unlock()
|
|
}()
|
|
|
|
_, err := CleanupProgressiveRateLimiter(context.Background())
|
|
if err != nil {
|
|
t.Errorf("expected nil error, got %v", err)
|
|
}
|
|
|
|
globalProgressiveLimiter.mu.RLock()
|
|
_, exists := globalProgressiveLimiter.requests["global-stale"]
|
|
globalProgressiveLimiter.mu.RUnlock()
|
|
if exists {
|
|
t.Error("expected global-stale to be removed")
|
|
}
|
|
}
|