66835476b5
This allows adding rate limiting via annotations to controllers, as one example: ``` @UserRateThrottle(limit=5, period=100) @AnonRateThrottle(limit=1, period=100) ``` Would mean that logged-in users can access the page 5 times within 100 seconds, and anonymous users 1 time within 100 seconds. If only an AnonRateThrottle is specified that one will also be applied to logged-in users. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
138 lines
4 KiB
PHP
138 lines
4 KiB
PHP
<?php
|
|
/**
|
|
* @copyright Copyright (c) 2017 Lukas Reschke <lukas@statuscode.ch>
|
|
*
|
|
* @license GNU AGPL version 3 or any later version
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as
|
|
* published by the Free Software Foundation, either version 3 of the
|
|
* License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
namespace Test\Security\RateLimiting\Backend;
|
|
|
|
use OC\Security\RateLimiting\Backend\MemoryCache;
|
|
use OCP\AppFramework\Utility\ITimeFactory;
|
|
use OCP\ICache;
|
|
use OCP\ICacheFactory;
|
|
use Test\TestCase;
|
|
|
|
class MemoryCacheTest extends TestCase {
|
|
/** @var ICacheFactory|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $cacheFactory;
|
|
/** @var ITimeFactory|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $timeFactory;
|
|
/** @var ICache|\PHPUnit_Framework_MockObject_MockObject */
|
|
private $cache;
|
|
/** @var MemoryCache */
|
|
private $memoryCache;
|
|
|
|
public function setUp() {
|
|
parent::setUp();
|
|
|
|
$this->cacheFactory = $this->createMock(ICacheFactory::class);
|
|
$this->timeFactory = $this->createMock(ITimeFactory::class);
|
|
$this->cache = $this->createMock(ICache::class);
|
|
|
|
$this->cacheFactory
|
|
->expects($this->once())
|
|
->method('create')
|
|
->with('OC\Security\RateLimiting\Backend\MemoryCache')
|
|
->willReturn($this->cache);
|
|
|
|
$this->memoryCache = new MemoryCache(
|
|
$this->cacheFactory,
|
|
$this->timeFactory
|
|
);
|
|
}
|
|
|
|
public function testGetAttemptsWithNoAttemptsBefore() {
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('get')
|
|
->with('eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b')
|
|
->willReturn(false);
|
|
|
|
$this->assertSame(0, $this->memoryCache->getAttempts('Method', 'User', 123));
|
|
}
|
|
|
|
public function testGetAttempts() {
|
|
$this->timeFactory
|
|
->expects($this->once())
|
|
->method('getTime')
|
|
->willReturn(210);
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('get')
|
|
->with('eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b')
|
|
->willReturn(json_encode([
|
|
'1',
|
|
'2',
|
|
'87',
|
|
'123',
|
|
'123',
|
|
'124',
|
|
]));
|
|
|
|
$this->assertSame(3, $this->memoryCache->getAttempts('Method', 'User', 123));
|
|
}
|
|
|
|
public function testRegisterAttemptWithNoAttemptsBefore() {
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('get')
|
|
->with('eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b')
|
|
->willReturn(false);
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('set')
|
|
->with(
|
|
'eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b',
|
|
json_encode(['123'])
|
|
);
|
|
|
|
$this->memoryCache->registerAttempt('Method', 'User', 123);
|
|
}
|
|
|
|
public function testRegisterAttempts() {
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('get')
|
|
->with('eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b')
|
|
->willReturn(json_encode([
|
|
'1',
|
|
'2',
|
|
'87',
|
|
'123',
|
|
'123',
|
|
'124',
|
|
]));
|
|
$this->cache
|
|
->expects($this->once())
|
|
->method('set')
|
|
->with(
|
|
'eea460b8d756885099c7f0a4c083bf6a745069ee4a301984e726df58fd4510bffa2dac4b7fd5d835726a6753ffa8343ba31c7e902bbef78fc68c2e743667cb4b',
|
|
json_encode([
|
|
'1',
|
|
'2',
|
|
'87',
|
|
'123',
|
|
'123',
|
|
'124',
|
|
'129',
|
|
])
|
|
);
|
|
|
|
$this->memoryCache->registerAttempt('Method', 'User', 129);
|
|
}
|
|
}
|