update policy and fix other issues

2026-08-23 18:19:08 -04:00
parent 103f970110
commit a6e0ce1432
13 changed files with 433 additions and 317 deletions
@@ -69,6 +69,24 @@ class SessionTimeoutControllerTest extends CIUnitTestCase
        $this->assertGreaterThanOrEqual(time() - 1, session()->get('last_activity'));
    }

+    public function testHeartbeatRoutesAreNotRateLimited(): void
+    {
+        $routes = file_get_contents(ROOTPATH . 'app/Config/Routes.php') ?: '';
+
+        $this->assertStringContainsString(
+            "\$routes->post('session/ping-activity', 'View\\SessionTimeoutController::pingActivity');",
+            $routes
+        );
+        $this->assertStringContainsString(
+            "\$routes->post('session/ping', 'View\\SessionTimeoutController::pingActivity');",
+            $routes
+        );
+        $this->assertDoesNotMatchRegularExpression(
+            "/session\\/(?:ping-activity|ping).*apiratelimit/",
+            $routes
+        );
+    }
+
    private function controller(): SessionTimeoutController
    {
        Services::resetSingle('response');