add SessionTimeout logic

tests/Unit/Services/Auth/SessionActivityServiceTest.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace Tests\Unit\Services\Auth;
+
+use App\Services\Auth\SessionActivityService;
+use Illuminate\Session\ArraySessionHandler;
+use Illuminate\Session\Store;
+use Tests\TestCase;
+
+class SessionActivityServiceTest extends TestCase
+{
+    public function test_set_and_get_last_activity(): void
+    {
+        $store = $this->makeSessionStore();
+        $service = new SessionActivityService($store);
+
+        $service->setLastActivity(12345);
+
+        $this->assertTrue($service->hasLastActivity());
+        $this->assertSame(12345, $service->getLastActivity());
+    }
+
+    public function test_clear_last_activity(): void
+    {
+        $store = $this->makeSessionStore();
+        $service = new SessionActivityService($store);
+
+        $service->setLastActivity(12345);
+        $service->clearLastActivity();
+
+        $this->assertFalse($service->hasLastActivity());
+    }
+
+    private function makeSessionStore(): Store
+    {
+        $handler = new ArraySessionHandler(10);
+        $store = new Store('test', $handler);
+        $store->start();
+
+        return $store;
+    }
+}

tests/Unit/Services/Auth/SessionTimeoutConfigServiceTest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace Tests\Unit\Services\Auth;
+
+use App\Services\Auth\SessionTimeoutConfigService;
+use Tests\TestCase;
+
+class SessionTimeoutConfigServiceTest extends TestCase
+{
+    public function test_config_returns_expected_keys(): void
+    {
+        $service = new SessionTimeoutConfigService();
+        $config = $service->config();
+
+        $this->assertArrayHasKey('timeout', $config);
+        $this->assertArrayHasKey('warning_time', $config);
+        $this->assertArrayHasKey('check_interval', $config);
+        $this->assertArrayHasKey('logout_url', $config);
+        $this->assertArrayHasKey('keep_alive_url', $config);
+        $this->assertArrayHasKey('check_url', $config);
+    }
+}

tests/Unit/Services/Auth/SessionTimeoutServiceTest.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace Tests\Unit\Services\Auth;
+
+use App\Config\SessionTimeout;
+use App\Services\Auth\SessionActivityService;
+use App\Services\Auth\SessionTimeoutService;
+use Mockery;
+use Tests\TestCase;
+
+class SessionTimeoutServiceTest extends TestCase
+{
+    public function test_check_timeout_returns_expired_when_missing_activity(): void
+    {
+        $activity = Mockery::mock(SessionActivityService::class);
+        $activity->shouldReceive('hasLastActivity')->andReturn(false);
+        $activity->shouldReceive('clearLastActivity')->once();
+        $activity->shouldReceive('invalidate')->once();
+
+        $service = new SessionTimeoutService($activity);
+        $result = $service->checkTimeout();
+
+        $this->assertSame('expired', $result['status']);
+    }
+
+    public function test_check_timeout_returns_warning(): void
+    {
+        $activity = Mockery::mock(SessionActivityService::class);
+        $activity->shouldReceive('hasLastActivity')->andReturn(true);
+        $activity->shouldReceive('getLastActivity')->andReturn(time() - (SessionTimeout::WARNING_THRESHOLD + 10));
+
+        $service = new SessionTimeoutService($activity);
+        $result = $service->checkTimeout();
+
+        $this->assertSame('warning', $result['status']);
+    }
+
+    public function test_ping_returns_expired_when_timed_out(): void
+    {
+        $activity = Mockery::mock(SessionActivityService::class);
+        $activity->shouldReceive('hasLastActivity')->andReturn(true);
+        $activity->shouldReceive('getLastActivity')->andReturn(time() - (SessionTimeout::TIMEOUT_DURATION + 10));
+        $activity->shouldReceive('clearLastActivity')->once();
+        $activity->shouldReceive('invalidate')->once();
+
+        $service = new SessionTimeoutService($activity);
+        $result = $service->pingActivity();
+
+        $this->assertSame('expired', $result['status']);
+    }
+}