Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	1675031db74316e100782d063e9eda1a597fe3a1
Branch	workstream-a-opportunity-intelligence
Path or archive member	internal/platform/ratelimit/ratelimit_test.go
Original SHA-256	eaaf9a58472125108a6884ebaf0d26c65f0027a4354afd429cd7a9d3962be456
Git blob SHA	953ad8f01a19babf7d583bb256ada68963193b60
Reading-copy SHA-256	eaaf9a58472125108a6884ebaf0d26c65f0027a4354afd429cd7a9d3962be456

Original source ↗

Every recorded occurrence

These 7 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / internal/platform/ratelimit/ratelimit_test.go	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original

Recovered source transcript

Download complete source text ↓72 lines · 2.1 KB

package ratelimit

import (
	"net/http"
	"testing"
	"time"
)

func TestTokenBucket(t *testing.T) {
	l := New(1, 2) // 1 token/sec, burst 2
	now := time.Unix(1000, 0)
	l.now = func() time.Time { return now }

	// Burst of 2 is allowed, the third in the same instant is denied.
	if !l.Allow("a") || !l.Allow("a") {
		t.Fatal("burst of 2 should be allowed")
	}
	if l.Allow("a") {
		t.Fatal("third request in the same instant must be denied")
	}
	// A different key has its own bucket.
	if !l.Allow("b") {
		t.Fatal("a separate key must not share key a's bucket")
	}
	// After one second, one token refills.
	now = now.Add(time.Second)
	if !l.Allow("a") {
		t.Fatal("one token should refill after a second")
	}
	if l.Allow("a") {
		t.Fatal("only one token refilled, the next must be denied")
	}
}

func TestSweepDropsIdleFullBuckets(t *testing.T) {
	l := New(1, 1)
	now := time.Unix(1000, 0)
	l.now = func() time.Time { return now }
	l.Allow("a") // creates the bucket, now empty
	now = now.Add(10 * time.Second)
	l.Allow("a") // refills to full and consumes... back below full, so not swept yet
	now = now.Add(10 * time.Second)
	// "a" has refilled to full (capacity 1) by now; sweep should drop it.
	l.sweep(5 * time.Second)
	l.mu.Lock()
	_, present := l.buckets["a"]
	l.mu.Unlock()
	if present {
		t.Fatal("an idle, full bucket should be swept")
	}
}

func TestClientIP(t *testing.T) {
	r := &http.Request{RemoteAddr: "203.0.113.7:54321", Header: http.Header{}}
	if got := ClientIP(r, ""); got != "203.0.113.7" {
		t.Fatalf("TCP peer: got %q want 203.0.113.7", got)
	}
	r.Header.Set("X-Real-IP", "198.51.100.9")
	if got := ClientIP(r, "X-Real-IP"); got != "198.51.100.9" {
		t.Fatalf("trusted header: got %q want 198.51.100.9", got)
	}
	// A spoofed header is ignored when no trusted header is configured.
	if got := ClientIP(r, ""); got != "203.0.113.7" {
		t.Fatalf("untrusted: got %q want the TCP peer", got)
	}
	// A proxy chain takes the first entry.
	r.Header.Set("X-Real-IP", "198.51.100.9, 10.0.0.1")
	if got := ClientIP(r, "X-Real-IP"); got != "198.51.100.9" {
		t.Fatalf("proxy chain: got %q want the first entry", got)
	}
}