cschlaefke/Shuffle
1
0
Fork 0
Code Issues 33 Pull requests 2 Projects Releases Packages Wiki Activity Actions

Merge pull request 'fix(e2e): Throttle-Test „zweite IP“ toleriert Nachfüllrate' (#66) from fix/65-throttle-test-zweite-ip into main
Some checks failed
CI / e2e (push) Blocked by required conditions
Details
CI / flutter (push) Successful in 1m37s
Details
CI / web-build (push) Successful in 1m6s
Details
CI / supabase (push) Successful in 11s
Details
CI / supabase-tests (push) Has been cancelled
Details

Browse source 
Reviewed-on: #66
This commit is contained in:
cschlaefke 2026-11-04 17:26:14 +00:00
commit 4f5e314b96
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
e2e/tests/throttle/krit07-drosselung.spec.ts
View file

@ -78,10 +78,17 @@ test.describe('KTO-01 Kriterium 7: Drosselung der Anmeldung (throttle)', () => {
test('KTO-01 Kriterium 7: AUTH-CFG-10 eine zweite IP ist von der Drosselung der ersten nicht betroffen', async () => { test('KTO-01 Kriterium 7: AUTH-CFG-10 eine zweite IP ist von der Drosselung der ersten nicht betroffen', async () => {
const { email, password } = await createUser(); const { email, password } = await createUser();
const first = client(randomIp()); const first = client(randomIp());
const started = Date.now();
for (let attempt = 1; attempt <= authConfig.loginBurst; attempt++) { for (let attempt = 1; attempt <= authConfig.loginBurst; attempt++) {
await first.signIn(email, `${password}-falsch`); await first.signIn(email, `${password}-falsch`);
} }
expect((await first.signIn(email, `${password}-falsch`)).status).toBe(429); const tolerance = refillTolerance(Date.now() - started);
// Der Limiter fuellt 0,5 Token/s nach: bis zu `tolerance` weitere Versuche, bis die 429 kommt.
let limited = await first.signIn(email, `${password}-falsch`);
for (let extra = 0; extra < tolerance && limited.status !== 429; extra++) {
limited = await first.signIn(email, `${password}-falsch`);
}
expect(limited.status).toBe(429);
const second = client(randomIp()); const second = client(randomIp());
const wrong = await second.signIn(email, `${password}-falsch`); const wrong = await second.signIn(email, `${password}-falsch`);