Function badToken

packages/server/test/rate-limit.test.ts:44–50

(ip: string)

}

function badToken(ip: string): { method: 'GET'; url: string; headers: Record<string, string> } {
  return {
    method: 'GET',
    url: '/api/v1/sessions',
    headers: { 'x-forwarded-for': ip, authorization: 'Bearer wrong-token' },
  };
}

describe('createAuthHook rate limiting (M6.4)', () => {
  let app: FastifyInstance;