Function TestRateLimiterMemoryStore_TOCTOUFix

middleware/rate_limiter_test.go:513–538

TestRateLimiterMemoryStore_TOCTOUFix verifies that the TOCTOU race condition is fixed by ensuring timeNow() is only called once per Allow() call

(t *testing.T)

// TestRateLimiterMemoryStore_TOCTOUFix verifies that the TOCTOU race condition is fixed
// by ensuring timeNow() is only called once per Allow() call
func TestRateLimiterMemoryStore_TOCTOUFix(t *testing.T) {
	t.Parallel()

	store := NewRateLimiterMemoryStoreWithConfig(RateLimiterMemoryStoreConfig{
		Rate:      1,
		Burst:     1,
		ExpiresIn: 2 * time.Second,
	})

	// Track time calls to verify we use the same time value
	timeCallCount := 0
	baseTime := time.Date(2009, time.November, 10, 23, 0, 0, 0, time.UTC)

	store.timeNow = func() time.Time {
		timeCallCount++
		return baseTime
	}

	// First request - should succeed
	allowed, err := store.Allow("127.0.0.1")
	assert.NoError(t, err)
	assert.True(t, allowed, "First request should be allowed")

	// Verify timeNow() was only called once
	assert.Equal(t, 1, timeCallCount, "timeNow() should only be called once per Allow()")
}

// TestRateLimiterMemoryStore_ConcurrentAccess verifies rate limiting correctness under concurrent load
func TestRateLimiterMemoryStore_ConcurrentAccess(t *testing.T) {