# frozen_string_literal: true require 'rails_helper' describe ApplicationController do controller do include RateLimitHeaders def show head 200 end end before do routes.draw { get 'show' => 'anonymous#show' } end describe 'rate limiting' do context 'throttling is off' do before do request.env['rack.attack.throttle_data'] = nil end it 'does not apply rate limiting' do get 'show' expect(response.headers['X-RateLimit-Limit']).to be_nil expect(response.headers['X-RateLimit-Remaining']).to be_nil expect(response.headers['X-RateLimit-Reset']).to be_nil end end context 'throttling is on' do let(:start_time) { DateTime.new(2017, 1, 1, 12, 0, 0).utc } before do request.env['rack.attack.throttle_data'] = { 'throttle_authenticated_api' => { limit: 100, count: 20, period: 10 } } travel_to start_time do get 'show' end end it 'applies rate limiting limit header' do expect(response.headers['X-RateLimit-Limit']).to eq '100' end it 'applies rate limiting remaining header' do expect(response.headers['X-RateLimit-Remaining']).to eq '80' end it 'applies rate limiting reset header' do expect(response.headers['X-RateLimit-Reset']).to eq (start_time + 10.seconds).iso8601(6) end end end end