rack-attack/spec/acceptance/stores/connection_pool_dalli_client_spec.rb

require_relative "../../spec_helper"

if defined?(::Dalli) && defined?(::ConnectionPool)
  require_relative "../../support/cache_store_helper"
  require "connection_pool"
  require "dalli"
  require "timecop"

  describe "ConnectionPool with Dalli::Client as a cache backend" do
    before do
      Rack::Attack.cache.store = ConnectionPool.new { Dalli::Client.new }
    end

    after do
      Rack::Attack.cache.store.with { |client| client.flush_all }
    end

    it_works_for_cache_backed_features

    it "doesn't leak keys" do
      Rack::Attack.throttle("by ip", limit: 1, period: 1) do |request|
        request.ip
      end

      key = nil

      # Freeze time during these statement to be sure that the key used by rack attack is the same
      # we pre-calculate in local variable `key`
      Timecop.freeze do
        key = "rack::attack:#{Time.now.to_i}:by ip:1.2.3.4"

        get "/", {}, "REMOTE_ADDR" => "1.2.3.4"
      end

      assert(Rack::Attack.cache.store.with { |client| client.fetch(key) })

      sleep 2.1

      assert_nil(Rack::Attack.cache.store.with { |client| client.fetch(key) })
    end
  end
end