GameCult/Bifrost
Watch
9
0
Fork
You've already forked Bifrost
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions 1

Pin that a signed-in retract spends the account budget

Browse source 
Hand mutant retract-key-ignores-signed-in-voter survived the first table.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Meta Vens 2026-10-11 09:46:45 +02:00
commit 2c8384e44a
1 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
tests/Bifrost.Web.Tests/ConceptVoteRateLimitTests.cs
View file

@ -152,6 +152,23 @@ public sealed class ConceptVoteRateLimitTests : IClassFixture<ConceptVoteRateLim
Assert.Equal(HttpStatusCode.Redirect, visitorOk.StatusCode);
}
[Fact]
public async Task Retract_by_a_signed_in_account_spends_the_account_budget_from_any_prefix()
{
var collection = await NewSubject();
var home = new Client(_factory, "203.0.113.60") { Account = ("7003", "carol-limits") };
var away = new Client(_factory, "203.0.113.61") { Account = ("7003", "carol-limits") };
var elsewhere = new Client(_factory, "203.0.113.62") { Account = ("7003", "carol-limits") };
await home.Post(collection, "Up");
await home.Post(collection, "Down");
using var third = await away.Post(collection, "Retract");
Assert.Equal(HttpStatusCode.Redirect, third.StatusCode);
using var denied = await elsewhere.Post(collection, "Retract");
Assert.Equal(HttpStatusCode.TooManyRequests, denied.StatusCode);
}
[Fact]
public async Task Mint_budget_is_spent_only_by_minting_casts()
{