*/ private array $recorded = []; private function usage(?array $claims): ConnectionUsage { return new ConnectionUsage( static fn (string $token): ?array => $token === 'valid-token' ? $claims : null, function (int $userId, string $uuid): void { $this->recorded[] = [$userId, $uuid]; } ); } private function request(string $route = '/mcp/mcp-oauth-server', string $auth = 'Bearer valid-token'): WP_REST_Request { return new WP_REST_Request($route, ['authorization' => $auth]); } public function testRegistersAfterTheRouteCallback(): void { $usage = $this->usage([]); Functions\expect('add_filter')->once()->with('rest_request_after_callbacks', [$usage, 'record'], 10, 3); $usage->register(); } public function testRecordsUsageOfTheTokensApplicationPasswordForTheAuthenticatedUser(): void { Functions\when('get_current_user_id')->justReturn(7); $response = ['jsonrpc' => '2.0']; $result = $this->usage(['sub' => 7, 'app_pass_id' => 'uuid-1'])->record($response, [], $this->request()); self::assertSame($response, $result); self::assertSame([[7, 'uuid-1']], $this->recorded); } public function testIgnoresOtherRoutesFailedRequestsAndForeignOrInvalidTokens(): void { Functions\when('get_current_user_id')->justReturn(7); $claims = ['sub' => 7, 'app_pass_id' => 'uuid-1']; $this->usage($claims)->record([], [], $this->request('/wp/v2/posts')); $this->usage($claims)->record(new WP_Error('unauthorized', 'x'), [], $this->request()); $this->usage($claims)->record([], [], $this->request('/mcp/mcp-oauth-server', 'Basic abc')); $this->usage($claims)->record([], [], $this->request('/mcp/mcp-oauth-server', 'Bearer forged')); $this->usage(['sub' => 8, 'app_pass_id' => 'uuid-1'])->record([], [], $this->request()); $this->usage(['sub' => 7])->record([], [], $this->request()); self::assertSame([], $this->recorded); } public function testNeverBreaksTheResponseWhenDecodingOrRecordingFails(): void { Functions\when('get_current_user_id')->justReturn(7); $usage = new ConnectionUsage( static fn (): ?array => throw new \RuntimeException('bad secret'), static function (): void { } ); self::assertSame(['ok'], $usage->record(['ok'], [], $this->request())); } }