From 965551532d684456b74baf960157c0c2cef7335d Mon Sep 17 00:00:00 2001
From: Brett Parson <brett@brett-parson.com>
Date: Sat, 29 Aug 2026 15:56:31 -0500
Subject: Add regression and integration test suite

Port the stress-test findings into PHPUnit: realistic brett-parson.com
route model, known-issue baselines, router boundary cases, and a
standalone scaling benchmark (composer bench).
---
 tests/Fixtures/CsrfLoggingMiddleware.php | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 tests/Fixtures/CsrfLoggingMiddleware.php

(limited to 'tests/Fixtures/CsrfLoggingMiddleware.php')

diff --git a/tests/Fixtures/CsrfLoggingMiddleware.php b/tests/Fixtures/CsrfLoggingMiddleware.php
new file mode 100644
index 0000000..4fa25d5
--- /dev/null
+++ b/tests/Fixtures/CsrfLoggingMiddleware.php
@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+namespace BrettParson\MiniRoute\Tests\Fixtures;
+
+use ArrayObject;
+use BrettParson\MiniRoute\Http\RequestInterface;
+use BrettParson\MiniRoute\Http\ResponseInterface;
+use BrettParson\MiniRoute\Middleware\MiddlewareInterface;
+
+/**
+ * Logs before/after into a shared log. Stands in for the real app's CSRF
+ * guard, applied to the /admin prefix for POST only.
+ */
+final class CsrfLoggingMiddleware implements MiddlewareInterface
+{
+    public function __construct(private readonly ArrayObject $log)
+    {
+    }
+
+    public function handle(RequestInterface $request, callable $next): ResponseInterface
+    {
+        $this->log->append('csrf:before');
+        $response = $next($request);
+        $this->log->append('csrf:after');
+
+        return $response;
+    }
+}
-- 
cgit v1.2.3