Implement shared authentication leases

crates/storage/tests/config_contract.rs

@@ -2,8 +2,11 @@
 
 use std::{error::Error, ffi::OsStr, fs, path::Path, time::Duration};
 
-use ironstorage::config::{ConfigError, ConfigLoader, EditorSource};
 use ironstorage::presentation::DEFAULT_CLIPBOARD_TIMEOUT;
+use ironstorage::{
+    authentication::{DEFAULT_AUTHENTICATION_TIMEOUT, MAX_AUTHENTICATION_TIMEOUT},
+    config::{ConfigError, ConfigLoader, EditorSource},
+};
 use tempfile::TempDir;
 
 type TestResult = Result<(), Box<dyn Error>>;
@@ -83,6 +86,45 @@ fn explicit_relative_configuration_resolves_deterministically() -> TestResult {
         config.clipboard_timeout().duration(),
         DEFAULT_CLIPBOARD_TIMEOUT
     );
+    assert_eq!(
+        config.authentication_timeout().duration(),
+        DEFAULT_AUTHENTICATION_TIMEOUT
+    );
+    Ok(())
+}
+
+#[test]
+fn authentication_timeout_defaults_overrides_and_rejects_invalid_values() -> TestResult {
+    let fixture = ConfigurationFixture::new()?;
+    fixture.write_explicit(&fixture.valid_contents().replace(
+        "editor = [\"code\", \"--wait\"]",
+        "editor = [\"code\", \"--wait\"]\n[security]\ninactivity_timeout_seconds = 300",
+    ))?;
+    let config = fixture
+        .loader()
+        .load(Some(Path::new("config/config.toml")))?;
+    assert_eq!(
+        config.authentication_timeout().duration(),
+        Duration::from_secs(300)
+    );
+
+    for timeout in [0, MAX_AUTHENTICATION_TIMEOUT.as_secs() + 1] {
+        fixture.write_explicit(&fixture.valid_contents().replace(
+            "editor = [\"code\", \"--wait\"]",
+            &format!(
+                "editor = [\"code\", \"--wait\"]\n[security]\ninactivity_timeout_seconds = {timeout}"
+            ),
+        ))?;
+        assert_eq!(
+            fixture
+                .loader()
+                .load(Some(Path::new("config/config.toml")))
+                .expect_err("invalid authentication timeout"),
+            ConfigError::InvalidField {
+                field: "security.inactivity_timeout_seconds"
+            }
+        );
+    }
     Ok(())
 }