stacklok / toolhive / 24252140182

66%

Build Type

push

github

Committed by web-flow

Commit Message

Wire per-user identity into rate limit middleware (#4718)

The rate limit middleware was passing an empty string for userID, meaning per-user buckets (added in #4704) were never checked. This wires identity.Subject from the auth context into the limiter so per-user rate limits are enforced at runtime.

Extract auth.IdentityFromContext() in rateLimitHandler and pass identity.Subject as the userID to limiter.Allow()
Hoist the parameterized mock OIDC server from virtualmcp/helpers.go into the shared testutil package for reuse across test suites
Add E2E acceptance test: deploy MCPServer with perUser rate limit + inline OIDC auth, verify user-a is rejected after limit, user-b succeeds independently
Closes #4550

Coverage Stats

5 of 5 new or added lines in 1 file covered. (100.0%)

5 existing lines in 2 files now uncovered.

56232 of 85969 relevant lines covered (65.41%)

62.47 hits per line