style: auto-fix 1340 phpcs PSR-12 violations via phpcbf; exclude MissingNamespace and SideEffects

middleware/RateLimitMiddleware.php

@@ -1,11 +1,13 @@
 <?php
+
 /**
  * Rate Limiting Middleware
  *
  * Implements both session-based and IP-based rate limiting to prevent abuse.
  * IP-based limiting prevents attackers from bypassing limits by creating new sessions.
  */
-class RateLimitMiddleware {
+class RateLimitMiddleware
+{
     // Default limits
     public const DEFAULT_LIMIT = 100;      // requests per window (session)
     public const API_LIMIT = 60;           // API requests per window (session)
@@ -21,7 +23,8 @@ class RateLimitMiddleware {
      *
      * @return string Path to rate limit storage directory
      */
-    private static function getRateLimitDir(): string {
+    private static function getRateLimitDir(): string
+    {
         if (self::$rateLimitDir === null) {
             self::$rateLimitDir = sys_get_temp_dir() . '/tinker_tickets_ratelimit';
             if (!is_dir(self::$rateLimitDir)) {
@@ -36,7 +39,8 @@ class RateLimitMiddleware {
      *
      * @return string Client IP address
      */
-    private static function getClientIp(): string {
+    private static function getClientIp(): string
+    {
         // Check for forwarded IP (behind proxy/load balancer)
         $headers = ['HTTP_X_FORWARDED_FOR', 'HTTP_X_REAL_IP', 'HTTP_CLIENT_IP'];
         foreach ($headers as $header) {
@@ -58,7 +62,8 @@ class RateLimitMiddleware {
      * @param string $type 'default' or 'api'
      * @return bool True if request is allowed, false if rate limited
      */
-    private static function checkIpRateLimit(string $type = 'default'): bool {
+    private static function checkIpRateLimit(string $type = 'default'): bool
+    {
         $ip = self::getClientIp();
         $limit = $type === 'api' ? self::IP_API_LIMIT : self::IP_LIMIT;
         $now = time();
@@ -100,7 +105,8 @@ class RateLimitMiddleware {
      * Uses DirectoryIterator instead of glob() for better memory efficiency.
      * A dedicated cron script (cron/cleanup_ratelimit.php) should also run for reliable cleanup.
      */
-    public static function cleanupOldFiles(): void {
+    public static function cleanupOldFiles(): void
+    {
         $dir = self::getRateLimitDir();
         $lockFile = $dir . '/.cleanup.lock';
         $now = time();
@@ -157,7 +163,8 @@ class RateLimitMiddleware {
      * @param string $type 'default' or 'api'
      * @return bool True if request is allowed, false if rate limited
      */
-    public static function check(string $type = 'default'): bool {
+    public static function check(string $type = 'default'): bool
+    {
         // First check IP-based rate limit (prevents session bypass)
         if (!self::checkIpRateLimit($type)) {
             return false;
@@ -206,7 +213,8 @@ class RateLimitMiddleware {
      * @param string $type 'default' or 'api'
      * @param bool $addHeaders Whether to add rate limit headers to response
      */
-    public static function apply(string $type = 'default', bool $addHeaders = true): void {
+    public static function apply(string $type = 'default', bool $addHeaders = true): void
+    {
         // Periodically clean up old rate limit files (2% chance per request)
         // Note: For production, use cron/cleanup_ratelimit.php for reliable cleanup
         if (mt_rand(1, 50) === 1) {
@@ -240,7 +248,8 @@ class RateLimitMiddleware {
      * @param string $type 'default' or 'api'
      * @return array Rate limit status
      */
-    public static function getStatus(string $type = 'default'): array {
+    public static function getStatus(string $type = 'default'): array
+    {
         if (session_status() === PHP_SESSION_NONE) {
             session_start();
         }
@@ -280,7 +289,8 @@ class RateLimitMiddleware {
      *
      * @param string $type 'default' or 'api'
      */
-    public static function addHeaders(string $type = 'default'): void {
+    public static function addHeaders(string $type = 'default'): void
+    {
         $status = self::getStatus($type);
         header('X-RateLimit-Limit: ' . $status['limit']);
         header('X-RateLimit-Remaining: ' . $status['remaining']);