Adds unauthorized and forbidden response helpers, optimize stream write check.

.github/workflows/ci.yml

@@ -22,7 +22,6 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: ${{ env.PHP_VERSION }}
-          extensions: bcmath
           tools: composer:2
 
       - name: Validate composer.json
@@ -52,7 +51,6 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: ${{ env.PHP_VERSION }}
-          extensions: bcmath
           tools: composer:2
 
       - name: Download vendor artifact from build
@@ -77,7 +75,6 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: ${{ env.PHP_VERSION }}
-          extensions: bcmath
           tools: composer:2
 
       - name: Download vendor artifact from build

infection.json.dist

@@ -16,8 +16,7 @@
         "customPath": "./vendor/bin/phpunit"
     },
     "mutators": {
-        "@default": true,
-        "LogicalOr": false
+        "@default": true
     },
     "minCoveredMsi": 100,
     "testFramework": "phpunit"

src/Internal/Response/Stream/Stream.php

@@ -132,13 +132,7 @@ public function isWritable(): bool
             return false;
         }
 
-        $mode = $this->metaData->getMode();
-
-        return str_contains($mode, 'x')
-            || str_contains($mode, 'w')
-            || str_contains($mode, 'c')
-            || str_contains($mode, 'a')
-            || str_contains($mode, '+');
+        return strpbrk($this->metaData->getMode(), 'xwca+') !== false;
     }
 
     public function isSeekable(): bool

src/Response.php

@@ -34,6 +34,16 @@ public static function badRequest(mixed $body, Headers ...$headers): ResponseInt
         return InternalResponse::createWithBody($body, Code::BAD_REQUEST, ...$headers);
     }
 
+    public static function unauthorized(mixed $body, Headers ...$headers): ResponseInterface
+    {
+        return InternalResponse::createWithBody($body, Code::UNAUTHORIZED, ...$headers);
+    }
+
+    public static function forbidden(mixed $body, Headers ...$headers): ResponseInterface
+    {
+        return InternalResponse::createWithBody($body, Code::FORBIDDEN, ...$headers);
+    }
+
     public static function notFound(mixed $body, Headers ...$headers): ResponseInterface
     {
         return InternalResponse::createWithBody($body, Code::NOT_FOUND, ...$headers);

src/Responses.php

@@ -57,6 +57,24 @@ public static function noContent(Headers ...$headers): ResponseInterface;
      */
     public static function badRequest(mixed $body, Headers ...$headers): ResponseInterface;
 
+    /**
+     * Creates a response with a 401 Unauthorized status.
+     *
+     * @param mixed $body The body of the response.
+     * @param Headers ...$headers Optional additional headers for the response.
+     * @return ResponseInterface The generated 401 Unauthorized response.
+     */
+    public static function unauthorized(mixed $body, Headers ...$headers): ResponseInterface;
+
+    /**
+     * Creates a response with a 403 Forbidden status.
+     *
+     * @param mixed $body The body of the response.
+     * @param Headers ...$headers Optional additional headers for the response.
+     * @return ResponseInterface The generated 403 Forbidden response.
+     */
+    public static function forbidden(mixed $body, Headers ...$headers): ResponseInterface;
+
     /**
      * Creates a response with a 404 Not Found status.
      *

tests/ResponseTest.php

@@ -169,6 +169,66 @@ public function testResponseBadRequest(): void
         self::assertSame(['Content-Type' => ['application/json; charset=utf-8']], $actual->getHeaders());
     }
 
+    public function testResponseUnauthorized(): void
+    {
+        /** @Given a body with error details */
+        $body = [
+            'error'   => 'Unauthorized',
+            'message' => 'Authentication is required to access this resource.'
+        ];
+
+        /** @When we create the HTTP response with this body */
+        $actual = Response::unauthorized(body: $body);
+
+        /** @Then the protocol version should be "1.1" */
+        self::assertSame('1.1', $actual->getProtocolVersion());
+
+        /** @And the body of the response should match the JSON-encoded body */
+        self::assertSame(json_encode($body, JSON_PRESERVE_ZERO_FRACTION), $actual->getBody()->__toString());
+        self::assertSame(json_encode($body, JSON_PRESERVE_ZERO_FRACTION), $actual->getBody()->getContents());
+
+        /** @And the status code should be 401 */
+        self::assertSame(Code::UNAUTHORIZED->value, $actual->getStatusCode());
+        self::assertTrue(Code::isValidCode(code: $actual->getStatusCode()));
+        self::assertTrue(Code::isErrorCode(code: $actual->getStatusCode()));
+
+        /** @And the reason phrase should be "Unauthorized" */
+        self::assertSame(Code::UNAUTHORIZED->message(), $actual->getReasonPhrase());
+
+        /** @And the headers should contain Content-Type as application/json with charset=utf-8 */
+        self::assertSame(['Content-Type' => ['application/json; charset=utf-8']], $actual->getHeaders());
+    }
+
+    public function testResponseForbidden(): void
+    {
+        /** @Given a body with error details */
+        $body = [
+            'error'   => 'Forbidden',
+            'message' => 'You do not have permission to access this resource.'
+        ];
+
+        /** @When we create the HTTP response with this body */
+        $actual = Response::forbidden(body: $body);
+
+        /** @Then the protocol version should be "1.1" */
+        self::assertSame('1.1', $actual->getProtocolVersion());
+
+        /** @And the body of the response should match the JSON-encoded body */
+        self::assertSame(json_encode($body, JSON_PRESERVE_ZERO_FRACTION), $actual->getBody()->__toString());
+        self::assertSame(json_encode($body, JSON_PRESERVE_ZERO_FRACTION), $actual->getBody()->getContents());
+
+        /** @And the status code should be 403 */
+        self::assertSame(Code::FORBIDDEN->value, $actual->getStatusCode());
+        self::assertTrue(Code::isValidCode(code: $actual->getStatusCode()));
+        self::assertTrue(Code::isErrorCode(code: $actual->getStatusCode()));
+
+        /** @And the reason phrase should be "Forbidden" */
+        self::assertSame(Code::FORBIDDEN->message(), $actual->getReasonPhrase());
+
+        /** @And the headers should contain Content-Type as application/json with charset=utf-8 */
+        self::assertSame(['Content-Type' => ['application/json; charset=utf-8']], $actual->getHeaders());
+    }
+
     public function testResponseNotFound(): void
     {
         /** @Given a body with error details */