test: validate click-to-sign revocation timestamp offset

Signed-off-by: Vitor Mattos <[email protected]>

Author: vitormattos

tests/php/Unit/Listener/RevokeClickToSignCertificateListenerTest.php

@@ -86,7 +86,9 @@ public function testRevokeClickToSignCertificateUsingSupersededReasonCode(): voi
 				$serialNumber,
 				CRLReason::SUPERSEDED,
 				$this->anything(),
-				$this->anything()
+				$this->anything(),
+				null,
+				$this->isInstanceOf(\DateTime::class),
 			)
 			->willReturn(true);
 
@@ -102,7 +104,9 @@ public function testRevocationMustBeAttributedToSystemUser(): void {
 				$this->anything(),
 				$this->anything(),
 				$this->anything(),
-				'system'
+				'system',
+				null,
+				$this->isInstanceOf(\DateTime::class),
 			)
 			->willReturn(true);
 
@@ -122,7 +126,9 @@ public function testRevocationMessageMustExplainTemporaryCertificateForAuditPurp
 					$this->stringContains('click-to-sign'),
 					$this->stringContains('revoked after document signing')
 				),
-				$this->anything()
+				$this->anything(),
+				null,
+				$this->isInstanceOf(\DateTime::class),
 			)
 			->willReturn(true);
 
@@ -157,6 +163,31 @@ public function testLogDebugWhenRevocationSucceeds(): void {
 		$this->listener->handle($event);
 	}
 
+	public function testRevocationDateIsSetAtLeastOneSecondInFutureToAvoidTimestampTie(): void {
+		$event = $this->createSignedEvent(true, 'OFFSET_123');
+		$beforeCall = new \DateTime();
+
+		$this->crlService->expects($this->once())
+			->method('revokeCertificate')
+			->with(
+				$this->anything(),
+				$this->anything(),
+				$this->anything(),
+				$this->anything(),
+				null,
+				$this->callback(function ($revokedAt) use ($beforeCall): bool {
+					if (!($revokedAt instanceof \DateTime)) {
+						return false;
+					}
+					$delta = $revokedAt->getTimestamp() - $beforeCall->getTimestamp();
+					return $delta >= 1;
+				})
+			)
+			->willReturn(true);
+
+		$this->listener->handle($event);
+	}
+
 	private function createSignedEvent(bool $signedWithoutPassword, ?string $certificateSerialHex): SignedEvent {
 		$signRequest = new SignRequest();
 		$signRequest->setId(123);