feat: scaffold behat tsa extension package

Signed-off-by: Vitor Mattos <vitor@php.rio>

Author: vitormattos

.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+          coverage: none
+
+      - name: Validate composer
+        run: composer validate --no-check-publish
+
+      - name: Install dependencies
+        run: composer install --no-interaction --no-progress
+
+      - name: Lint
+        run: find src tests -name '*.php' -print0 | xargs -0 -n1 php -l
+
+      - name: Run tests
+        run: composer test

.gitignore

@@ -0,0 +1,3 @@
+/vendor/
+/.phpunit.cache/
+/composer.lock

LICENSE

@@ -0,0 +1,42 @@
+# behat-tsa-extension
+
+Behat extension that starts a local RFC3161 TSA server for deterministic integration tests.
+
+## Why
+
+Public TSA providers can introduce flaky CI runs because of network and availability variance.
+This extension boots a local TSA responder during Behat execution and exposes its URL through an environment variable.
+
+## Installation
+
+composer require --dev libresign/behat-tsa-extension
+
+## Configuration
+
+default:
+  extensions:
+    LibreSign\Behat\TsaExtension\ServiceContainer\TsaExtension:
+      enabled: true
+      host: 127.0.0.1
+      port: 0
+      path: /tsr
+      policy_oid: 1.2.3.4.1
+      env_var: LIBRESIGN_TSA_URL
+      verbose: false
+
+## How it works
+
+- On suite start, it creates a temporary local TSA setup (CA, TSA cert, OpenSSL config).
+- It starts a local HTTP server that replies with a valid RFC3161 response using OpenSSL.
+- It exports the final endpoint in the configured environment variable.
+- On suite finish, it stops the server and cleans temporary files.
+
+## Requirements
+
+- PHP 8.2+
+- OpenSSL with openssl ts support
+- Behat 3.13+
+
+## License
+
+AGPL-3.0-or-later

README.md

@@ -0,0 +1,48 @@
+{
+    "name": "libresign/behat-tsa-extension",
+    "description": "Behat extension that boots a local RFC3161 TSA server for deterministic integration tests",
+    "type": "library",
+    "license": "AGPL-3.0-or-later",
+    "keywords": [
+        "behat",
+        "rfc3161",
+        "tsa",
+        "libresign",
+        "nextcloud"
+    ],
+    "authors": [
+        {
+            "name": "LibreSign Team",
+            "email": "hello@libresign.coop"
+        }
+    ],
+    "autoload": {
+        "psr-4": {
+            "LibreSign\\Behat\\TsaExtension\\": "src/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "LibreSign\\Behat\\TsaExtension\\Tests\\": "tests/"
+        }
+    },
+    "minimum-stability": "stable",
+    "require": {
+        "php": "^8.2",
+        "behat/behat": "^3.13",
+        "symfony/config": "^7.0",
+        "symfony/dependency-injection": "^7.0",
+        "symfony/event-dispatcher": "^7.0"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "^10.5"
+    },
+    "scripts": {
+        "test": "phpunit -c phpunit.xml.dist --colors=always"
+    },
+    "config": {
+        "optimize-autoloader": true,
+        "classmap-authoritative": true,
+        "sort-packages": true
+    }
+}

composer.json

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit bootstrap="vendor/autoload.php" colors="true" cacheDirectory=".phpunit.cache">
+    <testsuites>
+        <testsuite name="unit">
+            <directory>tests</directory>
+        </testsuite>
+    </testsuites>
+</phpunit>