@Test
  @Configuration(
      "{"
          + "  \"limit\" : 1000,"
          + "  \"direction\" : \"download\","
          + "  \"granularity\" : \"Api\","
          + "  \"period\" : \"Minute\""
          + "}")
  @BackEndApi(DownloadTestBackEndApi.class)
  public void testDownloadLimitNoHeaderConfig() throws Throwable {
    PolicyTestRequest request =
        PolicyTestRequest.build(PolicyTestRequestType.GET, "/some/resource");
    request.header("X-Payload-Size", "389");

    PolicyTestResponse response = send(request);
    Assert.assertNotNull(response.body());
    Assert.assertEquals("1000", response.header("X-TransferQuota-Remaining"));
    Assert.assertEquals("1000", response.header("X-TransferQuota-Limit"));

    send(request);
    send(request);

    // Now if we try it one more time, we'll get a failure!
    try {
      send(request);
      Assert.fail("Expected a policy failure!");
    } catch (PolicyFailureError e) {
      PolicyFailure failure = e.getFailure();
      Assert.assertEquals(PolicyFailureCodes.BYTE_QUOTA_EXCEEDED, failure.getFailureCode());
      Assert.assertEquals("Transfer quota exceeded.", failure.getMessage());
      Assert.assertEquals(429, failure.getResponseCode());
    }
  }
  /**
   * This utility method:
   *
   * <ul>
   *   <li>sets up a valid session
   *   <li>sends a request with a cookie containing the session ID
   *   <li>expects a 200 OK status code
   *   <li>fetches the (potentially updated) session
   * </ul>
   *
   * @param originalSession the session before the request is made
   * @param addCookie whether to add the session cookie to the request
   * @return the updated session
   * @throws Throwable
   */
  private Session makeSessionRequest(Session originalSession, boolean addCookie) throws Throwable {
    // wait for the clock to tick to ensure we can test the updated expiration time
    Thread.sleep(100);

    final PolicyTestRequest request = PolicyTestRequest.build(PolicyTestRequestType.GET, RESOURCE);

    if (addCookie) {
      // send request with cookie
      request.header(Constants.HEADER_COOKIE, CommonTestUtil.buildCookieHeader(originalSession));
    }

    final PolicyTestResponse response = send(request);
    assertEquals(HttpURLConnection.HTTP_OK, response.code());

    // content should be returned
    assertNotNull(response.header(Constants.HEADER_CONTENT_LENGTH));

    // verify the session data in the shared state has changed
    final Session updatedSession = CommonTestUtil.fetchSession(originalSession.getSessionId());
    assertNotNull(updatedSession);
    assertEquals(originalSession.getSessionId(), updatedSession.getSessionId());

    // these should not change from request to request
    assertEquals(originalSession.getAbsoluteExpiry(), updatedSession.getAbsoluteExpiry());
    assertEquals(originalSession.getValidityPeriod(), updatedSession.getValidityPeriod());

    return updatedSession;
  }
  @Test
  @Configuration(
      "{"
          + "  \"limit\" : 10485760,"
          + "  \"direction\" : \"upload\","
          + "  \"granularity\" : \"Api\","
          + "  \"period\" : \"Day\","
          + "  \"headerRemaining\" : \"X-Data-Remaining\","
          + "  \"headerLimit\" : \"X-Data-Limit\","
          + "  \"headerReset\" : \"X-Data-Reset\""
          + "}")
  public void testLargeUploadLimit() throws Throwable {
    PolicyTestRequest request =
        PolicyTestRequest.build(PolicyTestRequestType.POST, "/some/large-resource");
    // The 4th of these should exceed our limits
    byte[] data = new byte[11000000 / 4];
    Arrays.fill(data, (byte) 80);
    request.body(new String(data));

    PolicyTestResponse response = send(request);
    EchoResponse echo = response.entity(EchoResponse.class);
    Assert.assertNotNull(echo);
    Assert.assertEquals("7735760", response.header("X-Data-Remaining"));
    Assert.assertEquals("10485760", response.header("X-Data-Limit"));

    send(request);
    send(request);
    send(request);

    // Now if we try it one more time, we'll get a failure!
    try {
      send(request);
      Assert.fail("Expected a policy failure!");
    } catch (PolicyFailureError e) {
      PolicyFailure failure = e.getFailure();
      Assert.assertEquals(PolicyFailureCodes.BYTE_QUOTA_EXCEEDED, failure.getFailureCode());
      Assert.assertEquals("Transfer quota exceeded.", failure.getMessage());
      Assert.assertEquals(429, failure.getResponseCode());
      String remaining = failure.getHeaders().get("X-Data-Remaining");
      Assert.assertEquals("-514240", remaining);
    }
  }
  @Test
  @Configuration(
      "{"
          + "  \"limit\" : 500,"
          + "  \"direction\" : \"both\","
          + "  \"granularity\" : \"Api\","
          + "  \"period\" : \"Day\","
          + "  \"headerRemaining\" : \"X-Bytes-Remaining\","
          + "  \"headerLimit\" : \"X-Bytes-Limit\","
          + "  \"headerReset\" : \"X-Bytes-Reset\""
          + "}")
  @BackEndApi(DownloadTestBackEndApi.class)
  public void testBothLimit() throws Throwable {
    PolicyTestRequest request =
        PolicyTestRequest.build(PolicyTestRequestType.PUT, "/some/resource");
    request.header("X-Payload-Size", "50");
    byte[] data = new byte[50];
    Arrays.fill(data, (byte) 80);
    request.body(new String(data));

    PolicyTestResponse response = send(request);
    Assert.assertNotNull(response.body());
    Assert.assertEquals("450", response.header("X-Bytes-Remaining"));
    Assert.assertEquals("500", response.header("X-Bytes-Limit"));

    send(request);
    send(request);
    send(request);
    send(request);

    // Now if we try it one more time, we'll get a failure!
    try {
      send(request);
      Assert.fail("Expected a policy failure!");
    } catch (PolicyFailureError e) {
      PolicyFailure failure = e.getFailure();
      Assert.assertEquals(PolicyFailureCodes.BYTE_QUOTA_EXCEEDED, failure.getFailureCode());
      Assert.assertEquals("Transfer quota exceeded.", failure.getMessage());
      Assert.assertEquals(429, failure.getResponseCode());
    }
  }
  @Test
  @Configuration(
      "{"
          + "  \"limit\" : 100,"
          + "  \"direction\" : \"upload\","
          + "  \"granularity\" : \"Api\","
          + "  \"period\" : \"Day\","
          + "  \"headerRemaining\" : \"X-Bytes-Remaining\","
          + "  \"headerLimit\" : \"X-Bytes-Limit\","
          + "  \"headerReset\" : \"X-Bytes-Reset\""
          + "}")
  public void testUploadLimit() throws Throwable {
    PolicyTestRequest request =
        PolicyTestRequest.build(PolicyTestRequestType.POST, "/some/resource");
    request.body("0123456789");

    PolicyTestResponse response = send(request);
    EchoResponse echo = response.entity(EchoResponse.class);
    Assert.assertNotNull(echo);
    Assert.assertEquals("90", response.header("X-Bytes-Remaining"));
    Assert.assertEquals("100", response.header("X-Bytes-Limit"));

    // Now try sending a few more times to get closer to the limit
    for (int i = 0; i < 9; i++) {
      response = send(request);
    }
    echo = response.entity(EchoResponse.class);
    Assert.assertNotNull(echo);
    Assert.assertEquals("0", response.header("X-Bytes-Remaining"));
    Assert.assertEquals("100", response.header("X-Bytes-Limit"));

    // Now if we try it one more time, we'll get a failure!
    try {
      send(request);
      Assert.fail("Expected a policy failure!");
    } catch (PolicyFailureError e) {
      PolicyFailure failure = e.getFailure();
      Assert.assertEquals(PolicyFailureCodes.BYTE_QUOTA_EXCEEDED, failure.getFailureCode());
      Assert.assertEquals("Transfer quota exceeded.", failure.getMessage());
      Assert.assertEquals(429, failure.getResponseCode());
    }
  }