Testing a middleware checks the IP address

Hello,

I need to test this middleware.

Something to know : I have added an ip_address field in the personal_access_tokens table.

public function handle(Request $request, Closure $next): Response
{
    $user = $request->user();

    if (!$user) {
        throw new AuthenticationException('Unauthenticated.');
    }

    $current_ip_address = $request->ip();

    if ($user->currentAccessToken()->ip_address !== $current_ip_address) {
        $user->currentAccessToken()->delete();

        throw new AuthenticationException('User can\'t be authenticated from two different locations at the same time.');
    }

    return $next($request);
}

Here is the test.

public function test_with_the_wrong_ip_address(): void
{
	Exceptions::fake();

    $response = $this->postJson('/api/v1/auth/login', [
        'email' => '[email protected]',
        'password' => 'musique',
    ]);

    $response->assertValid()->assertOk();

    $token = $response->json()['token'];

    PersonalAccessToken::first()->forceFill(['ip_address' => '91.272.36.154'])->update();

    $this->assertDatabaseHas('personal_access_tokens', [
        'ip_address' => '91.272.36.154',
    ]);

    $response = $this
        ->withToken($token)
        ->withServerVariables(['REMOTE_ADDR' => '91.272.36.155']) // 155 instead of 154
        ->getJson('/api/v1/branches/select');

	Exceptions::assertReported(AuthenticationException::class);
}

The test fails whereas it should pass.

Can you help me understand why ?

Thanks for your help ;).

V