vws-python-mock 2026.9.6__tar.gz → 2026.9.8__tar.gz

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/.github/workflows/publish-site.yml

@@ -21,7 +21,7 @@ jobs:
         uses: sphinx-notes/pages@v3
         with:
           documentation_path: docs/source
-          pyproject_extras: dev
+          pyproject_group: dev
           python_version: '3.14'
           sphinx_build_options: -W
           publish: ${{ github.ref_name == 'main' }}

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/.github/workflows/release.yml

@@ -55,7 +55,7 @@ jobs:
       - name: Generate the GitHub release notes
         env:
           RELEASE: ${{ steps.calver.outputs.release }}
-        run: uv run --extra=release towncrier build --draft --version "$RELEASE" >
+        run: uv run --group=release towncrier build --draft --version "$RELEASE" >
           release-notes.md
 
       # Assemble the same fragments into CHANGELOG.rst under a new
@@ -63,7 +63,7 @@ jobs:
       - name: Update the changelog
         env:
           RELEASE: ${{ steps.calver.outputs.release }}
-        run: uv run --extra=release towncrier build --yes --version "$RELEASE"
+        run: uv run --group=release towncrier build --yes --version "$RELEASE"
 
       - uses: stefanzweifel/git-auto-commit-action@v7
         id: commit
@@ -122,7 +122,7 @@ jobs:
       - name: Build a binary wheel and a source tarball
         run: |
           uv build --sdist --wheel --out-dir dist/
-          uv run --extra=release check-wheel-contents dist/*.whl
+          uv run --group=release check-wheel-contents dist/*.whl
 
       # We use PyPI trusted publishing rather than a PyPI API token.
       # See https://github.com/pypa/gh-action-pypi-publish/tree/release/v1/?tab=readme-ov-file#trusted-publishing.

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/.github/workflows/test.yml

@@ -65,6 +65,9 @@ jobs:
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_not_integer
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_too_large
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_too_small
+          - tests/mock_vws/test_header_size.py::TestOversizedHeaderLine::test_header_too_large
+          - tests/mock_vws/test_header_size.py::TestOversizedHeaderLine::test_cookie_too_large
+          - tests/mock_vws/test_header_size.py::TestOversizedHeaderLine::test_large_header_within_limit
           - tests/mock_vws/test_database_summary.py::TestDatabaseSummary::test_success
           - tests/mock_vws/test_database_summary.py::TestDatabaseSummary::test_active_images
           - tests/mock_vws/test_database_summary.py::TestDatabaseSummary::test_failed_images
@@ -185,7 +188,7 @@ jobs:
 
       - name: Run tests
         run: |
-          uv run --extra=dev \
+          uv run --group=dev \
             coverage run -m pytest \
               -s \
               -vvv \
@@ -234,12 +237,12 @@ jobs:
 
       - name: Run tests
         run: |
-          uv run --extra=dev \
+          uv run --group=dev \
             coverage run -m pytest \
-              --skip-docker_build_tests \
-              --skip-docker_in_memory \
-              --skip-mock \
-              --skip-real \
+              --skip-marker=requires_docker_build \
+              --skip-backend=flask_in_process \
+              --skip-backend=mock \
+              --skip-backend=real \
               --capture=no \
               -vvv \
               --exitfirst \
@@ -300,9 +303,9 @@ jobs:
           # We use pytest-xdist to make this run much faster.
           # The downside is that we cannot use -s / --capture=no.
           #
-          uv run --extra=dev \
+          uv run --group=dev \
             coverage run -m pytest \
-              --skip-real \
+              --skip-backend=real \
               -vvv \
               --exitfirst \
               -n auto \
@@ -344,15 +347,15 @@ jobs:
       - name: Require 100% Coverage
         id: coverage
         run: |
-          uv run --extra=dev coverage combine
-          uv run --extra=dev coverage html --skip-covered --skip-empty
+          uv run --group=dev coverage combine
+          uv run --group=dev coverage html --skip-covered --skip-empty
 
           # Report and write to summary, without failing yet.
-          uv run --extra=dev coverage report --format=markdown \
+          uv run --group=dev coverage report --format=markdown \
             >> "$GITHUB_STEP_SUMMARY" || true
 
           # Report again and fail if under 100%.
-          uv run --extra=dev coverage report
+          uv run --group=dev coverage report
 
       - name: Upload HTML report if check failed
         uses: actions/upload-artifact@v7

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/CHANGELOG.rst

@@ -3,6 +3,16 @@ Changelog
 
 .. towncrier release notes start
 
+2026.09.08
+----------
+
+- The response delay and client timeout simulation is now provided by the ``mock-response-delay`` package.
+
+- The mock now returns NGINX's ``400 Request Header Or Cookie Too Large`` response for any request header line longer than 8190 bytes, as real Vuforia does.
+
+- Match real Vuforia's request rate limiting, which was checked against it on 2026-09-08.
+  ``DOCUMENTED_REQUEST_RATE_LIMITS`` now allows two ``GET /targets`` requests per minute rather than one, a rate-limited request gets Envoy's empty-bodied ``429`` response rather than a JSON ``TooManyRequests`` body, and the limits are applied before the request's signature is checked.
+
 2026.09.06
 ----------
 

{vws_python_mock-2026.9.6/src/vws_python_mock.egg-info → vws_python_mock-2026.9.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vws-python-mock
-Version: 2026.9.6
+Version: 2026.9.8
 Summary: A mock for the Vuforia Web Services (VWS) API.
 Author-email: Adam Dangoor <adamdangoor@gmail.com>
 License-Expression: MIT
@@ -21,6 +21,7 @@ Requires-Dist: beartype>=0.22.9
 Requires-Dist: flask>=3.0.3
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: httpx2>=2.12
+Requires-Dist: mock-response-delay>=2026.9.7
 Requires-Dist: numpy>=2.4.4
 Requires-Dist: opencv-contrib-python-headless>=5.0.0.93
 Requires-Dist: pillow>=12.2.0
@@ -33,71 +34,6 @@ Requires-Dist: respx>=0.21.0
 Requires-Dist: tzdata; sys_platform == "win32"
 Requires-Dist: vws-auth-tools>=2024.7.12
 Requires-Dist: werkzeug>=3.1.2
-Provides-Extra: dev
-Requires-Dist: actionlint-py==1.7.12.24; extra == "dev"
-Requires-Dist: check-manifest==0.51; extra == "dev"
-Requires-Dist: check-wheel-contents==0.6.3; extra == "dev"
-Requires-Dist: coverage==7.16.0; extra == "dev"
-Requires-Dist: deptry==0.25.1; extra == "dev"
-Requires-Dist: dirty-equals==0.11; extra == "dev"
-Requires-Dist: doc8==2.0.0; extra == "dev"
-Requires-Dist: doccmd==2026.8.30.1; extra == "dev"
-Requires-Dist: docker==7.2.0; extra == "dev"
-Requires-Dist: freezegun==1.5.5; extra == "dev"
-Requires-Dist: furo==2025.12.19; extra == "dev"
-Requires-Dist: hadolint-coatl==2.15.1; extra == "dev"
-Requires-Dist: interrogate==1.7.0; extra == "dev"
-Requires-Dist: mypy[faster-cache]==2.3.1; extra == "dev"
-Requires-Dist: mypy-strict-kwargs==2026.8.25.1; extra == "dev"
-Requires-Dist: no-defaults==2.3.0; extra == "dev"
-Requires-Dist: prek==0.5.1; extra == "dev"
-Requires-Dist: pydocstringformatter==1.0.0; extra == "dev"
-Requires-Dist: pydocstyle==6.3; extra == "dev"
-Requires-Dist: pylint[spelling]==4.0.8; extra == "dev"
-Requires-Dist: pylint-per-file-ignores==3.2.1; extra == "dev"
-Requires-Dist: pyproject-fmt==2.29.2; extra == "dev"
-Requires-Dist: pyrefly==1.2.0; extra == "dev"
-Requires-Dist: pyright==1.1.411; extra == "dev"
-Requires-Dist: pyroma==5.0.1; extra == "dev"
-Requires-Dist: pytest==9.1.1; extra == "dev"
-Requires-Dist: pytest-beartype-tests==2026.8.16; extra == "dev"
-Requires-Dist: pytest-partition-check==2026.8.23; extra == "dev"
-Requires-Dist: pytest-retry==1.7.0; extra == "dev"
-Requires-Dist: pytest-xdist==3.8.0; extra == "dev"
-Requires-Dist: pyyaml==6.0.3; extra == "dev"
-Requires-Dist: requests-mock-flask==2026.8.16; extra == "dev"
-Requires-Dist: ruff==0.16.5; extra == "dev"
-Requires-Dist: shellcheck-py==0.11.0.1; extra == "dev"
-Requires-Dist: shfmt-py==4.1.0; extra == "dev"
-Requires-Dist: sphinx==9.1.0; extra == "dev"
-Requires-Dist: sphinx-copybutton==0.5.2; extra == "dev"
-Requires-Dist: sphinx-lint==1.0.2; extra == "dev"
-Requires-Dist: sphinx-paramlinks==0.6; extra == "dev"
-Requires-Dist: sphinx-pyproject==0.3.0; extra == "dev"
-Requires-Dist: sphinx-substitution-extensions==2026.8.13.1; extra == "dev"
-Requires-Dist: sphinx-toolbox==4.3.0; extra == "dev"
-Requires-Dist: sphinxcontrib-httpdomain==2.0.0; extra == "dev"
-Requires-Dist: sphinxcontrib-spelling==8.0.2; extra == "dev"
-Requires-Dist: sphinxcontrib-towncrier==0.5.0a0; extra == "dev"
-Requires-Dist: strict-kwargs==2026.8.28.post2; extra == "dev"
-Requires-Dist: sybil==10.1.0; extra == "dev"
-Requires-Dist: tenacity==9.1.4; extra == "dev"
-Requires-Dist: towncrier==25.8.0; extra == "dev"
-Requires-Dist: ty==0.0.77; extra == "dev"
-Requires-Dist: types-docker==7.2.0.20260827; extra == "dev"
-Requires-Dist: types-pyyaml==6.0.12.20260815; extra == "dev"
-Requires-Dist: types-requests==2.33.0.20260712; extra == "dev"
-Requires-Dist: urllib3==2.7.0; extra == "dev"
-Requires-Dist: vale==3.19.0.0; extra == "dev"
-Requires-Dist: vulture==2.16; extra == "dev"
-Requires-Dist: vws-python==2026.8.26; extra == "dev"
-Requires-Dist: vws-test-fixtures==2026.8.26; extra == "dev"
-Requires-Dist: vws-web-tools==2026.8.27; extra == "dev"
-Requires-Dist: yamlfix==1.19.1; extra == "dev"
-Requires-Dist: zizmor==1.30.0; extra == "dev"
-Provides-Extra: release
-Requires-Dist: check-wheel-contents==0.6.3; extra == "release"
-Requires-Dist: towncrier==25.8.0; extra == "release"
 Dynamic: license-file
 
 |Build Status| |PyPI|
@@ -134,7 +70,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        requests.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = requests.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 ``MockVWS`` also intercepts `httpx`_ requests:
 
@@ -151,7 +87,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 ``MockVWS`` also intercepts `HTTPX2`_ requests, with no need for ``httpx2.alias_httpx()``:
 
@@ -168,7 +104,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 Asynchronous ``httpx`` and `HTTPX2`_ clients are intercepted as well.
 

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/README.rst

@@ -32,7 +32,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        requests.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = requests.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 ``MockVWS`` also intercepts `httpx`_ requests:
 
@@ -49,7 +49,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 ``MockVWS`` also intercepts `HTTPX2`_ requests, with no need for ``httpx2.alias_httpx()``:
 
@@ -66,7 +66,7 @@ This requires Python |minimum-python-version|\+.
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 Asynchronous ``httpx`` and `HTTPX2`_ clients are intercepted as well.
 

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/admin/create_secrets_files.py

@@ -133,7 +133,7 @@ def _create_and_get_vumark_target_id(
     vumark_template_name: str,
 ) -> str:
     """Upload a VuMark template and get its target ID."""
-    vws_web_tools.upload_vumark_template(
+    _ = vws_web_tools.upload_vumark_template(
         driver=driver,
         database_name=vumark_database_name,
         svg_file_path=VUMARK_TEMPLATE_SVG_FILE_PATH,
@@ -292,11 +292,11 @@ def main() -> None:
     files_to_create = [file for file in required_files if not file.exists()]
     driver: WebDriver | None = None
 
-    while files_to_create:
+    while bool(files_to_create):
         if driver is None:
             driver = vws_web_tools.create_chrome_driver()
         file = files_to_create[-1]
-        sys.stdout.write(f"Creating database {file.name}\n")
+        _ = sys.stdout.write(f"Creating database {file.name}\n")
         (
             cloud_license_name,
             cloud_database_name,
@@ -305,7 +305,7 @@ def main() -> None:
         ) = _create_vuforia_resource_names()
 
         try:
-            sys.stdout.write("Creating cloud database details\n")
+            _ = sys.stdout.write("Creating cloud database details\n")
             cloud_database_details = _create_and_get_cloud_database_details(
                 driver=driver,
                 email_address=email_address,
@@ -313,19 +313,19 @@ def main() -> None:
                 cloud_license_name=cloud_license_name,
                 cloud_database_name=cloud_database_name,
             )
-            sys.stdout.write("Creating VuMark database details\n")
+            _ = sys.stdout.write("Creating VuMark database details\n")
             vumark_details = _create_and_get_vumark_details(
                 driver=driver,
                 vumark_database_name=vumark_database_name,
             )
-            sys.stdout.write("Creating VuMark target\n")
+            _ = sys.stdout.write("Creating VuMark target\n")
             vumark_target_id = _create_and_get_vumark_target_id(
                 driver=driver,
                 vumark_database_name=vumark_database_name,
                 vumark_template_name=vumark_template_name,
             )
         except TimeoutException:
-            sys.stderr.write("Timed out during database setup\n")
+            _ = sys.stderr.write("Timed out during database setup\n")
             driver.quit()
             driver = None
             continue
@@ -343,9 +343,9 @@ def main() -> None:
             model_target_username=email_address,
             model_target_password=password,
         )
-        file.write_text(data=file_contents)
-        sys.stdout.write(f"Created database {file.name}\n")
-        files_to_create.pop()
+        _ = file.write_text(data=file_contents)
+        _ = sys.stdout.write(f"Created database {file.name}\n")
+        _ = files_to_create.pop()
 
 
 if __name__ == "__main__":

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/basic-example.rst

@@ -13,7 +13,7 @@
         database = CloudDatabase()
         mock.add_cloud_database(cloud_database=database)
         # This will use the Vuforia mock.
-        requests.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = requests.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 By default, an exception will be raised if any requests to unmocked addresses are made.
 
@@ -35,7 +35,7 @@ A ``MockVWS`` instance can also decorate a function:
     @mock
     def get_summary() -> None:
         """Make a request which uses the Vuforia mock."""
-        requests.get(url="https://vws.vuforia.com/summary", timeout=30)
+        _ = requests.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 
     get_summary()

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/contributing.rst

@@ -12,7 +12,7 @@ Install Python dependencies in a virtual environment.
 
 .. code-block:: console
 
-   $ pip install --editable '.[dev]'
+   $ pip install --editable . --group dev
 
 Spell checking requires ``enchant``.
 This can be installed on macOS, for example, with `Homebrew`_:
@@ -113,16 +113,24 @@ For the complete archive and GitHub Actions setup procedure, see
 Skipping Some Tests
 -------------------
 
-Use the following custom ``pytest`` options to skip some tests:
+The tests run against several backends: the real Vuforia, the in-memory mock, and the Flask applications of the mock served in the test process.
+The last of these exercises the handlers which the Docker deployment runs, but not the split between its containers.
+The tests in ``tests/mock_vws/test_docker.py`` build and run the containers for that.
+The `pytest-multi-backend`_ plugin adds options which skip some tests:
 
 .. code-block:: text
 
-   --skip-real           Skip tests for Real Vuforia
-   --skip-mock           Skip tests for In Memory Mock Vuforia
-   --skip-docker_in_memory
-                         Skip tests for In Memory version of Docker application
-   --skip-docker_build_tests
-                         Skip tests for building Docker images
+   --skip-backend=real   Skip tests against the real Vuforia
+   --skip-backend=mock   Skip tests against the in-memory mock Vuforia
+   --skip-backend=flask_in_process
+                         Skip tests against the Flask applications served
+                         in the test process
+   --skip-marker=requires_docker_build
+                         Skip tests which build and run the Docker images
+
+Give an option once per backend or marker to skip.
+
+.. _pytest-multi-backend: https://adamtheturtle.github.io/pytest-multi-backend/
 
 Verifying signed Model Target requests
 --------------------------------------
@@ -169,7 +177,7 @@ Run the following commands to build and view documentation locally:
 
 .. code-block:: console
 
-   $ uv run --extra=dev sphinx-build -M html docs/source docs/build -W
+   $ uv run --group=dev sphinx-build -M html docs/source docs/build -W
    $ python -c 'import os, webbrowser; webbrowser.open("file://" + os.path.abspath("docs/build/html/index.html"))'
 
 Continuous Integration

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/differences-to-vws.rst

@@ -134,16 +134,26 @@ The mock uses the fixed sample value ``us-east-2, us-west-2`` for
 ``x-aws-region`` response headers. The regions returned by the real Vuforia
 Web Services can differ, so tests should not rely on the mock's exact value.
 
+.. _differences-nginx-error-cases:
+
 NGINX Error cases
 -----------------
 
-Vuforia uses NGINX.
-This has error handling which is not duplicated in the mock.
-For example, Vuforia is documented as returning a 400 (``BAD REQUEST``) response if a header or cookie is given which is larger than 8 KiB.
+Vuforia uses NGINX in front of both the Target API and the Query API.
+NGINX reads each request header line into an 8 KiB buffer, and returns a 400 (``BAD REQUEST``) response with an HTML body titled ``400 Request Header Or Cookie Too Large`` for a line which does not fit.
+The line's terminating CRLF also counts towards the buffer, so the longest accepted line is 8190 bytes, where a line is the header name, a colon, a space and the value.
+This was observed against real Vuforia on 2026-09-08.
 
-.. admonition:: Unverified assumption
+The mock returns that response for any header line longer than 8190 bytes.
+The mock does not implement the following related behaviors, which were observed in the same session:
 
-   :ref:`unverified-nginx-oversized-header-or-cookie`
+* The Target API's Envoy layer lets a ``Cookie`` line slightly over the limit through.
+  A ``Cookie`` line of 8193 bytes was accepted and one of 8300 bytes was rejected.
+* The Target API's AWS load balancer rejects a header line of 16384 bytes or more itself, with a shorter HTML body and a ``Server: awselb/2.0`` header.
+  A ``Cookie`` line of that size passes the load balancer and is rejected by NGINX instead.
+* The Query API's application server rejects a request whose headers total about 8 KiB with a 431 (``REQUEST HEADER FIELDS TOO LARGE``) HTML response before the NGINX limit is reached.
+  With the headers which a query normally has, a header line of 7500 bytes was accepted and one of 8000 bytes was rejected this way.
+* The Model Target Web API, the OAuth2 token endpoint and reco counts report downloads in the mock do not apply the limit.
 
 Result codes
 ------------
@@ -174,16 +184,30 @@ endpoints in general, with 45 requests per second for
 ``GET /targets/{target_id}``, 10 requests per second for
 ``GET /duplicates/{target_id}``, and 1 request per minute for ``GET /targets``.
 
-The mock models these limits separately for each group of endpoints, but it applies no limit by default.
-Applying a limit of 1 request per minute to ``GET /targets`` by default would break the tests of anything which uses the mock.
+The limits were checked against real Vuforia on 2026-09-08, by sending bursts of requests to read-only endpoints:
 
-.. admonition:: Unverified assumption
+* ``GET /targets`` accepts two requests per minute, not one.
+  The window is a fixed clock minute: two requests at 40 seconds past the minute were accepted, a third was rejected, and a request three seconds into the next minute was accepted again.
+* The per-second limits are enforced roughly, not exactly.
+  Bursts of 40 concurrent ``GET /summary`` requests saw between 17 and 37 succeed against the documented 15, and a burst of 120 ``GET /targets/{target_id}`` requests saw 74 succeed against the documented 45, so the limiter appears to be spread over more than one instance or window.
+* A limit is keyed on the server access key in the ``Authorization`` header, so one database's burst does not affect another database.
+  Vuforia applies the limit before checking the signature, so a request with a bad signature counts towards the limit, and a request over the limit gets a ``429`` response whether or not it is signed correctly.
+  Requests without an ``Authorization`` header are not rate limited.
+* A rate-limited request gets a ``429`` (``TOO MANY REQUESTS``) response from Envoy with an empty body, no ``Content-Type`` header and an ``x-envoy-ratelimited: true`` header.
+  Vuforia has an Envoy layer at its edge and another in front of the application, and either may reject the request.
+  Only a rejection by the inner layer carries an ``x-envoy-upstream-service-time`` header, which the mock always includes.
+  The ``TooManyRequests`` result code from Vuforia's result codes table does not appear.
 
-   :ref:`unverified-request-rate-limits`
+The mock returns the empty Envoy response, applies each limit before checking the request's signature, and tracks each limit separately for each database and each group of endpoints.
+The mock's windows are rolling rather than clock-aligned, so two ``GET /targets`` requests block a third until a minute has passed since the first, and the mock enforces the per-second limits exactly.
+The mock only limits requests whose access key belongs to a database, because the limits are configured on the database.
+
+The mock applies no limit by default.
+Applying a limit of two requests per minute to ``GET /targets`` by default would break the tests of anything which uses the mock.
 
 Set ``request_rate_limits`` to
 :data:`mock_vws.request_rate_limits.DOCUMENTED_REQUEST_RATE_LIMITS` to apply
-the documented limits::
+the limits which real Vuforia applies::
 
     from mock_vws import MockVWS
     from mock_vws.database import CloudDatabase
@@ -195,8 +219,8 @@ the documented limits::
 
     with MockVWS() as mock:
         mock.add_cloud_database(cloud_database=database)
-        # A second ``GET /targets`` request within a minute returns
-        # ``TooManyRequests``.
+        # A third ``GET /targets`` request within a minute gets a ``429``
+        # response.
         ...
 
 ``requests_per_second_limit`` remains available. It applies one limit to all
@@ -267,9 +291,13 @@ supported by the Flask/Docker backend.
 Other configurable result codes
 -------------------------------
 
-The mock also supports four other result codes which come from Vuforia's result codes table rather than from a response which a real database gave:
+The mock also supports four other result codes.
+``ProjectSuspended`` has been seen from a real database.
+The other three come from Vuforia's result codes table rather than from a response which a real database gave:
 
-.. admonition:: Unverified assumption
+.. admonition:: Unverified assumptions
+
+   :ref:`unverified-project-suspended`
 
    :ref:`unverified-additional-result-codes`
 
@@ -277,8 +305,13 @@ The mock also supports four other result codes which come from Vuforia's result
 * ``TargetQuotaReached`` is returned when adding a target to a
   :class:`mock_vws.database.CloudDatabase` which already contains
   ``target_quota`` targets.
-* ``ProjectSuspended`` is returned by VWS endpoints when a database uses the
+* ``ProjectSuspended`` is returned with status code 403 by every VWS endpoint
+  when a database uses the
   :attr:`mock_vws.states.States.PROJECT_SUSPENDED` state.
+  Real Vuforia has returned this result code for a database which passed its
+  monthly recognition threshold, but its status code, body and headers were
+  not recorded, and reads such as ``GET /targets`` and the database summary
+  kept working there.
 * ``ProjectHasNoApiAccess`` is returned by VWS endpoints when a database uses
   the :attr:`mock_vws.states.States.PROJECT_HAS_NO_API_ACCESS` state.
   This casing comes from Vuforia's result codes table, as no response from a

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/httpx-example.rst

@@ -13,6 +13,6 @@
        database = CloudDatabase()
        mock.add_cloud_database(cloud_database=database)
        # This will use the Vuforia mock.
-       httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
+       _ = httpx.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 .. _httpx: https://pypi.org/project/httpx/

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/httpx2-example.rst

@@ -13,7 +13,7 @@
        database = CloudDatabase()
        mock.add_cloud_database(cloud_database=database)
        # This will use the Vuforia mock.
-       httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
+       _ = httpx2.get(url="https://vws.vuforia.com/summary", timeout=30)
 
 Asynchronous ``httpx`` and `HTTPX2`_ clients are intercepted as well.
 

{vws_python_mock-2026.9.6 → vws_python_mock-2026.9.8}/docs/source/unverified-behavior.rst

@@ -38,18 +38,25 @@ The status code and the body shape come from Vuforia's documentation and from th
 A real database with an exhausted request quota would verify this.
 No such response has been seen.
 
-.. _unverified-request-rate-limits:
+.. _unverified-project-suspended:
 
-Request rate limits
--------------------
+A suspended database
+--------------------
 
-:Category: never-attempted
+:Category: temporarily-unverifiable
 :API: VWS Target API
 
-Vuforia documents a limit of 15 requests per second for VWS endpoints in general, 45 per second for ``GET /targets/{target_id}``, 10 per second for ``GET /duplicates/{target_id}`` and one per minute for ``GET /targets``.
-The mock models the limits separately for each group of endpoints, and applies them only when it is asked to.
+The mock returns a ``ProjectSuspended`` response with status code 403 from every VWS endpoint for a database in the :attr:`mock_vws.states.States.PROJECT_SUSPENDED` state.
+
+The result code string is confirmed.
+In August 2026 real Vuforia suspended one of the CI databases after it passed its monthly recognition threshold of 1000, and ``vws-python`` raised ``ProjectSuspendedError`` from the real response.
+Reads such as ``GET /targets`` and the database summary kept working, and writes such as ``POST /targets`` were rejected.
 
-Sending more than the documented number of requests to a real database, and seeing what it returns, would verify this.
+The status code, body and headers of the real response were not recorded, and which endpoints reject requests was only partly observed.
+The mock rejects requests to every VWS endpoint, so it is stricter than the real service was seen to be.
+
+Driving a throwaway database past 1000 recognitions in a month with query requests, and recording the response from each VWS endpoint, would verify the rest.
+That is a deliberate one-off rather than a suite test because of the quota cost.
 
 .. _unverified-additional-result-codes:
 
@@ -59,8 +66,9 @@ Additional result codes
 :Category: never-attempted
 :API: VWS Target API
 
-``ProjectSuspended``, ``ProjectHasNoApiAccess``, ``TargetQuotaReached`` and ``TooManyRequests`` come from Vuforia's result codes table.
+``ProjectHasNoApiAccess`` and ``TargetQuotaReached`` come from Vuforia's result codes table.
 No response from a real database in any of those states has been seen, which is why the mock's ``ProjectHasNoApiAccess`` casing is the table's casing rather than an observed one.
+The table also lists ``TooManyRequests``, but a rate-limited request to a real database gets a ``429`` response with no body at all, so the mock never returns that result code.
 
 A database put into each state by the Target Manager portal would verify these.
 
@@ -77,19 +85,6 @@ The mock does not implement this, so a user of the mock sees a successful respon
 
 A database with more than a million images would verify this, which a test account cannot hold.
 
-.. _unverified-nginx-oversized-header-or-cookie:
-
-Large headers and cookies
--------------------------
-
-:Category: never-attempted
-:API: Cross-cutting request handling
-
-Vuforia runs behind NGINX, which is documented as returning a 400 (``BAD REQUEST``) response for a header or a cookie larger than 8 KiB.
-The mock does not implement this, and no test sends such a request to either.
-
-Sending a request with a header larger than 8 KiB to a real database would verify this.
-
 .. _unverified-reco-counts-report-not-ready:
 
 A reco counts report which is not ready