test(password-identify): assert exception codes for cert errors

Expand certificate validation tests to assert LibresignException error codes.

Cover 422 for revoked, expired, invalid, and revocation-status-unverifiable certificate scenarios.

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

Author: vitormattos

tests/php/Unit/Service/IdentifyMethod/PasswordTest.php

@@ -136,7 +136,12 @@ public static function providerValidateToSignWithError(): array {
 	}
 
 	#[DataProvider('providerValidateToSignWithCertificateData')]
-	public function testValidateToSignWithCertificateData(array $certificateData, bool $shouldThrow, string $expectedMessage = ''): void {
+	public function testValidateToSignWithCertificateData(
+		array $certificateData,
+		bool $shouldThrow,
+		string $expectedMessage = '',
+		?int $expectedCode = null,
+	): void {
 		$this->pkcs12Handler = $this->getPkcs12Instance(['getPfxOfCurrentSigner', 'setCertificate', 'setPassword', 'readCertificate']);
 		$this->pkcs12Handler->method('getPfxOfCurrentSigner')->willReturn('mock-pfx');
 		$this->pkcs12Handler->method('setCertificate')->willReturnSelf();
@@ -153,6 +158,9 @@ public function testValidateToSignWithCertificateData(array $certificateData, bo
 			if ($expectedMessage) {
 				$this->expectExceptionMessage($expectedMessage);
 			}
+			if ($expectedCode !== null) {
+				$this->expectExceptionCode($expectedCode);
+			}
 		}
 
 		$password->validateToSign();
@@ -183,13 +191,15 @@ public static function providerValidateToSignWithCertificateData(): array {
 				],
 				'shouldThrow' => true,
 				'expectedMessage' => 'Certificate has expired',
+				'expectedCode' => 422,
 			],
 			'invalid certificate - validTo_time_t is string' => [
 				'certificateData' => [
 					'validTo_time_t' => '1234567890',
 				],
 				'shouldThrow' => true,
 				'expectedMessage' => 'Invalid certificate',
+				'expectedCode' => 422,
 			],
 			'invalid certificate - validTo_time_t is null' => [
 				'certificateData' => [
@@ -233,6 +243,7 @@ public static function providerValidateToSignWithCertificateData(): array {
 				],
 				'shouldThrow' => true,
 				'expectedMessage' => 'Certificate has been revoked',
+				'expectedCode' => 422,
 			],
 			'valid certificate with crl validation' => [
 				'certificateData' => [
@@ -255,6 +266,7 @@ public static function providerValidateToSignWithCertificateData(): array {
 				],
 				'shouldThrow' => true,
 				'expectedMessage' => 'Certificate revocation status could not be verified',
+				'expectedCode' => 422,
 			],
 			'invalid certificate - crl validation empty string' => [
 				'certificateData' => [