Try Rector Online | Rector - Automated Way to Instantly Upgrade and Refactor any PHP code

Run Rector on your code to see what it can do for you:

 <?php
 
 declare(strict_types=1);

 use PHPUnit\Framework\TestCase;
 final class RectorTest extends TestCase
 {
-	/**
-	 * @BruteForceProtection(action=login)
-	 */
+	#[\OCP\AppFramework\Http\Attribute\BruteForceProtection]
     public function testMethod() {
     }
 }

PHP snippet to change

<?php

declare(strict_types=1);

namespace OCP\AppFramework\Http\Attribute;

use Attribute;

/**
 * Attribute for controller methods that want to protect passwords, keys, tokens
 * or other data against brute force
 *
 * @since 27.0.0
 */
#[Attribute(Attribute::TARGET_METHOD | Attribute::IS_REPEATABLE)]
class BruteForceProtection {
	/**
	 * @since 27.0.0
	 */
	public function __construct(
		protected string $action
	) {
	}

	/**
	 * @since 27.0.0
	 */
	public function getAction(): string {
		return $this->action;
	}
}

namespace App\Test\Cases\Domain\Value;

use PHPUnit\Framework\TestCase;
final class RectorTest extends TestCase
{
	/**
	 * @BruteForceProtection(action=login)
	 */
    public function testMethod() {
    }
}

Applied Rules:

AnnotationToAttributeRector

Not a change you expect?

Create an issue on GitHub
...or to speed up fix – add a test fixture

Config rector.php

<?php

declare(strict_types=1);

use Rector\Config\RectorConfig;
use Rector\Php80\Rector\Class_\AnnotationToAttributeRector;
use Rector\Php80\ValueObject\AnnotationToAttribute;

return RectorConfig::configure()
//    ->withPaths([
//        __DIR__.'/tests',
//    ])
    ->withConfiguredRule(
        AnnotationToAttributeRector::class,
        [
            new AnnotationToAttribute('BruteForceProtection', 'OCP\AppFramework\Http\Attribute\BruteForceProtection'),
        ]
    )
;

Rector version: 38d1ca - released at 2026-01-19 23:17