[2.x] fix: guard against missing session in FlarumDataSource::getSessionData()

[gianniguida]

Problem

FlarumDataSource::getSessionData() assumes every profiled request carries a session attribute. Requests that never pass through StartSession — token-authenticated API requests being the common case — have no session, so $session->all() throws:

Error: Call to a member function all() on null
#0 .../src/Clockwork/FlarumDataSource.php: FoF\Clockwork\Clockwork\FlarumDataSource::getSessionData()

On a production forum with an API monitoring probe (Zabbix hitting a healthcheck endpoint with an Authorization header) this fires on every poll interval and floods error tracking. Any headless API consumer using token auth triggers the same error.

Fix

Return an empty array when the request has no session, mirroring the fact that sessions are optional on Flarum's PSR-7 requests. Also fixes method name casing (getattribute → getAttribute) — functionally identical, but it defeats IDE navigation and static analysis.

Testing

Verified against a local Flarum 1.x forum (Docker) with fof/clockwork 1.1.1 (the same code path exists unchanged on 2.x) enabled and the requesting user in the admin group (so the Clockwork authenticator lets the request be profiled):

• Before the patch: curl -H "Authorization: Token <key>" http://localhost:8000/api/discussions?page[limit]=1 (no cookies) → HTTP 500, with flarum.ERROR: Error: Call to a member function all() on null in .../fof/clockwork/src/Clockwork/FlarumDataSource.php in the forum log.
• After the patch: same request → HTTP 200, no error logged, and the request is profiled normally — the stored Clockwork request shows "sessionData": [].

🤖 Generated with Claude Code