payment-callback.integration.test.ts 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292
  1. import { describe, it, expect, beforeEach, vi, afterEach } from 'vitest';
  2. import { testClient } from 'hono/testing';
  3. import {
  4. IntegrationTestDatabase,
  5. setupIntegrationDatabaseHooksWithEntities
  6. } from '@d8d/shared-test-util';
  7. import { PaymentMtRoutes } from '../../src/routes/payment.mt.routes.js';
  8. import { PaymentMtEntity } from '../../src/entities/payment.mt.entity.js';
  9. import { PaymentStatus } from '../../src/entities/payment.types.js';
  10. import { UserEntityMt } from '@d8d/user-module-mt';
  11. import { RoleMt } from '@d8d/user-module-mt';
  12. import { FileMt } from '@d8d/file-module-mt';
  13. import { OrderMt } from '@d8d/orders-module-mt';
  14. import { MerchantMt } from '@d8d/merchant-module-mt';
  15. import { SupplierMt } from '@d8d/supplier-module-mt';
  16. import { DeliveryAddressMt } from '@d8d/delivery-address-module-mt';
  17. import { AreaEntityMt } from '@d8d/geo-areas-mt';
  18. import { SystemConfigMt } from '@d8d/core-module-mt/system-config-module-mt/entities';
  19. import { config } from 'dotenv';
  20. import { resolve } from 'path';
  21. // 导入微信支付SDK用于模拟
  22. import WxPay from 'wechatpay-node-v3';
  23. // 导入测试数据工厂
  24. import { PaymentTestFactory } from '../factories/payment-test.factory.js';
  25. // 在测试环境中加载环境变量
  26. config({ path: resolve(process.cwd(), '.env.test') });
  27. vi.mock('wechatpay-node-v3')
  28. // 设置集成测试钩子
  29. setupIntegrationDatabaseHooksWithEntities([PaymentMtEntity, UserEntityMt, FileMt, RoleMt, OrderMt, MerchantMt, SupplierMt, DeliveryAddressMt, AreaEntityMt, SystemConfigMt])
  30. describe('支付回调API集成测试 - 多租户版本', () => {
  31. let client: ReturnType<typeof testClient<typeof PaymentMtRoutes>>;
  32. let testFactory: PaymentTestFactory;
  33. let testData: {
  34. user: UserEntityMt;
  35. merchant: MerchantMt;
  36. supplier: SupplierMt;
  37. address: DeliveryAddressMt;
  38. order: OrderMt;
  39. payment: PaymentMtEntity;
  40. };
  41. // 使用真实的微信支付回调数据 - 直接使用原始请求体字符串
  42. const rawBody = '{"id":"495e231b-9fd8-54a1-8a30-2a38a807744c","create_time":"2025-10-25T12:48:11+08:00","resource_type":"encrypt-resource","event_type":"TRANSACTION.SUCCESS","summary":"支付成功","resource":{"original_type":"transaction","algorithm":"AEAD_AES_256_GCM","ciphertext":"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","associated_data":"transaction","nonce":"sTnWce32BTQP"}}';
  43. const callbackHeader = {
  44. 'wechatpay-timestamp': '1761367693',
  45. 'wechatpay-nonce': 'PVDFxrQiJclkR28HpAYPDiIlS2VaGp9U',
  46. 'wechatpay-signature': 'hwR1KKN1bIPAhatIHTen7fwNDyvONS/picpcqSHtUCGkbvhYLVUqC87ksBJs6bovNI0cKNvrLr6gqp/HR4TK/ijgrD6w9W/oYc6bKyO9lNarggsQKHBv5x5yX8OjBOzqtgiHOVj44RCPrglJ5bFDlxIhnhs9jnGUine0qlvrVwBZAylt5X4oFmPammHoV4lLHtGt0L4zr5y6LoZL80LpctDCOCtwC4JdUUY5AumkMYo8lNs+xK0NAN7EVNKCWUzoQ1pVdBTGZWDP+b8+6gswP6JDsL3a4H4Fw3WGh4DZPskDQAe0sn85UGXO3m03OkDq3WkiCkOut4YZMuKBeCBpWA==',
  47. 'wechatpay-serial': '6C2C991E621267BFA5BFD5F32476427343A0B2AD'
  48. };
  49. beforeEach(async () => {
  50. // 创建测试客户端
  51. client = testClient(PaymentMtRoutes);
  52. // 创建测试数据工厂
  53. const dataSource = await IntegrationTestDatabase.getDataSource();
  54. testFactory = new PaymentTestFactory(dataSource);
  55. // 创建完整的测试数据
  56. testData = await testFactory.createCompleteTestData(1);
  57. // 设置微信支付SDK的全局mock
  58. const mockWxPay = {
  59. transactions_jsapi: vi.fn().mockResolvedValue({
  60. package: 'prepay_id=wx_test_prepay_id_123456',
  61. timeStamp: Math.floor(Date.now() / 1000).toString(),
  62. nonceStr: 'test_nonce_string',
  63. signType: 'RSA',
  64. paySign: 'test_pay_sign'
  65. }),
  66. verifySign: vi.fn().mockResolvedValue(true),
  67. decipher_gcm: vi.fn().mockReturnValue(JSON.stringify({
  68. out_trade_no: testData.payment.outTradeNo, // 使用数据库中保存的 outTradeNo
  69. trade_state: 'SUCCESS',
  70. transaction_id: 'test_transaction_id',
  71. amount: {
  72. total: 1
  73. }
  74. })),
  75. getSignature: vi.fn().mockReturnValue('mock_signature')
  76. };
  77. // 模拟PaymentService的wxPay实例
  78. vi.mocked(WxPay).mockImplementation(() => mockWxPay as any);
  79. });
  80. afterEach(() => {
  81. // 清理 mock
  82. vi.mocked(WxPay).mockClear();
  83. });
  84. describe('POST /payment/callback - 支付回调', () => {
  85. it('应该成功处理支付成功回调并更新订单状态', async () => {
  86. const response = await client.payment.callback.$post({
  87. // 使用空的json参数,通过init传递原始请求体
  88. json: {}
  89. }, {
  90. headers: callbackHeader,
  91. init: {
  92. body: rawBody
  93. }
  94. });
  95. // 现在支付记录存在,回调处理应该成功
  96. expect(response.status).toBe(200);
  97. if (response.status === 200) {
  98. const result = await response.text();
  99. expect(result).toBe('SUCCESS');
  100. // 验证订单状态已更新为已支付 (2)
  101. const dataSource = await IntegrationTestDatabase.getDataSource();
  102. const orderRepository = dataSource.getRepository(OrderMt);
  103. const updatedOrder = await orderRepository.findOne({
  104. where: { id: testData.order.id, tenantId: 1 }
  105. });
  106. expect(updatedOrder).toBeDefined();
  107. expect(updatedOrder?.payState).toBe(2); // 已支付
  108. }
  109. });
  110. it('应该处理支付失败回调并更新订单状态', async () => {
  111. // 模拟支付失败的回调数据
  112. const mockWxPay = {
  113. verifySign: vi.fn().mockResolvedValue(true),
  114. decipher_gcm: vi.fn().mockReturnValue(JSON.stringify({
  115. out_trade_no: testData.payment.outTradeNo,
  116. trade_state: 'FAIL',
  117. transaction_id: null,
  118. amount: {
  119. total: 1
  120. }
  121. }))
  122. };
  123. vi.mocked(WxPay).mockImplementation(() => mockWxPay as any);
  124. const response = await client.payment.callback.$post({
  125. json: {}
  126. }, {
  127. headers: callbackHeader,
  128. init: {
  129. body: rawBody
  130. }
  131. });
  132. expect(response.status).toBe(200);
  133. if (response.status === 200) {
  134. const result = await response.text();
  135. expect(result).toBe('SUCCESS');
  136. // 验证订单状态已更新为支付失败 (4)
  137. const dataSource = await IntegrationTestDatabase.getDataSource();
  138. const orderRepository = dataSource.getRepository(OrderMt);
  139. const updatedOrder = await orderRepository.findOne({
  140. where: { id: testData.order.id, tenantId: 1 }
  141. });
  142. expect(updatedOrder).toBeDefined();
  143. expect(updatedOrder?.payState).toBe(4); // 支付失败
  144. }
  145. });
  146. it('应该处理退款回调并更新订单状态', async () => {
  147. // 模拟退款回调数据
  148. const mockWxPay = {
  149. verifySign: vi.fn().mockResolvedValue(true),
  150. decipher_gcm: vi.fn().mockReturnValue(JSON.stringify({
  151. out_trade_no: testData.payment.outTradeNo,
  152. trade_state: 'REFUND',
  153. transaction_id: 'test_refund_transaction_id',
  154. amount: {
  155. total: 1
  156. }
  157. }))
  158. };
  159. vi.mocked(WxPay).mockImplementation(() => mockWxPay as any);
  160. const response = await client.payment.callback.$post({
  161. json: {}
  162. }, {
  163. headers: callbackHeader,
  164. init: {
  165. body: rawBody
  166. }
  167. });
  168. expect(response.status).toBe(200);
  169. if (response.status === 200) {
  170. const result = await response.text();
  171. expect(result).toBe('SUCCESS');
  172. // 验证订单状态已更新为已退款 (3)
  173. const dataSource = await IntegrationTestDatabase.getDataSource();
  174. const orderRepository = dataSource.getRepository(OrderMt);
  175. const updatedOrder = await orderRepository.findOne({
  176. where: { id: testData.order.id, tenantId: 1 }
  177. });
  178. expect(updatedOrder).toBeDefined();
  179. expect(updatedOrder?.payState).toBe(3); // 已退款
  180. }
  181. });
  182. it('应该验证多租户数据隔离', async () => {
  183. // 创建第二个租户的测试数据
  184. const multiTenantData = await testFactory.createMultiTenantTestData();
  185. const tenant1Data = multiTenantData.tenant1;
  186. const tenant2Data = multiTenantData.tenant2;
  187. // 处理租户1的支付回调
  188. const response = await client.payment.callback.$post({
  189. json: {}
  190. }, {
  191. headers: callbackHeader,
  192. init: {
  193. body: rawBody
  194. }
  195. });
  196. expect(response.status).toBe(200);
  197. // 验证租户1的订单状态已更新
  198. const dataSource = await IntegrationTestDatabase.getDataSource();
  199. const orderRepository = dataSource.getRepository(OrderMt);
  200. const updatedOrder1 = await orderRepository.findOne({
  201. where: { id: tenant1Data.order.id, tenantId: 1 }
  202. });
  203. expect(updatedOrder1?.payState).toBe(2); // 已支付
  204. // 验证租户2的订单状态未受影响
  205. const updatedOrder2 = await orderRepository.findOne({
  206. where: { id: tenant2Data.order.id, tenantId: 2 }
  207. });
  208. expect(updatedOrder2?.payState).toBe(0); // 仍为未支付
  209. });
  210. it('应该处理无效的回调数据格式', async () => {
  211. const response = await client.payment.callback.$post({
  212. body: 'invalid json data'
  213. }, {
  214. headers: {
  215. ...callbackHeader,
  216. 'content-type': 'text/plain'
  217. }
  218. });
  219. // 由于JSON解析失败,应该返回500错误
  220. expect(response.status).toBe(500);
  221. });
  222. it('应该处理缺少必要头信息的情况', async () => {
  223. const response = await client.payment.callback.$post({
  224. body: rawBody
  225. }, {
  226. headers: {
  227. // 缺少必要的微信支付头信息
  228. 'Content-Type': 'text/plain'
  229. }
  230. });
  231. // 由于缺少必要头信息,应该返回500错误
  232. expect(response.status).toBe(500);
  233. });
  234. it('应该验证回调数据解密后的支付处理', async () => {
  235. const response = await client.payment.callback.$post({
  236. // 使用空的json参数,通过init传递原始请求体
  237. json: {}
  238. }, {
  239. headers: callbackHeader,
  240. init: {
  241. body: rawBody
  242. }
  243. });
  244. // 现在支付记录存在,回调处理应该成功
  245. expect(response.status).toBe(200);
  246. if (response.status === 200) {
  247. const result = await response.text();
  248. expect(result).toBe('SUCCESS');
  249. }
  250. });
  251. });
  252. });