package com.talentcard.server.business.admin;
|
|
import static org.assertj.core.api.Assertions.assertThat;
|
|
import java.util.Map;
|
import java.util.UUID;
|
|
import com.talentcard.server.business.PageResult;
|
import com.talentcard.server.common.SensitiveDataCrypto;
|
import org.junit.jupiter.api.Test;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.boot.test.context.SpringBootTest;
|
import org.springframework.jdbc.core.JdbcTemplate;
|
import org.springframework.test.context.ActiveProfiles;
|
|
/**
|
* 「商户进件」与「银行卡申请」两个列表、以及进件详情里几个「显示不对 / 显示不全」的回归。
|
*
|
* <p>这几处原来都靠同名列撞车后的偶然结果、或一份写死的映射兜着：改一行 SQL、换一个 switch
|
* 分支就会悄悄退回去，而页面上只是少显示一个值，不会报错。所以断言都盯「运营最终看到的那一列
|
* 是什么值」，而不是盯 SQL 或实现长什么样。
|
*/
|
@SpringBootTest
|
@ActiveProfiles("test")
|
class MerchantSettlementAdminListTests {
|
|
@Autowired
|
private JdbcTemplate jdbc;
|
|
@Autowired
|
private MerchantSettlementAdminService settlementAdminService;
|
|
@Autowired
|
private SensitiveDataCrypto crypto;
|
|
/**
|
* 列表上的「商家名称 / 商家类型 / 联系方式」必须和筛选框用的是同一份值。
|
*
|
* <p>进件表和商户表都有 merchant_name、merchant_type、contact_mobile，而查询里带了 a.*，
|
* 同名列会有两份。原来列表取到的是进件表那份（申请时填的，个人主体通常为空），筛选却走商户表，
|
* 于是出现「输入商家名能筛出记录、商家名称列却整列空白」。申请时填的名称不该被丢掉，
|
* 但要用另一个键名带出来。
|
*/
|
@Test
|
void theOnboardingListShowsTheMerchantTableValuesThatTheFiltersMatchOn() {
|
String suffix = uniqueSuffix();
|
String merchantName = "进件列表商户 " + suffix;
|
String enteredName = "申请人填的商户名称 " + suffix;
|
Long merchantId = insertMerchant(merchantName, "餐饮服务");
|
Long storeId = insertStore(merchantId, "进件列表门店 " + suffix);
|
insertOnboarding(merchantId, storeId, "MO-LIST-" + suffix, enteredName, null);
|
|
PageResult<Map<String, Object>> page = settlementAdminService.onboardings(1, 20, merchantName, null, null, null, null, null);
|
|
assertThat(page.records()).singleElement().satisfies(row -> assertThat(row)
|
.containsEntry("merchantName", merchantName)
|
.containsEntry("merchantType", "餐饮服务")
|
.containsEntry("contactMobile", "13800000000")
|
.containsEntry("onboardingMerchantName", enteredName));
|
}
|
|
/**
|
* 银行卡列表只出脱敏卡号；明文 PAN、密文和卡哈希都不该出现在响应里。
|
*
|
* <p>库里的 card_no_encrypted 是可解密的，解密出来就是完整卡号——列表接口没有理由把它发出去，
|
* 前端要展示的本来就是 card_masked。
|
*/
|
@Test
|
void theBankCardListKeepsTheNumberMaskedAndDropsTheEncryptedValue() {
|
String suffix = uniqueSuffix();
|
String merchantName = "银行卡列表商户 " + suffix;
|
String fullCardNumber = "6217857000072971573";
|
Long merchantId = insertMerchant(merchantName, "餐饮服务");
|
Long storeId = insertStore(merchantId, "银行卡列表门店 " + suffix);
|
insertBankCard(merchantId, storeId, fullCardNumber, "510100");
|
|
PageResult<Map<String, Object>> page = settlementAdminService.bankCards(1, 20, merchantName, null, null, null, null, null);
|
|
assertThat(page.records()).singleElement().satisfies(row -> {
|
assertThat(row).containsEntry("cardMasked", masked(fullCardNumber));
|
assertThat(row).doesNotContainKeys("cardNo", "cardNoEncrypted", "cardHash");
|
assertThat(row.values()).noneMatch(value -> String.valueOf(value).contains(fullCardNumber));
|
});
|
}
|
|
/**
|
* 开户城市要按全国行政区划解析，不是只认四川那一张表。
|
*
|
* <p>原来的实现只列了四川省的市州，别的省一律把 6 位代码原样显示，运营看到的是「441500」。
|
*/
|
@Test
|
void theBankCardCityNameIsResolvedOutsideSichuan() {
|
String suffix = uniqueSuffix();
|
String merchantName = "开户城市商户 " + suffix;
|
Long merchantId = insertMerchant(merchantName, "餐饮服务");
|
Long storeId = insertStore(merchantId, "开户城市门店 " + suffix);
|
insertBankCard(merchantId, storeId, "6217857000072971573", "441500");
|
|
PageResult<Map<String, Object>> page = settlementAdminService.bankCards(1, 20, merchantName, null, null, null, null, null);
|
|
assertThat(page.records()).singleElement().satisfies(row -> assertThat(row).containsEntry("cityName", "广东省|汕尾市"));
|
}
|
|
/**
|
* 进件详情要能看到这条进件绑的结算卡（原来只有一个永远为空的卡号面图片位），
|
* 同时同样不能带出明文卡号。
|
*
|
* <p>详情是进件当时的存档：名称和联系方式取的是申请时填的那一份，不是商户表的当前值
|
* （列表的「商家名称 / 联系电话」是筛选条件，才必须跟商户表走）。
|
*/
|
@Test
|
void theOnboardingDetailCarriesTheBoundCardWithoutTheFullNumber() {
|
String suffix = uniqueSuffix();
|
String merchantName = "进件详情商户 " + suffix;
|
String enteredName = "申请人填的商户名称 " + suffix;
|
String fullCardNumber = "6217857000072971573";
|
Long merchantId = insertMerchant(merchantName, "餐饮服务");
|
Long storeId = insertStore(merchantId, "进件详情门店 " + suffix);
|
Long cardId = insertBankCard(merchantId, storeId, fullCardNumber, "441500");
|
Long onboardingId = insertOnboarding(merchantId, storeId, "MO-DETAIL-" + suffix, enteredName, cardId);
|
|
Map<String, Object> detail = settlementAdminService.onboarding(onboardingId);
|
|
assertThat(detail)
|
.containsEntry("settlementBankName", "中国银行")
|
.containsEntry("settlementBranchName", "中国银行股份有限公司汕尾海丰支行")
|
.containsEntry("settlementCityName", "广东省|汕尾市")
|
.containsEntry("settlementCardMasked", masked(fullCardNumber))
|
.containsEntry("settlementCardStatus", "approved")
|
.containsEntry("merchantName", enteredName)
|
.containsEntry("onboardingMerchantName", enteredName)
|
.containsEntry("contactMobile", "13900000000")
|
.containsEntry("merchantType", "餐饮服务");
|
assertThat(String.valueOf(detail.get("initialBankCardId"))).isEqualTo(String.valueOf(cardId));
|
assertThat(detail).doesNotContainKeys("cardNo", "cardNoEncrypted", "cardHash");
|
assertThat(detail.values()).noneMatch(value -> String.valueOf(value).contains(fullCardNumber));
|
}
|
|
/**
|
* 商家类型筛选项直接来自后端目录。
|
*
|
* <p>前端原来自己抄了一份 8 项清单：标签写的是目录里只当别名的「住宿服务 / 购房服务 / 体检服务」
|
* （库里存的是「酒店服务 / 购房优惠 / 免费体检」，所以这三个选项一个都筛不出来），
|
* 后来又新增的「文化服务 / 数码服务 / 验证商户」则根本没得选。
|
*/
|
@Test
|
void theMerchantTypeOptionsComeFromTheBackendCatalog() {
|
assertThat(settlementAdminService.merchantTypes())
|
.contains("餐饮服务", "景区服务", "酒店服务", "购房优惠", "免费体检", "文化服务", "数码服务")
|
.doesNotContain("住宿服务", "购房服务", "体检服务");
|
}
|
|
/**
|
* 详情必须把「结算凭证图」原样带出来，并说清这张图是银行卡卡号面还是开户许可证。
|
*
|
* <p>工单建议的断言有两句：库里要有值、接口要返回该字段。前者由进件侧的用例覆盖，
|
* 这里补后者——否则「存了但详情不带出来」这类断链照样漏过去。
|
*
|
* <p>这一列一列两义（对私=卡号面、对公=开户许可证），所以标签由后端给的主体标志决定：
|
* 前端只按标志换名字，不自己再判一遍。
|
*/
|
@Test
|
void theOnboardingDetailReturnsTheStoredSettlementProofWithItsSubjectSpecificKind() {
|
String proofUrl = "https://cdn.example.com/settlement-proof.jpg";
|
String suffix = uniqueSuffix();
|
Long merchantId = insertMerchant("结算凭证图商户 " + suffix, "餐饮服务");
|
Long storeId = insertStore(merchantId, "结算凭证图门店 " + suffix);
|
Long privateId = insertOnboarding(merchantId, storeId, "MO-PROOF-I-" + suffix, null, null, "individual", null);
|
Long publicId = insertOnboarding(merchantId, storeId, "MO-PROOF-E-" + suffix, null, null, "enterprise", "私营企业");
|
jdbc.update("update merchant_onboarding_application set settlement_card_front_url=? where id in (?, ?)", proofUrl, privateId, publicId);
|
|
Map<String, Object> privateDetail = settlementAdminService.onboarding(privateId);
|
assertThat(privateDetail)
|
.containsEntry("settlementCardFrontUrl", proofUrl)
|
.as("个人主体的这张图是银行卡卡号面")
|
.containsEntry("privateSettlement", true);
|
|
Map<String, Object> publicDetail = settlementAdminService.onboarding(publicId);
|
assertThat(publicDetail)
|
.containsEntry("settlementCardFrontUrl", proofUrl)
|
.as("企业（非个体工商户）主体的这张图是开户许可证")
|
.containsEntry("privateSettlement", false);
|
}
|
|
/** 个体工商户走的是企业进件接口，但结算凭证图仍是银行卡卡号面，不能按 subjectType 一刀切。 */
|
@Test
|
void aSoleProprietorKeepsThePrivateSettlementProof() {
|
String suffix = uniqueSuffix();
|
String merchantName = "个体工商户商户 " + suffix;
|
Long merchantId = insertMerchant(merchantName, "餐饮服务");
|
Long storeId = insertStore(merchantId, "个体工商户门店 " + suffix);
|
Long id = insertOnboarding(merchantId, storeId, "MO-PROOF-S-" + suffix, null, null, "enterprise", "个体工商户");
|
|
assertThat(settlementAdminService.onboarding(id)).containsEntry("privateSettlement", true);
|
}
|
|
private String uniqueSuffix() {
|
return String.valueOf(System.nanoTime());
|
}
|
|
private Long insertMerchant(String merchantName, String merchantType) {
|
jdbc.update("insert into merchant(merchant_name, merchant_type, contact_mobile, status, deleted) values (?, ?, '13800000000', 1, 0)",
|
merchantName, merchantType);
|
return jdbc.queryForObject("select max(id) from merchant", Long.class);
|
}
|
|
private Long insertStore(Long merchantId, String storeName) {
|
jdbc.update("insert into merchant_store(merchant_id, store_name, status, deleted) values (?, ?, 1, 0)", merchantId, storeName);
|
return jdbc.queryForObject("select max(id) from merchant_store", Long.class);
|
}
|
|
/** 进件表这一侧刻意填上与商户表不同的名称和手机号，用来验证列上显示的是商户表那份。 */
|
private Long insertOnboarding(Long merchantId, Long storeId, String applicationNo, String onboardingMerchantName, Long bankCardId) {
|
return insertOnboarding(merchantId, storeId, applicationNo, onboardingMerchantName, bankCardId, "individual", null);
|
}
|
|
/** 主体类型与公司类型决定「结算凭证图」是银行卡卡号面还是开户许可证，按需覆盖。 */
|
private Long insertOnboarding(Long merchantId, Long storeId, String applicationNo, String onboardingMerchantName,
|
Long bankCardId, String subjectType, String companyType) {
|
jdbc.update("""
|
insert into merchant_onboarding_application(merchant_id, store_id, application_no, subject_type, subject_name,
|
contact_name, contact_mobile, idempotency_key, status,
|
merchant_name, company_type, initial_bank_card_id)
|
values (?, ?, ?, ?, 'List owner', 'List owner', '13900000000', ?, 'pending', ?, ?, ?)
|
""", merchantId, storeId, applicationNo, subjectType, "settlement-list-" + applicationNo, onboardingMerchantName, companyType, bankCardId);
|
return jdbc.queryForObject("select max(id) from merchant_onboarding_application", Long.class);
|
}
|
|
/** 卡号按生产路径落库：明文只以密文形式保存，另存一份脱敏串和卡哈希。 */
|
private Long insertBankCard(Long merchantId, Long storeId, String fullCardNumber, String cityCode) {
|
jdbc.update("""
|
insert into merchant_bank_card(merchant_id, store_id, bank_name, branch_name, city_code, card_tail, card_masked,
|
card_hash, card_no_encrypted, status, idempotency_key)
|
values (?, ?, '中国银行', '中国银行股份有限公司汕尾海丰支行', ?, ?, ?, ?, ?, 'approved', ?)
|
""", merchantId, storeId, cityCode, tail(fullCardNumber), masked(fullCardNumber),
|
"0".repeat(64), crypto.encrypt(fullCardNumber), UUID.randomUUID().toString());
|
return jdbc.queryForObject("select max(id) from merchant_bank_card", Long.class);
|
}
|
|
private static String tail(String fullCardNumber) {
|
return fullCardNumber.substring(fullCardNumber.length() - 4);
|
}
|
|
private static String masked(String fullCardNumber) {
|
return "**** **** **** " + tail(fullCardNumber);
|
}
|
}
|
