327 lines
9.4 KiB
Go
327 lines
9.4 KiB
Go
// e2e_merchant 商户进件端到端测试脚本
|
||
//
|
||
// 测试链路：本脚本 → pay-bridge 本地服务 → Heepay 沙盒
|
||
//
|
||
// 前置条件：
|
||
// 1. 启动 pay-bridge 服务：go run ./cmd/server
|
||
// 2. 数据库中已有测试 app（appID + appSecret），或通过 Admin API 创建
|
||
// 3. 设置环境变量（见下方）
|
||
//
|
||
// 环境变量：
|
||
//
|
||
// PAY_BRIDGE_URL=http://localhost:8080 服务地址（默认 http://localhost:8080）
|
||
// APP_ID=your_app_id 测试用 appID
|
||
// APP_SECRET=your_app_secret 对应的明文 appSecret
|
||
//
|
||
// 运行：
|
||
//
|
||
// APP_ID=app_test APP_SECRET=secret123 go run ./scripts/e2e_merchant/
|
||
package main
|
||
|
||
import (
|
||
"bytes"
|
||
"crypto/hmac"
|
||
"crypto/sha256"
|
||
"encoding/hex"
|
||
"encoding/json"
|
||
"fmt"
|
||
"io"
|
||
"net/http"
|
||
"os"
|
||
"strconv"
|
||
"strings"
|
||
"time"
|
||
)
|
||
|
||
// ---- 配置 ----
|
||
|
||
func baseURL() string {
|
||
if v := os.Getenv("PAY_BRIDGE_URL"); v != "" {
|
||
return strings.TrimRight(v, "/")
|
||
}
|
||
return "http://localhost:8080"
|
||
}
|
||
|
||
func mustEnv(key string) string {
|
||
v := os.Getenv(key)
|
||
if v == "" {
|
||
fatalf("环境变量 %s 未设置", key)
|
||
}
|
||
return v
|
||
}
|
||
|
||
// ---- HTTP 客户端（带 HMAC 签名） ----
|
||
|
||
type client struct {
|
||
appID string
|
||
appSecret string
|
||
base string
|
||
http *http.Client
|
||
}
|
||
|
||
func newClient() *client {
|
||
return &client{
|
||
appID: mustEnv("APP_ID"),
|
||
appSecret: mustEnv("APP_SECRET"),
|
||
base: baseURL(),
|
||
http: &http.Client{Timeout: 30 * time.Second},
|
||
}
|
||
}
|
||
|
||
func (c *client) do(method, path string, body any) (map[string]any, error) {
|
||
var bodyBytes []byte
|
||
if body != nil {
|
||
var err error
|
||
bodyBytes, err = json.Marshal(body)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
|
||
ts := strconv.FormatInt(time.Now().Unix(), 10)
|
||
sign := hmacSign(c.appID+ts+string(bodyBytes), c.appSecret)
|
||
|
||
req, err := http.NewRequest(method, c.base+path, bytes.NewReader(bodyBytes))
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
req.Header.Set("Content-Type", "application/json")
|
||
req.Header.Set("X-App-Id", c.appID)
|
||
req.Header.Set("X-Timestamp", ts)
|
||
req.Header.Set("X-Sign", sign)
|
||
|
||
resp, err := c.http.Do(req)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
defer resp.Body.Close()
|
||
|
||
respBytes, _ := io.ReadAll(resp.Body)
|
||
|
||
var result map[string]any
|
||
if err := json.Unmarshal(respBytes, &result); err != nil {
|
||
return nil, fmt.Errorf("parse response [%d]: %s", resp.StatusCode, string(respBytes))
|
||
}
|
||
return result, nil
|
||
}
|
||
|
||
func (c *client) post(path string, body any) (map[string]any, error) {
|
||
return c.do("POST", path, body)
|
||
}
|
||
|
||
func (c *client) get(path string) (map[string]any, error) {
|
||
return c.do("GET", path, nil)
|
||
}
|
||
|
||
func hmacSign(payload, secret string) string {
|
||
h := hmac.New(sha256.New, []byte(secret))
|
||
h.Write([]byte(payload))
|
||
return hex.EncodeToString(h.Sum(nil))
|
||
}
|
||
|
||
// ---- 辅助函数 ----
|
||
|
||
func printStep(n int, name string) {
|
||
fmt.Printf("\n[步骤 %d] %s\n%s\n", n, name, strings.Repeat("-", 40))
|
||
}
|
||
|
||
func printResult(resp map[string]any) {
|
||
b, _ := json.MarshalIndent(resp, " ", " ")
|
||
fmt.Printf(" 响应: %s\n", string(b))
|
||
}
|
||
|
||
func checkOK(resp map[string]any, step string) {
|
||
code, _ := resp["code"].(string)
|
||
if code != "0" {
|
||
fatalf("[%s] 接口返回错误: code=%s message=%v", step, code, resp["message"])
|
||
}
|
||
}
|
||
|
||
func dataStr(resp map[string]any, key string) string {
|
||
data, _ := resp["data"].(map[string]any)
|
||
if data == nil {
|
||
return ""
|
||
}
|
||
v, _ := data[key].(string)
|
||
return v
|
||
}
|
||
|
||
func fatalf(format string, args ...any) {
|
||
fmt.Fprintf(os.Stderr, "❌ FAIL: "+format+"\n", args...)
|
||
os.Exit(1)
|
||
}
|
||
|
||
// ---- 测试流程 ----
|
||
|
||
func main() {
|
||
c := newClient()
|
||
merchantID := fmt.Sprintf("E2E_M_%d", time.Now().UnixNano()%1e9)
|
||
|
||
fmt.Printf("=== 商户进件 E2E 测试 ===\n")
|
||
fmt.Printf("服务地址: %s\n", c.base)
|
||
fmt.Printf("App ID: %s\n", c.appID)
|
||
fmt.Printf("商户ID: %s\n", merchantID)
|
||
|
||
// ---- 步骤 1：创建商户 ----
|
||
printStep(1, "创建商户")
|
||
resp, err := c.post("/api/v1/merchant", map[string]any{
|
||
"merchant_id": merchantID,
|
||
"merchant_name": "E2E测试企业" + merchantID[len(merchantID)-6:],
|
||
"license_no": "91110000E2ETEST01X",
|
||
"legal_person": "测试法人",
|
||
})
|
||
if err != nil {
|
||
fatalf("创建商户请求失败: %v", err)
|
||
}
|
||
printResult(resp)
|
||
checkOK(resp, "创建商户")
|
||
fmt.Printf(" ✓ 商户创建成功: merchant_id=%s\n", dataStr(resp, "merchant_id"))
|
||
|
||
// ---- 步骤 2：查询商户详情 ----
|
||
printStep(2, "查询商户详情")
|
||
resp, err = c.get("/api/v1/merchant/" + merchantID)
|
||
if err != nil {
|
||
fatalf("查询商户失败: %v", err)
|
||
}
|
||
printResult(resp)
|
||
checkOK(resp, "查询商户")
|
||
fmt.Printf(" ✓ 商户查询成功\n")
|
||
|
||
// ---- 步骤 3：上传营业执照（调用 Heepay 沙盒） ----
|
||
printStep(3, "上传营业执照到 Heepay 沙盒")
|
||
fmt.Printf(" → 调用 POST /api/v1/merchant/upload-file\n")
|
||
fmt.Printf(" → 内部转调 Heepay customer.file.upload\n")
|
||
|
||
// 最小合法 JPEG（22字节）
|
||
minJPEG := []byte{
|
||
0xFF, 0xD8, 0xFF, 0xE0, 0x00, 0x10, 0x4A, 0x46, 0x49, 0x46, 0x00, 0x01,
|
||
0x01, 0x00, 0x00, 0x01, 0x00, 0x01, 0x00, 0x00, 0xFF, 0xD9,
|
||
}
|
||
|
||
// 用 multipart 上传
|
||
fileID, uploadErr := uploadFile(c, minJPEG, "license.jpg", "image/jpeg")
|
||
if uploadErr != nil {
|
||
fmt.Printf(" ⚠ 文件上传失败（Heepay 沙盒可能返回业务错误）: %v\n", uploadErr)
|
||
fmt.Printf(" → 继续后续步骤，submit_data 不含 file_id\n")
|
||
fileID = ""
|
||
} else {
|
||
fmt.Printf(" ✓ 文件上传成功: file_id=%s\n", fileID)
|
||
}
|
||
|
||
// ---- 步骤 4：提交进件申请（调用 Heepay 沙盒） ----
|
||
printStep(4, "提交进件申请到 Heepay 沙盒")
|
||
fmt.Printf(" → 调用 POST /api/v1/merchant/%s/apply\n", merchantID)
|
||
fmt.Printf(" → 内部转调 Heepay customer.enter.enterprise.apply\n")
|
||
|
||
submitData := map[string]any{
|
||
"merch_name": "E2E测试企业",
|
||
"merch_short_name": "E2E测试",
|
||
"merch_type": "ENTERPRISE",
|
||
"contact_name": "测试联系人",
|
||
"contact_phone": "13800138000",
|
||
"contact_email": "e2e@example.com",
|
||
"province": "北京市",
|
||
"city": "北京市",
|
||
"district": "朝阳区",
|
||
"address": "朝阳区测试路1号",
|
||
}
|
||
if fileID != "" {
|
||
submitData["license_img"] = fileID
|
||
}
|
||
|
||
resp, err = c.post("/api/v1/merchant/"+merchantID+"/apply", map[string]any{
|
||
"channel_code": "HEEPAY",
|
||
"submit_data": submitData,
|
||
})
|
||
if err != nil {
|
||
fatalf("提交进件失败: %v", err)
|
||
}
|
||
printResult(resp)
|
||
|
||
applicationID := dataStr(resp, "application_id")
|
||
if resp["code"] != "0" {
|
||
fmt.Printf(" ⚠ 进件接口返回错误（Heepay 沙盒字段验证）: code=%v message=%v\n",
|
||
resp["code"], resp["message"])
|
||
fmt.Printf(" → 进件字段名需对照 Heepay 官方文档确认\n")
|
||
} else {
|
||
fmt.Printf(" ✓ 进件申请提交成功: application_id=%s\n", applicationID)
|
||
}
|
||
|
||
// ---- 步骤 5：查询进件审核状态 ----
|
||
printStep(5, "查询进件审核状态")
|
||
resp, err = c.get("/api/v1/merchant/" + merchantID + "/audit")
|
||
if err != nil {
|
||
fatalf("查询审核状态失败: %v", err)
|
||
}
|
||
printResult(resp)
|
||
if resp["code"] == "0" {
|
||
fmt.Printf(" ✓ 审核状态查询成功\n")
|
||
} else {
|
||
fmt.Printf(" ⚠ 审核状态查询异常（可能进件未提交成功）\n")
|
||
}
|
||
|
||
// ---- 步骤 6：验证商户列表隔离 ----
|
||
printStep(6, "验证 appID 隔离：列表只返回本 app 的商户")
|
||
resp, err = c.get("/api/v1/merchant?limit=10&offset=0")
|
||
if err != nil {
|
||
fatalf("查询列表失败: %v", err)
|
||
}
|
||
checkOK(resp, "商户列表")
|
||
data, _ := resp["data"].(map[string]any)
|
||
list, _ := data["list"].([]any)
|
||
fmt.Printf(" ✓ 返回 %d 个商户（均属于 app_id=%s）\n", len(list), c.appID)
|
||
|
||
fmt.Printf("\n=== 测试完成 ===\n")
|
||
fmt.Printf("步骤 1-2（本地 DB）: ✓ 正常\n")
|
||
fmt.Printf("步骤 3-4（Heepay 沙盒）: 需对照官方文档确认字段名\n")
|
||
fmt.Printf("步骤 6（数据隔离）: ✓ 正常\n")
|
||
}
|
||
|
||
// uploadFile 发送 multipart 文件上传请求
|
||
func uploadFile(c *client, content []byte, filename, mediaType string) (string, error) {
|
||
var buf bytes.Buffer
|
||
boundary := "----PayBridgeE2EBoundary"
|
||
buf.WriteString("--" + boundary + "\r\n")
|
||
buf.WriteString(fmt.Sprintf(`Content-Disposition: form-data; name="file"; filename="%s"`, filename) + "\r\n")
|
||
buf.WriteString("Content-Type: " + mediaType + "\r\n\r\n")
|
||
buf.Write(content)
|
||
buf.WriteString("\r\n--" + boundary + "\r\n")
|
||
buf.WriteString(`Content-Disposition: form-data; name="channel_code"` + "\r\n\r\n")
|
||
buf.WriteString("HEEPAY")
|
||
buf.WriteString("\r\n--" + boundary + "\r\n")
|
||
buf.WriteString(`Content-Disposition: form-data; name="file_media_type"` + "\r\n\r\n")
|
||
buf.WriteString(mediaType)
|
||
buf.WriteString("\r\n--" + boundary + "--\r\n")
|
||
|
||
ts := strconv.FormatInt(time.Now().Unix(), 10)
|
||
// multipart 请求 body 不参与签名，签名 body 部分为空
|
||
sign := hmacSign(c.appID+ts+"", c.appSecret)
|
||
|
||
req, err := http.NewRequest("POST", c.base+"/api/v1/merchant/upload-file", &buf)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
req.Header.Set("Content-Type", "multipart/form-data; boundary="+boundary)
|
||
req.Header.Set("X-App-Id", c.appID)
|
||
req.Header.Set("X-Timestamp", ts)
|
||
req.Header.Set("X-Sign", sign)
|
||
|
||
resp, err := c.http.Do(req)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
defer resp.Body.Close()
|
||
respBytes, _ := io.ReadAll(resp.Body)
|
||
|
||
var result map[string]any
|
||
if err := json.Unmarshal(respBytes, &result); err != nil {
|
||
return "", fmt.Errorf("parse upload response: %s", string(respBytes))
|
||
}
|
||
if result["code"] != "0" {
|
||
return "", fmt.Errorf("code=%v message=%v", result["code"], result["message"])
|
||
}
|
||
data, _ := result["data"].(map[string]any)
|
||
fileID, _ := data["file_id"].(string)
|
||
return fileID, nil
|
||
}
|