98 行
6.3 KiB
JavaScript
98 行
6.3 KiB
JavaScript
const assert = require("node:assert/strict");
|
|
const { randomBytes } = require("node:crypto");
|
|
const { readFileSync } = require("node:fs");
|
|
const { createRequire } = require("node:module");
|
|
const path = require("node:path");
|
|
|
|
module.exports = async function verifyPaymentExperience({
|
|
app, prisma, employee, approvers, form, post, origin, tokens, serverRequire, passed, browser, preview, loginPassword,
|
|
}) {
|
|
app.config.fieldEncryptionKey = randomBytes(32).toString("base64");
|
|
app.config.paymentBatchEnabled = true;
|
|
const { encryptStringOrThrow } = serverRequire("./src/services/crypto");
|
|
const company = await prisma.legalEntity.create({ data: { code: "SYN-PAY", name: "合成测试主体" } });
|
|
const bank = await prisma.bankInstitution.upsert({
|
|
where: { code: "CCB" }, create: { code: "CCB", name: "中国建设银行" }, update: {},
|
|
});
|
|
await prisma.employee.update({ where: { id: employee.id }, data: {
|
|
legal_entity_id: company.id, bank_institution_id: bank.id, bank_name: bank.name,
|
|
bank_account_encrypted: encryptStringOrThrow(app.config, `6222${"0".repeat(8)}5678`),
|
|
} });
|
|
await prisma.paymentAccount.create({ data: {
|
|
legal_entity_id: company.id, bank_institution_id: bank.id, account_name: "合成测试主体",
|
|
account_number_encrypted: encryptStringOrThrow(app.config, `6217${"0".repeat(8)}1234`),
|
|
} });
|
|
await prisma.featureFlag.create({ data: { flag_key: "payment_batch_v1", override_mode: "force_on", rollout_type: "global", department_ids: [] } });
|
|
const created = await post("/payment-batches", {
|
|
entityType: "reimbursement", entityIds: [form.id], defaultPaymentChannel: "bank",
|
|
}, approvers.finance.id);
|
|
assert.equal(created.status, 201, `create payment batch: ${created.body.error?.details?.reasonCode ?? created.status}`);
|
|
const batch = created.body.data.item;
|
|
const download = (actor) => fetch(`${origin}/api/payment-batches/${batch.id}/payment-order`, {
|
|
method: "POST", headers: { "content-type": "application/json", authorization: `Bearer ${tokens.get(actor.id)}` },
|
|
body: "{}", signal: AbortSignal.timeout(15000),
|
|
});
|
|
assert.equal((await download(approvers.finance)).status, 409);
|
|
assert.equal((await post(`/payment-batches/${batch.id}/review`, {}, approvers.finance.id)).status, 403);
|
|
assert.equal((await post(`/payment-batches/${batch.id}/review`, {}, approvers.ceo.id)).status, 200);
|
|
assert.equal((await download(approvers.ceo)).status, 403);
|
|
assert.equal((await download(employee)).status, 403);
|
|
for (const count of [1, 2]) {
|
|
const response = await download(approvers.finance);
|
|
assert.equal(response.status, 200);
|
|
assert.ok(decodeURIComponent(response.headers.get("content-disposition")).includes(`报销制单_${batch.batchNo}.xls`));
|
|
assert.equal(response.headers.get("cache-control"), "no-store");
|
|
const workbook = Buffer.from(await response.arrayBuffer());
|
|
assert.equal(workbook.subarray(0, 8).toString("hex"), "d0cf11e0a1b11ae1");
|
|
const current = await prisma.paymentBatch.findUnique({ where: { id: batch.id } });
|
|
assert.equal(current.payment_order_export_count, count);
|
|
assert.equal(current.status, "reviewed");
|
|
const source = await prisma.reimbursementForm.findUnique({ where: { id: form.id } });
|
|
assert.equal(source.status, "approved");
|
|
assert.equal(source.paid_at, null);
|
|
}
|
|
const audits = await prisma.auditLog.findMany({ where: { target_id: batch.id, action: { in: ["PAYMENT_ORDER_EXPORTED", "PAYMENT_ORDER_REEXPORTED"] } } });
|
|
assert.equal(audits.length, 2);
|
|
for (const audit of audits) {
|
|
assert.equal(audit.extra.purpose, "reimbursement_bank_transfer");
|
|
assert.equal(audit.extra.purposeSource, "system");
|
|
assert.equal(Object.hasOwn(audit.extra, "reason"), false);
|
|
}
|
|
if (browser && preview) {
|
|
const clientRequire = createRequire(path.resolve(__dirname, "../../client/package.json"));
|
|
const { expect } = clientRequire("@playwright/test");
|
|
const uiOrigin = `http://127.0.0.1:${preview.httpServer.address().port}`;
|
|
for (const mobile of [false, true]) {
|
|
const context = await browser.newContext({ serviceWorkers: "block", viewport: mobile ? { width: 390, height: 844 } : { width: 1440, height: 960 } });
|
|
try {
|
|
const fingerprint = `synthetic-payment-${mobile}`;
|
|
await context.addCookies([{ name: "hyb_oa_device_fingerprint", value: fingerprint, url: uiOrigin }]);
|
|
const login = await context.request.post(`${uiOrigin}/api/auth/login`, { headers: { "x-device-fingerprint": fingerprint }, data: { identifier: approvers.finance.email, password: loginPassword } });
|
|
assert.equal(login.status(), 200);
|
|
const page = await context.newPage();
|
|
await page.goto(`${uiOrigin}/payment-batches?id=${batch.id}`);
|
|
const actions = page.getByTestId(mobile ? "payment-batch-mobile-actions" : "payment-batch-action-panel");
|
|
await expect(actions.getByRole("button", { name: "上传银行回单" })).toBeVisible();
|
|
await actions.getByText("更多", { exact: true }).click();
|
|
if (mobile) await page.getByRole("menuitem", { name: "重新下载制单" }).click();
|
|
else await actions.getByTestId("payment-batch-action-redownloadOrder").click();
|
|
const dialog = page.getByRole("dialog");
|
|
await expect(dialog).toContainText("请勿重复提交");
|
|
await expect(dialog.getByRole("textbox")).toHaveCount(0);
|
|
const received = page.waitForEvent("download");
|
|
await dialog.getByRole("button", { name: "确认下载" }).click();
|
|
const downloaded = await received;
|
|
assert.equal(downloaded.suggestedFilename(), `报销制单_${batch.batchNo}.xls`);
|
|
assert.equal(readFileSync(await downloaded.path()).subarray(0, 8).toString("hex"), "d0cf11e0a1b11ae1");
|
|
await expect(dialog).toBeHidden();
|
|
await expect(page.getByTestId("payment-batch-processing-panel")).toBeVisible();
|
|
assert.equal(await page.evaluate(() => document.documentElement.scrollWidth <= window.innerWidth), true);
|
|
} finally {
|
|
await context.close();
|
|
}
|
|
}
|
|
passed.push("payment: real authenticated desktop/mobile browser downloads Chinese BIFF8 with no reason input; repeat warning and receipt action retained");
|
|
}
|
|
passed.push("payment: real finance create, CEO review, unauthorized export refused, Chinese BIFF8 first/re-download without reason, audited and still unpaid");
|
|
};
|