milky0217
0b0757939b
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
根因：base_url 默认硬编码为 dev.xmclassmate.top，导致支付宝通知回调 （notify_url）指向开发服务器，RSA2 签名验证失败，订单延迟 12 分钟。 修复： - 新增 get_base_url()：优先用 APP_BASE_URL 环境变量，否则从请求 Host 头获取当前域名，确保 notify_url 始终指向正确的服务器 - 生产 .env 已设置 APP_BASE_URL=https://xmclassmate.top - .env.example 新增 APP_BASE_URL 文档 迁移文档： - SERVER-MIGRATION-PLAN.md 新增阶段 3 关键配置章节 - 12 项迁移检查清单 + 历史问题复盘 部署测试： - test.sh 新增 test_notify_url_domain：校验支付表单 notify_url 域名与 BASE_URL 一致，迁移后自动捕获配置错误
556 lines
26 KiB
Bash
556 lines
26 KiB
Bash
# ===========================================
|
||
# test.sh — 部署后测试（依赖 common.sh 的 remote()）
|
||
# ===========================================
|
||
|
||
# 用于所有测试函数的基础 URL（在 run_tests 中设置）
|
||
BASE_URL="http://127.0.0.1"
|
||
|
||
# 测试用户管理
|
||
TEST_USER_ID=""
|
||
|
||
setup_test_user() {
|
||
TEST_USER_ID=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
|
||
INSERT INTO users (openid, name, type) VALUES ('test_\$(date +%s)', 'test_user', 2)
|
||
RETURNING id;
|
||
\"" 2>/dev/null | tr -d ' ' || echo "")
|
||
[ -z "$TEST_USER_ID" ] && { log_error "创建测试用户失败"; return 1; }
|
||
log_info " 测试用户 ID: ${TEST_USER_ID}"
|
||
}
|
||
|
||
cleanup_test_user() {
|
||
if [ -n "$TEST_USER_ID" ]; then
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"
|
||
DELETE FROM payment_orders WHERE user_id = ${TEST_USER_ID};
|
||
DELETE FROM users WHERE id = ${TEST_USER_ID};
|
||
\"" 2>/dev/null || true
|
||
TEST_USER_ID=""
|
||
fi
|
||
}
|
||
rollback_and_exit() {
|
||
local reason="$1"
|
||
log_error "测试失败: ${reason}"
|
||
local last_known_good
|
||
last_known_good=$(remote "cat ${REMOTE_DIR}/.last_deployed 2>/dev/null || echo ''")
|
||
if [ -z "$last_known_good" ]; then
|
||
log_error "无法回滚: 未找到上一个正常版本"; exit 1
|
||
fi
|
||
rollback_on_failure "$last_known_good"
|
||
exit 1
|
||
}
|
||
|
||
test_basic_connectivity() {
|
||
# 根据端口判定协议（4433/4434 生产环境使用 HTTPS）
|
||
local proto="http"
|
||
if [ "${BACKEND_PORT}" = "4433" ] || [ "${BACKEND_PORT}" = "4434" ]; then
|
||
proto="https"
|
||
fi
|
||
# 设置全局 BASE_URL，供其他测试函数使用
|
||
BASE_URL="${proto}://127.0.0.1:${BACKEND_PORT}"
|
||
local max_retries=3 retry=0
|
||
while [ $retry -lt $max_retries ]; do
|
||
retry=$((retry+1)); log_info "尝试 ${retry}/${max_retries}: 测试本地后端 (${BASE_URL})"
|
||
local all=true
|
||
for test in \
|
||
"/health:200" \
|
||
"/api/login:400:POST:-H Content-Type:application/json -d '{\"code\":\"test\"}'" \
|
||
"/api/refresh-token:401:POST:-H Content-Type:application/json -d '{\"refresh_token\":\"bad\"}'" \
|
||
"/:200"; do
|
||
IFS=':' read -r path expected method extra <<< "$test"
|
||
[ -z "$method" ] && method="GET"
|
||
local code; code=$(remote "curl -sk -o /dev/null -w '%{http_code}' --max-time 10 -X ${method} ${BASE_URL}${path} ${extra}" 2>/dev/null || echo "000")
|
||
if [ "$code" != "$expected" ] && [ "$expected" != "200,400" ] && ! { [ "$expected" = "400,200" ] && { [ "$code" = "400" ] || [ "$code" = "200" ]; }; }; then
|
||
if { [ "$expected" = "400" ] && [ "$code" = "200" ]; } || { [ "$expected" = "401" ] && [ "$code" = "200" ]; }; then
|
||
log_info " ${path} 正常 (HTTP ${code})"; continue
|
||
fi
|
||
log_warn " ${path} 异常 (HTTP ${code})"; all=false
|
||
else
|
||
log_info " ${path} 正常 (HTTP ${code})"
|
||
fi
|
||
done
|
||
$all && { log_info "基础连通性测试通过"; return 0; }
|
||
[ $retry -lt $max_retries ] && sleep 2
|
||
done
|
||
log_error "基础连通性测试失败"; return 1
|
||
}
|
||
|
||
test_database_connection() {
|
||
local r; r=$(remote "sudo docker exec ${DB_CONTAINER} pg_isready -U ${DB_USER} 2>/dev/null" || echo "failed")
|
||
[[ "$r" =~ "accepting connections" ]] && log_info " PostgreSQL 连接正常" || { log_warn " PostgreSQL 连接失败"; return 1; }
|
||
|
||
r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT 1'" 2>/dev/null || echo "failed")
|
||
[ "$r" = "1" ] && log_info " 数据库查询正常" || { log_warn " 数据库查询失败"; return 1; }
|
||
|
||
r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT tablename FROM pg_tables WHERE schemaname='\''public'\'' LIMIT 1'" 2>/dev/null || echo "failed")
|
||
[ -n "$r" ] && log_info " 表存在: ${r}" || { log_warn " 表查询失败"; return 1; }
|
||
log_info "数据库连接测试通过"; return 0
|
||
}
|
||
|
||
test_token_flow() {
|
||
local login; login=$(remote "curl -sk --max-time 10 -X POST ${BASE_URL}/api/login -H 'Content-Type: application/json' -d '{\"code\":\"test\"}'" 2>/dev/null || echo "")
|
||
local token; token=$(echo "$login" | grep -o '"token":"[^"]*"' | head -1 | cut -d'"' -f4 || echo "")
|
||
[ -z "$token" ] && log_warn " 未获取到 token（微信 code 无效是正常的）" || log_info " 获取到 token"
|
||
|
||
# 测试受保护端点
|
||
local profile; profile=$(remote "curl -sk --max-time 10 ${BASE_URL}/api/user/profile -H 'Authorization: Bearer ${token}'" 2>/dev/null || echo "")
|
||
echo "$profile" | grep -q '"success":true' && log_info " /api/user/profile JWT 验证成功" || log_warn " /api/user/profile 无权限（正常）"
|
||
|
||
local refresh; refresh=$(remote "curl -sk --max-time 10 -X POST ${BASE_URL}/api/refresh-token -H 'Content-Type: application/json' -d '{\"refresh_token\":\"invalid\"}'" 2>/dev/null || echo "")
|
||
log_info " refresh_token 端点响应正常"
|
||
log_info "Token 流程测试通过"; return 0
|
||
}
|
||
|
||
test_weather_details_jwt() {
|
||
local login; login=$(remote "curl -sk --max-time 10 -X POST ${BASE_URL}/api/login -H 'Content-Type: application/json' -d '{\"code\":\"test\"}'" 2>/dev/null || echo "")
|
||
local token; token=$(echo "$login" | grep -o '"token":"[^"]*"' | head -1 | cut -d'"' -f4 || echo "")
|
||
[ -z "$token" ] && { log_warn " 无 token，跳过 weather/details 测试（微信 code 无效是正常的）"; return 0; }
|
||
|
||
local resp; resp=$(remote "curl -sk --max-time 10 '${BASE_URL}/weather/details?id=1' -H 'Authorization: Bearer ${token}'" 2>/dev/null || echo "")
|
||
if echo "$resp" | grep -q '"success":true' || echo "$resp" | grep -q "Forbidden"; then
|
||
log_info " weather/details JWT 验证通过"
|
||
else
|
||
log_warn " weather/details 响应异常"
|
||
fi
|
||
return 0
|
||
}
|
||
|
||
test_invalid_token_401() {
|
||
local bad="eyJhbGciOiJIUzI1NiJ9.eyJleHAiOjB9.bad"
|
||
local all=true
|
||
for path in "/api/user/profile" "/weather/details?id=1" "/api/weather"; do
|
||
local c; c=$(remote "curl -sk -o /dev/null -w '%{http_code}' --max-time 10 '${BASE_URL}${path}' -H 'Authorization: Bearer ${bad}'" 2>/dev/null || echo "000")
|
||
[ "$c" = "401" ] && log_info " ${path} 返回 401 ✓" || { log_warn " ${path} 返回 ${c}"; all=false; }
|
||
done
|
||
$all && log_info "无效 Token 401 测试通过" && return 0
|
||
return 1
|
||
}
|
||
|
||
test_response_content() {
|
||
local r; r=$(remote "curl -sk --max-time 10 ${BASE_URL}/health" 2>/dev/null || echo "")
|
||
echo "$r" | grep -q '"status"' && echo "$r" | grep -q '"database"' && \
|
||
log_info " /health JSON 格式正确 ✓" || { log_warn " /health 响应异常"; return 1; }
|
||
echo "$r" | grep -q '"database":"connected"' && \
|
||
log_info " 数据库连接状态正常 ✓" || { log_warn " 数据库未连接"; return 1; }
|
||
log_info "响应内容验证通过"; return 0
|
||
}
|
||
|
||
# ---------- 新增测试 ----------
|
||
|
||
test_mock_login() {
|
||
if [ "${APP_ENV}" != "development" ]; then
|
||
log_info " mock-login 仅在开发环境中测试"
|
||
return 0
|
||
fi
|
||
local key; key=$(remote "grep 'MOCK_LOGIN_KEY' /etc/systemd/system/${SERVICE_NAME} 2>/dev/null | head -1 | sed 's/.*MOCK_LOGIN_KEY=//'" 2>/dev/null || echo "")
|
||
[ -z "$key" ] && { log_warn " 未配置 MOCK_LOGIN_KEY，跳过"; return 0; }
|
||
|
||
local resp; resp=$(remote "curl -sk --max-time 10 '${BASE_URL}/api/mock-login' -H 'X-Mock-Key: ${key}'" 2>/dev/null || echo "")
|
||
local token; token=$(echo "$resp" | grep -o '"token":"[^"]*"' | head -1 | cut -d'"' -f4 || echo "")
|
||
if [ -n "$token" ]; then
|
||
log_info " mock-login 返回有效 JWT ✅"
|
||
|
||
# 用获取到的 token 测试通知接口
|
||
local notif; notif=$(remote "curl -sk --max-time 10 '${BASE_URL}/api/notifications/unread-count' -H 'Authorization: Bearer ${token}'" 2>/dev/null || echo "")
|
||
echo "$notif" | grep -q '"success":true' && log_info " /api/notifications/unread-count 正常 ✅" || log_warn " 通知接口响应异常"
|
||
else
|
||
log_warn " mock-login 未返回 token"
|
||
fi
|
||
return 0
|
||
}
|
||
|
||
test_payment_endpoints() {
|
||
local all=true
|
||
local c; c=$(remote "curl -sk -o /dev/null -w '%{http_code}' --max-time 10 '${BASE_URL}/payment'" 2>/dev/null || echo "000")
|
||
[ "$c" = "200" ] && log_info " /payment 返回 200 ✅" || { log_warn " /payment 返回 ${c}"; all=false; }
|
||
|
||
c=$(remote "curl -sk -o /dev/null -w '%{http_code}' --max-time 10 '${BASE_URL}/payment/page?package=monthly&jwt=bad'" 2>/dev/null || echo "000")
|
||
[ "$c" = "401" ] && log_info " /payment/page (bad JWT) 返回 401 ✅" || { log_warn " /payment/page 返回 ${c}"; all=false; }
|
||
|
||
c=$(remote "curl -sk -o /dev/null -w '%{http_code}' --max-time 10 '${BASE_URL}/api/user/quota' -H 'Authorization: Bearer bad'" 2>/dev/null || echo "000")
|
||
[ "$c" = "401" ] && log_info " /api/user/quota (bad JWT) 返回 401 ✅" || { log_warn " /api/user/quota 返回 ${c}"; all=false; }
|
||
|
||
$all && log_info "支付端点测试通过" && return 0
|
||
log_warn "支付端点测试有异常（部分失败）"; return 0
|
||
}
|
||
|
||
test_migration_status() {
|
||
local r; r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT COUNT(*) FROM _migrations'" 2>/dev/null || echo "0")
|
||
[ "$r" -gt "0" ] 2>/dev/null && log_info " _migrations 表存在，已执行 ${r} 个迁移 ✅" || { log_warn " _migrations 表不存在或无记录"; return 0; }
|
||
|
||
local last; last=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT name FROM _migrations ORDER BY applied_at DESC LIMIT 1'" 2>/dev/null || echo "")
|
||
[ -n "$last" ] && log_info " 最新迁移: ${last} ✅"
|
||
return 0
|
||
}
|
||
|
||
# ---------- 支付链路测试 ----------
|
||
|
||
test_payment_flow() {
|
||
log_info "开始支付链路测试..."
|
||
|
||
# 清理 trap：测试失败时清理
|
||
local test_cleanup_done=false
|
||
cleanup_payment_test() {
|
||
if [ "$test_cleanup_done" = false ]; then
|
||
cleanup_test_user
|
||
test_cleanup_done=true
|
||
fi
|
||
}
|
||
trap cleanup_payment_test EXIT
|
||
|
||
# 阶段 1：检查订单到期时间计算与套餐天数是否一致
|
||
# 通过 SQL 直接创建测试订单（避免 JWT 依赖），验证 order.expires_at 间隔
|
||
local uuid_prefix
|
||
uuid_prefix="test-$(date +%s)"
|
||
|
||
# 验证每个套餐的 expires_at 间隔
|
||
local packages=("monthly:30" "quarterly:90" "half_year:182" "yearly:365")
|
||
local all_ok=true
|
||
|
||
for pkg_entry in "${packages[@]}"; do
|
||
IFS=':' read -r pkg_type expected_days <<< "$pkg_entry"
|
||
local test_no="${uuid_prefix}-${pkg_type}"
|
||
|
||
# 创建测试订单
|
||
local sql="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at)
|
||
VALUES (${TEST_USER_ID}, '${test_no}', '${pkg_type}', 100, 'pending', NOW() + INTERVAL '${expected_days} days');"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql}\"" 2>/dev/null || true
|
||
|
||
# 验证到期时间间隔
|
||
local interval_days
|
||
interval_days=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
|
||
SELECT EXTRACT(DAY FROM (expires_at - created_at)) FROM payment_orders WHERE order_no = '${test_no}';
|
||
\"" 2>/dev/null || echo "0")
|
||
interval_days=${interval_days%.*}
|
||
|
||
if [ "$interval_days" = "$expected_days" ]; then
|
||
log_info " ${pkg_type}: expires_at 间隔 ${interval_days} 天 ✅"
|
||
else
|
||
log_warn " ${pkg_type}: expires_at 间隔 ${interval_days:-0} 天（预期 ${expected_days}）"
|
||
all_ok=false
|
||
fi
|
||
|
||
# 清理测试订单
|
||
local del="DELETE FROM payment_orders WHERE order_no = '${test_no}';"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${del}\"" 2>/dev/null || true
|
||
done
|
||
|
||
# 阶段 2：测试提交订单后的会员时长（仅开发环境有 mock 支付）
|
||
if [ "${MOCK_PAY_ENABLED:-false}" = "true" ]; then
|
||
local mock_key
|
||
mock_key=$(remote "grep 'MOCK_PAY_KEY' /etc/systemd/system/${SERVICE_NAME} 2>/dev/null | head -1 | sed 's/.*MOCK_PAY_KEY=//'" 2>/dev/null || echo "")
|
||
|
||
if [ -n "$mock_key" ]; then
|
||
log_info " Mock 支付可用，测试完整支付链路..."
|
||
|
||
# 1. 获取 mock JWT
|
||
local login_resp
|
||
login_resp=$(remote "curl -sk --max-time 10 '${BASE_URL}/api/mock-login' -H 'X-Mock-Key: ${mock_key}'" 2>/dev/null || echo "")
|
||
local token
|
||
token=$(echo "$login_resp" | grep -o '"token":"[^"]*"' | head -1 | cut -d'"' -f4 || echo "")
|
||
|
||
if [ -n "$token" ]; then
|
||
# 2. 创建月度订单
|
||
local order_page
|
||
order_page=$(remote "curl -sk --max-time 10 '${BASE_URL}/payment/page?package=monthly&jwt=${token}'" 2>/dev/null || echo "")
|
||
|
||
# 3. 从页面提取订单号
|
||
local order_no
|
||
order_no=$(echo "$order_page" | grep -oP 'data-order-no="[^"]+"' | head -1 | cut -d'"' -f2 || echo "")
|
||
|
||
if [ -n "$order_no" ] && [ "$order_no" != "null" ]; then
|
||
# 4. Mock 确认支付
|
||
local confirm_resp
|
||
confirm_resp=$(remote "curl -sk --max-time 10 -X POST '${BASE_URL}/api/payment/mock-confirm' \
|
||
-H 'Authorization: Bearer ${token}' \
|
||
-H 'X-Mock-Key: ${mock_key}' \
|
||
-H 'Content-Type: application/json' \
|
||
-d '{\"order_id\":\"${order_no}\"}'" 2>/dev/null || echo "")
|
||
|
||
# 5. 验证会员时长
|
||
local member_expires
|
||
member_expires=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
|
||
SELECT EXTRACT(DAY FROM (membership_expires_at - NOW()))::int
|
||
FROM users WHERE id = ${TEST_USER_ID};
|
||
\"" 2>/dev/null || echo "0")
|
||
|
||
if [ "$member_expires" -ge 25 ]; then
|
||
log_info " 支付链路完整测试通过：会员增加 ${member_expires} 天 ✅"
|
||
else
|
||
log_warn " 会员仅增加 ${member_expires} 天（预期 >= 25）"
|
||
all_ok=false
|
||
fi
|
||
|
||
# 6. 清理：取消会员
|
||
local clean="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
|
||
local cancel="UPDATE payment_orders SET status = 'cancelled' WHERE order_no = '${order_no}' AND status = 'paid';"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${cancel}\"" 2>/dev/null || true
|
||
else
|
||
log_warn " 未获取到订单号，跳过 mock 确认测试"
|
||
fi
|
||
else
|
||
log_warn " 获取 mock JWT 失败，跳过完整支付链路测试"
|
||
fi
|
||
else
|
||
log_info " 未配置 MOCK_PAY_KEY（生产环境正常），跳过 mock 确认测试"
|
||
fi
|
||
else
|
||
log_info " 非开发环境，跳过 mock 支付链路测试"
|
||
fi
|
||
|
||
if $all_ok; then
|
||
log_info "支付链路测试通过"
|
||
return 0
|
||
else
|
||
log_warn "支付链路测试有异常"
|
||
return 0
|
||
fi
|
||
}
|
||
|
||
# ---------- 订单去重测试 ----------
|
||
# ---------- 维护模式测试 ----------
|
||
test_payment_dedup() {
|
||
log_info "开始订单去重测试..."
|
||
|
||
local uuid_prefix="dedup-test-$(date +%s)"
|
||
local test_no1="${uuid_prefix}-1"
|
||
local test_no2="${uuid_prefix}-2"
|
||
local user_id=${TEST_USER_ID}
|
||
local sql_file="/tmp/dedup_test_$(date +%s).sql"
|
||
local all_ok=true
|
||
|
||
# 1. 在服务器上生成 SQL 文件（避免 stdin 管道问题）
|
||
remote "cat > ${sql_file} << 'SQLEOF'
|
||
INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at) VALUES (${user_id}, '${test_no1}', 'monthly', 590, 'pending', NOW() + INTERVAL '30 days');
|
||
INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at) VALUES (${user_id}, '${test_no2}', 'monthly', 590, 'pending', NOW() + INTERVAL '30 days');
|
||
SQLEOF
|
||
sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -v ON_ERROR_STOP=1 -f ${sql_file}
|
||
rm -f ${sql_file}" 2>&1 || { log_warn " SQL 执行异常"; all_ok=false; }
|
||
|
||
# 2. 查询数量
|
||
local pending_count
|
||
pending_count=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"SELECT COUNT(*) FROM payment_orders WHERE user_id = ${user_id} AND package_type = 'monthly' AND status = 'pending';\"" 2>/dev/null || echo "0")
|
||
pending_count=$(echo "$pending_count" | tr -d ' ')
|
||
|
||
# 3. 清理
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"DELETE FROM payment_orders WHERE order_no LIKE '${uuid_prefix}%';\"" 2>/dev/null || true
|
||
|
||
if [ -n "$pending_count" ] && [ "$pending_count" -ge 2 ] 2>/dev/null; then
|
||
log_info " 同用户同套餐有 ${pending_count} 个 pending 订单（去重逻辑正常）✅"
|
||
else
|
||
log_warn " 同用户同套餐 pending 订单: ${pending_count:-0}（预期 >= 2）"
|
||
all_ok=false
|
||
fi
|
||
|
||
$all_ok && log_info "订单去重测试通过" && return 0
|
||
log_warn "订单去重测试有异常" && return 0
|
||
}
|
||
|
||
|
||
test_payment_maintenance() {
|
||
if [ "${APP_ENV}" != "development" ]; then
|
||
log_info " 维护模式测试仅在开发环境执行"
|
||
return 0
|
||
fi
|
||
|
||
log_info "开始维护模式测试..."
|
||
|
||
# 启用维护模式
|
||
remote "sed -i '/^Environment=PAYMENT_MAINTENANCE_MODE/d' /etc/systemd/system/${SERVICE_NAME}
|
||
sed -i '/^\[Service\]/a Environment=PAYMENT_MAINTENANCE_MODE=true' /etc/systemd/system/${SERVICE_NAME}
|
||
systemctl daemon-reload && sleep 1" 2>/dev/null || true
|
||
|
||
# 测试 quota 返回 unlimited
|
||
local quota_resp
|
||
quota_resp=$(remote "curl -sk --max-time 10 '${BASE_URL}/api/user/quota' -H 'Authorization: Bearer bad'" 2>/dev/null || echo "")
|
||
local has_maintenance
|
||
has_maintenance=$(echo "$quota_resp" | grep -c 'maintenance_mode' || echo "0")
|
||
|
||
# 恢复维护模式
|
||
remote "sed -i '/^Environment=PAYMENT_MAINTENANCE_MODE/d' /etc/systemd/system/${SERVICE_NAME}
|
||
systemctl daemon-reload && systemctl restart ${SERVICE_NAME} && sleep 3" 2>/dev/null || true
|
||
|
||
if [ "$has_maintenance" -ge 1 ]; then
|
||
log_info " 维护模式 quota 返回 maintenance_mode 字段 ✅"
|
||
else
|
||
log_warn " 维护模式下 quota 未返回 maintenance_mode"
|
||
return 0 # 即使失败也不阻断部署
|
||
fi
|
||
|
||
log_info "维护模式测试通过"
|
||
return 0
|
||
}
|
||
|
||
# ---------- 退款+会员撤销测试 ----------
|
||
|
||
test_payment_refund() {
|
||
log_info "开始退款测试..."
|
||
|
||
local test_no
|
||
test_no="refund-test-$(date +%s)"
|
||
|
||
# 创建已支付订单（模拟一个月会员）
|
||
local sql_create="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, paid_at, expires_at)
|
||
VALUES (${TEST_USER_ID}, '${test_no}', 'monthly', 590, 'paid', NOW(), NOW() + INTERVAL '30 days');"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
|
||
|
||
# 设置用户为会员
|
||
local sql_member="UPDATE users SET is_member = true, membership_expires_at = NOW() + INTERVAL '30 days' WHERE id = ${TEST_USER_ID};"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
|
||
|
||
# 执行退款（直接调用 db 函数等价操作）
|
||
local sql_refund="UPDATE payment_orders SET status = 'refunded' WHERE order_no = '${test_no}';"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_refund}\"" 2>/dev/null || true
|
||
|
||
# 清理：取消会员 + 删除测试订单
|
||
local clean_member="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean_member}\"" 2>/dev/null || true
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
|
||
|
||
log_info " 退款 + 会员取消测试完成 ✅"
|
||
log_info "退款测试通过"
|
||
return 0
|
||
}
|
||
|
||
# ---------- 验证函数检测逻辑测试 ----------
|
||
|
||
test_payment_verify_detection() {
|
||
log_info "开始支付验证检测逻辑测试..."
|
||
|
||
local test_no
|
||
test_no="verify-test-$(date +%s)"
|
||
|
||
# 构造一个 expiry = paid_at + 1 天的异常订单（模拟 ELSE INTERVAL '0 days'）
|
||
local sql_create="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, paid_at, expires_at)
|
||
VALUES (${TEST_USER_ID}, '${test_no}', 'half_year', 3190, 'paid', NOW(), NOW() + INTERVAL '1 day');"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
|
||
|
||
# 设置会员为 paid_at + 1 天（模拟 0 天会员时长）
|
||
local sql_member="UPDATE users SET is_member = true, membership_expires_at = NOW() + INTERVAL '1 day' WHERE id = ${TEST_USER_ID};"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
|
||
|
||
# 验证 actual_days < 25 能被检测到
|
||
local actual_days
|
||
actual_days=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
|
||
SELECT EXTRACT(DAY FROM (u.membership_expires_at - po.paid_at))
|
||
FROM payment_orders po JOIN users u ON u.id = po.user_id
|
||
WHERE po.order_no = '${test_no}';
|
||
\"" 2>/dev/null || echo "0")
|
||
actual_days=${actual_days%.*}
|
||
|
||
# 清理
|
||
local clean="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
|
||
remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
|
||
|
||
if [ "$actual_days" -lt 25 ] 2>/dev/null; then
|
||
log_info " 异常时长 ${actual_days} 天可被 verify_membership_after_payment 检测到（阈值 25 天）✅"
|
||
else
|
||
log_warn " 异常时长 ${actual_days} 天（预期 < 25）— 阈值可能需要调整"
|
||
fi
|
||
|
||
log_info "支付验证检测逻辑测试通过"
|
||
return 0
|
||
}
|
||
|
||
# ---------- nginx 代理测试 ----------
|
||
|
||
test_nginx_proxy_temp() {
|
||
log_info "测试 nginx proxy temp（POST body 权限）..."
|
||
# 发送带 POST body 的请求到公开 POST 端点，验证 nginx 能正常代理
|
||
# 如果 proxy temp 无权限，nginx 返回 502/403 或超时
|
||
local resp
|
||
resp=$(remote "curl -sk --max-time 10 -X POST '${BASE_URL}/api/login' \
|
||
-H 'Content-Type: application/json' \
|
||
-d '{\"test\":\"x\"}'" 2>/dev/null || true)
|
||
|
||
if [ -n "$resp" ]; then
|
||
log_info " nginx POST body 代理正常 ✅"
|
||
return 0
|
||
fi
|
||
log_error "nginx POST body 代理失败（proxy temp 可能无权限）"
|
||
return 1
|
||
}
|
||
|
||
# ---------- 支付 notify_url 校验 ----------
|
||
|
||
test_notify_url_domain() {
|
||
log_info "校验支付表单 notify_url 域名..."
|
||
local domain
|
||
domain=$(echo "$BASE_URL" | sed 's|https://||' | sed 's|http://||' | sed 's|/||g')
|
||
|
||
# 获取访客 JWT
|
||
local jwt
|
||
jwt=$(remote "curl -sk -X POST '${BASE_URL}/api/guest-login'" 2>/dev/null | python3 -c "import sys,json; print(json.load(sys.stdin).get('token',''))" 2>/dev/null)
|
||
if [ -z "$jwt" ]; then
|
||
log_error "获取 JWT 失败，无法校验 notify_url"
|
||
return 1
|
||
fi
|
||
|
||
# 提取支付表单的 notify_url
|
||
local notify_url
|
||
notify_url=$(remote "curl -sk '${BASE_URL}/payment/page?package=monthly&jwt=${jwt}'" 2>/dev/null | grep -oP 'notify_url" value="\K[^"]+' | head -1)
|
||
|
||
if [ -z "$notify_url" ]; then
|
||
log_error "无法提取 notify_url（可能为 Mock 支付模式）"
|
||
return 0 # Mock 模式下不校验
|
||
fi
|
||
|
||
# 检查 notify_url 的域名是否与 BASE_URL 一致
|
||
local notify_domain
|
||
notify_domain=$(echo "$notify_url" | sed 's|https://||' | sed 's|http://||' | sed 's|/payment/notify||')
|
||
|
||
if [ "$notify_domain" != "$domain" ]; then
|
||
log_error "notify_url 域名不匹配: 表单=${notify_domain}, 期望=${domain}"
|
||
log_error "请检查 APP_BASE_URL 配置"
|
||
return 1
|
||
fi
|
||
|
||
log_info " notify_url 域名 ${notify_domain} ✅"
|
||
return 0
|
||
}
|
||
|
||
# ---------- 主测试入口 ----------
|
||
run_tests() {
|
||
log_step "执行部署后测试..."
|
||
[ "$DRY_RUN" = true ] && { log_dry "完整测试套件（9 项）"; return 0; }
|
||
[ "$SKIP_TESTS" = true ] && { log_warn "跳过测试"; return 0; }
|
||
|
||
local tests=(
|
||
"test_basic_connectivity:基础连通性"
|
||
"test_database_connection:数据库连接"
|
||
"test_token_flow:Token 流程"
|
||
"test_weather_details_jwt:weather/details JWT"
|
||
"test_invalid_token_401:无效 Token 401"
|
||
"test_response_content:响应内容验证"
|
||
"test_mock_login:Mock 登录 + 通知接口"
|
||
"test_nginx_proxy_temp:nginx proxy temp"
|
||
"test_payment_endpoints:支付端点"
|
||
"test_payment_flow:支付链路"
|
||
"test_migration_status:迁移状态"
|
||
"test_payment_dedup:订单去重"
|
||
"test_payment_maintenance:维护模式"
|
||
"test_payment_refund:退款+会员撤销"
|
||
"test_payment_verify_detection:验证函数检测逻辑"
|
||
"test_notify_url_domain:支付回调域名校验"
|
||
)
|
||
local i=1 total=${#tests[@]}
|
||
|
||
# 设置测试用户（用于支付类测试）
|
||
if ! setup_test_user; then
|
||
log_warn "创建测试用户失败，支付类测试将使用 user_id=1"
|
||
TEST_USER_ID=1
|
||
fi
|
||
|
||
for entry in "${tests[@]}"; do
|
||
IFS=':' read -r fn name <<< "$entry"
|
||
log_step "测试 ${i}/${total}: ${name}..."
|
||
$fn || rollback_and_exit "${name} 测试失败"
|
||
i=$((i+1))
|
||
done
|
||
|
||
# 清理测试用户
|
||
cleanup_test_user
|
||
|
||
log_info "========== 全部 ${total} 项测试通过 =========="
|
||
}
|