diff --git a/tests/Feature/AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest.php b/tests/Feature/AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest.php index 80bce74..48ec48a 100644 --- a/tests/Feature/AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest.php +++ b/tests/Feature/AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest.php @@ -87,4 +87,67 @@ class AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest extends TestCas $res->assertDontSee('back%3D', false); } + + public function test_fix_links_should_fall_back_to_order_show_self_when_outer_back_is_unsafe(): void + { + $this->loginAsPlatformAdmin(); + + $merchant = Merchant::query()->firstOrFail(); + $plan = Plan::query()->create([ + 'code' => 'po_show_fix_links_unsafe_back_plan', + 'name' => '平台订单详情去补回执/去核对退款 unsafe back 测试套餐', + 'billing_cycle' => 'monthly', + 'price' => 10, + 'list_price' => 10, + 'status' => 'active', + 'sort' => 10, + 'published_at' => now(), + ]); + + $order = PlatformOrder::query()->create([ + 'merchant_id' => $merchant->id, + 'plan_id' => $plan->id, + 'order_no' => 'PO_SHOW_FIX_LINKS_UNSAFE_0001', + 'order_type' => 'new_purchase', + 'status' => 'pending', + 'payment_status' => 'refunded', + 'plan_name' => $plan->name, + 'billing_cycle' => $plan->billing_cycle, + 'period_months' => 1, + 'quantity' => 1, + 'payable_amount' => 10, + 'paid_amount' => 10, + 'placed_at' => now(), + 'paid_at' => now(), + 'meta' => [ + 'payment_summary' => ['count' => 1, 'total' => 9], + 'payment_receipts' => [ + ['amount' => 9, 'paid_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'], + ], + 'refund_summary' => ['count' => 1, 'total' => 1], + 'refund_receipts' => [ + ['amount' => 1, 'refunded_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'], + ], + ], + ]); + + $unsafeBack = '/admin/platform-orders?status=pending&back=/admin'; + $res = $this->get('/admin/platform-orders/' . $order->id . '?back=' . urlencode($unsafeBack)); + $res->assertOk(); + + $orderShowSelf = '/admin/platform-orders/' . $order->id; + + $fixReceiptUrl = '/admin/platform-orders/' . $order->id . '?' . Arr::query([ + 'back' => $orderShowSelf, + ]) . '#add-payment-receipt'; + + $fixRefundUrl = '/admin/platform-orders/' . $order->id . '?' . Arr::query([ + 'back' => $orderShowSelf, + ]) . '#add-refund-receipt'; + + $res->assertSee($fixReceiptUrl, false); + $res->assertSee($fixRefundUrl, false); + $res->assertDontSee(urlencode($unsafeBack), false); + $res->assertDontSee('back%3D', false); + } } diff --git a/tests/Feature/AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest.php b/tests/Feature/AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest.php index e69617a..9f1db52 100644 --- a/tests/Feature/AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest.php +++ b/tests/Feature/AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest.php @@ -94,4 +94,69 @@ class AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest // 不允许 back 嵌套 $res->assertDontSee('back%3D', false); } + + public function test_show_page_list_links_should_fall_back_to_order_show_self_when_outer_back_is_unsafe(): void + { + $this->loginAsPlatformAdmin(); + + $merchant = Merchant::query()->firstOrFail(); + $plan = Plan::query()->create([ + 'code' => 'po_show_reconcile_refund_list_unsafe_back_plan', + 'name' => '平台订单详情对账/退款不一致列表 unsafe back 测试套餐', + 'billing_cycle' => 'monthly', + 'price' => 10, + 'list_price' => 10, + 'status' => 'active', + 'sort' => 10, + 'published_at' => now(), + ]); + + $order = PlatformOrder::query()->create([ + 'merchant_id' => $merchant->id, + 'plan_id' => $plan->id, + 'order_no' => 'PO_SHOW_LIST_UNSAFE_BACK_0001', + 'order_type' => 'new_purchase', + 'status' => 'pending', + 'payment_status' => 'refunded', + 'plan_name' => $plan->name, + 'billing_cycle' => $plan->billing_cycle, + 'period_months' => 1, + 'quantity' => 1, + 'payable_amount' => 10, + 'paid_amount' => 10, + 'placed_at' => now(), + 'paid_at' => now(), + 'meta' => [ + 'payment_summary' => ['count' => 1, 'total' => 9], + 'payment_receipts' => [ + ['amount' => 9, 'paid_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'], + ], + 'refund_summary' => ['count' => 1, 'total' => 1], + 'refund_receipts' => [ + ['amount' => 1, 'refunded_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'], + ], + ], + ]); + + $unsafeBack = '/admin/platform-orders?status=pending&back=/admin'; + $res = $this->get('/admin/platform-orders/' . $order->id . '?back=' . urlencode($unsafeBack)); + $res->assertOk(); + + $expectedOrderShowSelf = '/admin/platform-orders/' . $order->id; + + $expectedReconcileUrl = '/admin/platform-orders?' . Arr::query([ + 'reconcile_mismatch' => 1, + 'back' => $expectedOrderShowSelf, + ]); + + $expectedRefundUrl = '/admin/platform-orders?' . Arr::query([ + 'refund_inconsistent' => 1, + 'back' => $expectedOrderShowSelf, + ]); + + $res->assertSee($expectedReconcileUrl, false); + $res->assertSee($expectedRefundUrl, false); + $res->assertDontSee(urlencode($unsafeBack), false); + $res->assertDontSee('back%3D', false); + } }