补齐平台订单详情页治理入口回链测试

This commit is contained in:
萝卜
2026-03-20 10:01:06 +08:00
parent 9cf2e7d8e4
commit 15b0ecf094
2 changed files with 128 additions and 0 deletions

View File

@@ -87,4 +87,67 @@ class AdminPlatformOrderShowFixReceiptRefundLinksContainBackTest extends TestCas
$res->assertDontSee('back%3D', false); $res->assertDontSee('back%3D', false);
} }
public function test_fix_links_should_fall_back_to_order_show_self_when_outer_back_is_unsafe(): void
{
$this->loginAsPlatformAdmin();
$merchant = Merchant::query()->firstOrFail();
$plan = Plan::query()->create([
'code' => 'po_show_fix_links_unsafe_back_plan',
'name' => '平台订单详情去补回执/去核对退款 unsafe back 测试套餐',
'billing_cycle' => 'monthly',
'price' => 10,
'list_price' => 10,
'status' => 'active',
'sort' => 10,
'published_at' => now(),
]);
$order = PlatformOrder::query()->create([
'merchant_id' => $merchant->id,
'plan_id' => $plan->id,
'order_no' => 'PO_SHOW_FIX_LINKS_UNSAFE_0001',
'order_type' => 'new_purchase',
'status' => 'pending',
'payment_status' => 'refunded',
'plan_name' => $plan->name,
'billing_cycle' => $plan->billing_cycle,
'period_months' => 1,
'quantity' => 1,
'payable_amount' => 10,
'paid_amount' => 10,
'placed_at' => now(),
'paid_at' => now(),
'meta' => [
'payment_summary' => ['count' => 1, 'total' => 9],
'payment_receipts' => [
['amount' => 9, 'paid_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'],
],
'refund_summary' => ['count' => 1, 'total' => 1],
'refund_receipts' => [
['amount' => 1, 'refunded_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'],
],
],
]);
$unsafeBack = '/admin/platform-orders?status=pending&back=/admin';
$res = $this->get('/admin/platform-orders/' . $order->id . '?back=' . urlencode($unsafeBack));
$res->assertOk();
$orderShowSelf = '/admin/platform-orders/' . $order->id;
$fixReceiptUrl = '/admin/platform-orders/' . $order->id . '?' . Arr::query([
'back' => $orderShowSelf,
]) . '#add-payment-receipt';
$fixRefundUrl = '/admin/platform-orders/' . $order->id . '?' . Arr::query([
'back' => $orderShowSelf,
]) . '#add-refund-receipt';
$res->assertSee($fixReceiptUrl, false);
$res->assertSee($fixRefundUrl, false);
$res->assertDontSee(urlencode($unsafeBack), false);
$res->assertDontSee('back%3D', false);
}
} }

View File

@@ -94,4 +94,69 @@ class AdminPlatformOrderShowReconcileRefundInconsistentListLinksContainBackTest
// 不允许 back 嵌套 // 不允许 back 嵌套
$res->assertDontSee('back%3D', false); $res->assertDontSee('back%3D', false);
} }
public function test_show_page_list_links_should_fall_back_to_order_show_self_when_outer_back_is_unsafe(): void
{
$this->loginAsPlatformAdmin();
$merchant = Merchant::query()->firstOrFail();
$plan = Plan::query()->create([
'code' => 'po_show_reconcile_refund_list_unsafe_back_plan',
'name' => '平台订单详情对账/退款不一致列表 unsafe back 测试套餐',
'billing_cycle' => 'monthly',
'price' => 10,
'list_price' => 10,
'status' => 'active',
'sort' => 10,
'published_at' => now(),
]);
$order = PlatformOrder::query()->create([
'merchant_id' => $merchant->id,
'plan_id' => $plan->id,
'order_no' => 'PO_SHOW_LIST_UNSAFE_BACK_0001',
'order_type' => 'new_purchase',
'status' => 'pending',
'payment_status' => 'refunded',
'plan_name' => $plan->name,
'billing_cycle' => $plan->billing_cycle,
'period_months' => 1,
'quantity' => 1,
'payable_amount' => 10,
'paid_amount' => 10,
'placed_at' => now(),
'paid_at' => now(),
'meta' => [
'payment_summary' => ['count' => 1, 'total' => 9],
'payment_receipts' => [
['amount' => 9, 'paid_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'],
],
'refund_summary' => ['count' => 1, 'total' => 1],
'refund_receipts' => [
['amount' => 1, 'refunded_at' => now()->toDateTimeString(), 'channel' => 'offline', 'note' => 'test'],
],
],
]);
$unsafeBack = '/admin/platform-orders?status=pending&back=/admin';
$res = $this->get('/admin/platform-orders/' . $order->id . '?back=' . urlencode($unsafeBack));
$res->assertOk();
$expectedOrderShowSelf = '/admin/platform-orders/' . $order->id;
$expectedReconcileUrl = '/admin/platform-orders?' . Arr::query([
'reconcile_mismatch' => 1,
'back' => $expectedOrderShowSelf,
]);
$expectedRefundUrl = '/admin/platform-orders?' . Arr::query([
'refund_inconsistent' => 1,
'back' => $expectedOrderShowSelf,
]);
$res->assertSee($expectedReconcileUrl, false);
$res->assertSee($expectedRefundUrl, false);
$res->assertDontSee(urlencode($unsafeBack), false);
$res->assertDontSee('back%3D', false);
}
} }