231 lines
18 KiB
PowerShell
231 lines
18 KiB
PowerShell
param(
|
||
[string]$GatewayBaseUrl = 'http://127.0.0.1:19002',
|
||
[string]$OrderBaseUrl = 'http://127.0.0.1:19204',
|
||
[string]$WarehouseBaseUrl = 'http://127.0.0.1:19205',
|
||
[string]$MerchantUsername = 'merchant_admin',
|
||
[string]$PlatformUsername = 'platform_admin',
|
||
[string]$AdminPassword = 'ChangeMe123!',
|
||
[string]$MysqlPassword = '123456',
|
||
[string]$OutputPath = ''
|
||
)
|
||
|
||
$ErrorActionPreference = 'Stop'
|
||
$root = Split-Path -Parent (Split-Path -Parent $MyInvocation.MyCommand.Path)
|
||
if ([string]::IsNullOrWhiteSpace($OutputPath)) {
|
||
$OutputPath = Join-Path $root ("reports\订单仓库往来单位真实API回归-{0}.json" -f (Get-Date -Format 'yyyyMMdd-HHmmss'))
|
||
}
|
||
$mysql = 'D:\baiyue-runtime\mysql\server\bin\mysql.exe'
|
||
$results = [System.Collections.Generic.List[object]]::new()
|
||
$startedAt = Get-Date
|
||
$testData = [ordered]@{}
|
||
$previousMysqlPassword = $env:MYSQL_PWD
|
||
$env:MYSQL_PWD = $MysqlPassword
|
||
|
||
function Add-Result([string]$Name,[bool]$Passed,[string]$Evidence) {
|
||
$results.Add([pscustomobject]@{ name=$Name; passed=$Passed; evidence=$Evidence })
|
||
Write-Host "[$(if($Passed){'通过'}else{'失败'})] $Name - $Evidence"
|
||
if (-not $Passed) { throw "$Name：$Evidence" }
|
||
}
|
||
function Invoke-Api([string]$Method,[string]$Url,[object]$Body=$null,[string]$Token=$null) {
|
||
$headers=@{}; if($Token){$headers.Authorization="Bearer $Token"}
|
||
$args=@{Method=$Method;Uri=$Url;Headers=$headers;TimeoutSec=15;UseBasicParsing=$true}
|
||
if($null -ne $Body){
|
||
$args.ContentType='application/json; charset=utf-8'
|
||
$jsonText=$Body|ConvertTo-Json -Depth 15 -Compress
|
||
$args.Body=[Text.Encoding]::UTF8.GetBytes($jsonText)
|
||
}
|
||
try {
|
||
$response=Invoke-WebRequest @args
|
||
$content=$response.Content
|
||
if($null -ne $response.RawContentStream){try{$content=[Text.Encoding]::UTF8.GetString($response.RawContentStream.ToArray())}catch{}}
|
||
$json=$null; if($content){try{$json=$content|ConvertFrom-Json}catch{}}
|
||
return [pscustomobject]@{status=[int]$response.StatusCode;json=$json;body=$content}
|
||
} catch {
|
||
$status=0; if($_.Exception.Response){$status=[int]$_.Exception.Response.StatusCode}
|
||
$content=$_.ErrorDetails.Message; $json=$null; if($content){try{$json=$content|ConvertFrom-Json}catch{}}
|
||
if($null -eq $json -and $null -ne $_.Exception.Response){
|
||
try {
|
||
$reader=New-Object IO.StreamReader($_.Exception.Response.GetResponseStream(),[Text.Encoding]::UTF8)
|
||
$content=$reader.ReadToEnd();$reader.Dispose()
|
||
if($content){$json=$content|ConvertFrom-Json}
|
||
} catch {$json=$null}
|
||
}
|
||
return [pscustomobject]@{status=$status;json=$json;body=$content}
|
||
}
|
||
}
|
||
function Require-Success([string]$Name,$Response) {
|
||
$ok=$Response.status -eq 200 -and $Response.json.code -eq '0'
|
||
Add-Result $Name $ok "HTTP=$($Response.status)，code=$($Response.json.code)"
|
||
return $Response.json.data
|
||
}
|
||
function Require-Http([string]$Name,$Response,[int]$Status,[string]$Code='') {
|
||
$ok=$Response.status -eq $Status -and ([string]::IsNullOrWhiteSpace($Code) -or $Response.json.code -eq $Code)
|
||
Add-Result $Name $ok "HTTP=$($Response.status)，code=$($Response.json.code)"
|
||
}
|
||
function Require-Check([string]$Name,[bool]$Condition,[string]$Evidence) { Add-Result $Name $Condition $Evidence }
|
||
function Invoke-Sql([string]$Database,[string]$Sql) {
|
||
# MySQL 会在标准错误流输出命令行密码提示，但成功退出码仍为 0；避免将提示误判为 SQL 失败。
|
||
$previousErrorAction=$ErrorActionPreference
|
||
$ErrorActionPreference='Continue'
|
||
try {
|
||
$output=& $mysql '--default-character-set=utf8mb4' '--host=127.0.0.1' '--port=3306' '--user=root' "--database=$Database" "--execute=$Sql" 2>$null
|
||
$exitCode=$LASTEXITCODE
|
||
} finally {
|
||
$ErrorActionPreference=$previousErrorAction
|
||
}
|
||
if($exitCode -ne 0){throw "SQL执行失败：$output"}
|
||
}
|
||
function Invoke-SqlScalar([string]$Database,[string]$Sql) {
|
||
$previousErrorAction=$ErrorActionPreference
|
||
$ErrorActionPreference='Continue'
|
||
try {
|
||
$output=& $mysql '--batch' '--skip-column-names' '--default-character-set=utf8mb4' '--host=127.0.0.1' '--port=3306' '--user=root' "--database=$Database" "--execute=$Sql" 2>$null
|
||
$exitCode=$LASTEXITCODE
|
||
} finally {
|
||
$ErrorActionPreference=$previousErrorAction
|
||
}
|
||
if($exitCode -ne 0){throw 'SQL标量查询失败'}
|
||
return [string](@($output)[0])
|
||
}
|
||
function Login([string]$Username) {
|
||
return Require-Success "$Username 登录" (Invoke-Api POST "$GatewayBaseUrl/api/auth/login" @{username=$Username;password=$AdminPassword})
|
||
}
|
||
|
||
$activeWarehouse=190000000000000001L
|
||
$inactiveWarehouse=190000000000000002L
|
||
$crossWarehouse=190000000000000003L
|
||
$activePartner=191000000000000001L
|
||
$inactivePartner=191000000000000002L
|
||
$crossPartner=191000000000000003L
|
||
$orderId=$null
|
||
$fatal=$null
|
||
$permissionPreexisting=$false
|
||
|
||
try {
|
||
if(-not(Test-Path -LiteralPath $mysql)){throw "找不到 MySQL 客户端：$mysql"}
|
||
foreach($url in @("$GatewayBaseUrl/actuator/health","$OrderBaseUrl/actuator/health","$WarehouseBaseUrl/actuator/health")) {
|
||
$health=Invoke-Api GET $url
|
||
Require-Check "服务健康：$url" ($health.status -eq 200) "HTTP=$($health.status)"
|
||
}
|
||
|
||
# 回归数据只使用固定测试 ID，重复执行会恢复到启用/停用基线。
|
||
$permissionPreexisting=(Invoke-SqlScalar baiyue_iam "SELECT COUNT(*) FROM iam_permission WHERE id=5102018;") -eq '1'
|
||
Invoke-Sql baiyue_iam @"
|
||
INSERT INTO iam_permission(id,tenant_id,app_code,permission_type,parent_id,permission_code,permission_name,sort_no,status,deleted)
|
||
VALUES(5102018,0,'PLATFORM','BUTTON',5102010,'platform:order:fulfillment','登记履约快递',80,'ACTIVE',0)
|
||
ON DUPLICATE KEY UPDATE permission_name=VALUES(permission_name),status='ACTIVE',deleted=0;
|
||
INSERT INTO iam_role_permission(role_id,permission_id,tenant_id) VALUES(4000001,5102018,0)
|
||
ON DUPLICATE KEY UPDATE tenant_id=VALUES(tenant_id);
|
||
"@
|
||
Invoke-Sql baiyue_warehouse @"
|
||
INSERT INTO wh_warehouse(id,tenant_id,warehouse_code,warehouse_name,warehouse_type,country_code,timezone,status,remark)
|
||
VALUES
|
||
($inactiveWarehouse,10001,'REG-INACTIVE','回归停用仓','DOMESTIC','CN','Asia/Shanghai','INACTIVE','自动化回归'),
|
||
($crossWarehouse,10002,'REG-CROSS','其他企业仓库','DOMESTIC','CN','Asia/Shanghai','ACTIVE','自动化回归')
|
||
ON DUPLICATE KEY UPDATE status=VALUES(status),warehouse_name=VALUES(warehouse_name);
|
||
INSERT INTO wh_warehouse_address(id,tenant_id,warehouse_id,address_type,country_code,state_province,city,district,postal_code,address_line1)
|
||
VALUES
|
||
(190000000000000012,10001,$inactiveWarehouse,'OPERATING','CN','广东省','深圳市','龙岗区','518000','停用仓测试地址'),
|
||
(190000000000000013,10002,$crossWarehouse,'OPERATING','CN','广东省','广州市','白云区','510000','跨租户仓测试地址')
|
||
ON DUPLICATE KEY UPDATE address_line1=VALUES(address_line1);
|
||
INSERT INTO wh_service_capability(id,tenant_id,warehouse_id,capability_code,capability_name,enabled,cutoff_time,description)
|
||
VALUES
|
||
(190000000000000022,10001,$inactiveWarehouse,'RECEIVING','头程收货',1,'15:00:00','自动化回归'),
|
||
(190000000000000023,10002,$crossWarehouse,'RECEIVING','头程收货',1,'15:30:00','自动化回归')
|
||
ON DUPLICATE KEY UPDATE enabled=1,cutoff_time=VALUES(cutoff_time);
|
||
INSERT INTO wh_partner(id,tenant_id,partner_code,partner_name,partner_type,contact_name,contact_phone,contact_email,country_code,province,city,district,address_line,postal_code,status)
|
||
VALUES
|
||
($inactivePartner,10001,'REG-INACTIVE','回归停用往来单位','CUSTOMER','停用联系人','13800000011','inactive@example.com','CN','广东省','深圳市','龙岗区','停用往来单位地址','518000','INACTIVE'),
|
||
($crossPartner,10002,'REG-CROSS','其他企业往来单位','CUSTOMER','跨租户联系人','13800000012','cross@example.com','CN','广东省','广州市','白云区','跨租户往来单位地址','510000','ACTIVE')
|
||
ON DUPLICATE KEY UPDATE status=VALUES(status),partner_name=VALUES(partner_name);
|
||
UPDATE wh_warehouse SET status='ACTIVE' WHERE id=$activeWarehouse AND tenant_id=10001;
|
||
UPDATE wh_partner SET status='ACTIVE' WHERE id=$activePartner AND tenant_id=10001;
|
||
"@
|
||
|
||
$merchant=Login $MerchantUsername; $merchantToken=$merchant.accessToken
|
||
$platform=Login $PlatformUsername; $platformToken=$platform.accessToken
|
||
|
||
$warehouses=Require-Success '商户查询启用仓库' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/warehouses?page=1&size=50" $null $merchantToken)
|
||
$warehouseIds=@($warehouses.records|ForEach-Object{[long]$_.id})
|
||
Require-Check '仓库列表强制启用过滤' ($activeWarehouse -in $warehouseIds -and $inactiveWarehouse -notin $warehouseIds) "返回ID=$($warehouseIds -join ',')"
|
||
$warehouseDetail=Require-Success '仓库详情回显地址和收货能力' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/warehouses/$activeWarehouse" $null $merchantToken)
|
||
Require-Check '仓库地址完整' (@($warehouseDetail.addresses).Count -gt 0 -and $warehouseDetail.addresses[0].addressLine1) "地址=$($warehouseDetail.addresses[0].addressLine1)"
|
||
$receiving=@($warehouseDetail.capabilities|Where-Object{$_.capabilityCode -eq 'RECEIVING' -and $_.enabled})|Select-Object -First 1
|
||
Require-Check '收货截单时间回显' ($null -ne $receiving -and $receiving.cutoffTime) "截单时间=$($receiving.cutoffTime)"
|
||
Require-Http '停用仓库详情不可见' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/warehouses/$inactiveWarehouse" $null $merchantToken) 404 'A0404'
|
||
Require-Http '跨租户仓库详情不可见' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/warehouses/$crossWarehouse" $null $merchantToken) 404 'A0404'
|
||
|
||
$partners=Require-Success '商户查询启用往来单位' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/partners/candidates" $null $merchantToken)
|
||
$partnerIds=@($partners|ForEach-Object{[long]$_.id})
|
||
Require-Check '往来单位强制启用过滤' ($activePartner -in $partnerIds -and $inactivePartner -notin $partnerIds) "返回ID=$($partnerIds -join ',')"
|
||
Require-Http '停用往来单位不可见' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/partners/$inactivePartner" $null $merchantToken) 404 'A0404'
|
||
Require-Http '跨租户往来单位不可见' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/partners/$crossPartner" $null $merchantToken) 404 'A0404'
|
||
|
||
$stamp=Get-Date -Format 'MMddHHmmss'
|
||
$party=@{companyName='客户端可调整公司';contactName='联系人';phone='13800138000';email='order@example.com';countryCode='CN';province='广东省';city='深圳市';district='南山区';addressLine='订单地址快照1号';postalCode='518000'}
|
||
$cargo=@{cargoName='回归货物';packageType='CARTON';packageCount=1;grossWeightKg=10;volumeCbm=1;dangerousGoods=$false}
|
||
$payload=@{customerId=$activePartner;customerName='伪造客户名';transportMode='SEA';tradeTerm='FOB';destinationCountryCode='US';destinationWarehouseName='海外目的仓';expectedShipDate=(Get-Date).AddDays(10).ToString('yyyy-MM-dd');customerRemark='真实API回归';sender=$party;receiver=$party;cargoes=@($cargo);pickupMethod='PICKUP';receivingWarehouseId=$activeWarehouse;receivingWarehouseName='伪造收货仓名';channelCode='REG';channelName='回归渠道';taxMode='BUY_DECLARATION';containerMode='LCL';customsInspection=$false;destinationType='OVERSEAS'}
|
||
|
||
$created=Require-Success '创建订单草稿' (Invoke-Api POST "$GatewayBaseUrl/api/merchant/v1/orders/first-leg" $payload $merchantToken)
|
||
$orderId=[long]$created; $testData.orderId=$orderId
|
||
$detail=Require-Success '查询新建草稿' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $null $merchantToken)
|
||
Require-Check '订单使用服务端可信名称快照' ($detail.order.customerName -eq '深圳示例贸易有限公司' -and $detail.order.receivingWarehouseName -eq '深圳头程收货仓') "客户=$($detail.order.customerName)，仓库=$($detail.order.receivingWarehouseName)"
|
||
Require-Check '订单保存仓库地址和收货时间快照' ($detail.order.receivingWarehouseAddress -match '示例物流园' -and $detail.order.receivingTime -match '16:00') "地址=$($detail.order.receivingWarehouseAddress)，收货=$($detail.order.receivingTime)"
|
||
|
||
$payload.sender.addressLine='订单编辑后地址2号'; $payload.customerName='再次伪造名称'; $payload.receivingWarehouseName='再次伪造仓名'
|
||
$null=Require-Success '编辑并重新保存草稿' (Invoke-Api PUT "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $payload $merchantToken)
|
||
$detail=Require-Success '读取编辑后的草稿' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $null $merchantToken)
|
||
$sender=@($detail.parties|Where-Object{$_.partyType -eq 'SENDER'})|Select-Object -First 1
|
||
Require-Check '订单参与方地址保存为历史快照' ($sender.addressLine -eq '订单编辑后地址2号') "地址=$($sender.addressLine)"
|
||
Require-Check '编辑仍不信任客户端主数据名称' ($detail.order.customerName -eq '深圳示例贸易有限公司' -and $detail.order.receivingWarehouseName -eq '深圳头程收货仓') '可信名称未被伪造值覆盖'
|
||
|
||
Invoke-Sql baiyue_warehouse "UPDATE wh_warehouse SET status='INACTIVE' WHERE id=$activeWarehouse AND tenant_id=10001;"
|
||
Require-Http '仓库停用后禁止保存草稿' (Invoke-Api PUT "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $payload $merchantToken) 404 'A0404'
|
||
Invoke-Sql baiyue_warehouse "UPDATE wh_warehouse SET status='ACTIVE' WHERE id=$activeWarehouse AND tenant_id=10001;"
|
||
Invoke-Sql baiyue_warehouse "UPDATE wh_partner SET status='INACTIVE' WHERE id=$activePartner AND tenant_id=10001;"
|
||
Require-Http '往来单位停用后禁止保存草稿' (Invoke-Api PUT "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $payload $merchantToken) 404 'A0404'
|
||
Invoke-Sql baiyue_warehouse "UPDATE wh_partner SET status='ACTIVE' WHERE id=$activePartner AND tenant_id=10001;"
|
||
|
||
Invoke-Sql baiyue_iam "UPDATE iam_tenant SET status='PENDING' WHERE id=10001;"
|
||
Require-Http '企业审核未通过禁止创建订单' (Invoke-Api POST "$GatewayBaseUrl/api/merchant/v1/orders/first-leg" $payload $merchantToken) 403 'A0403'
|
||
Invoke-Sql baiyue_iam "UPDATE iam_tenant SET status='ACTIVE' WHERE id=10001;"
|
||
|
||
$null=Require-Success '提交草稿' (Invoke-Api POST "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId/submit" $null $merchantToken)
|
||
Require-Http '重复提交返回409' (Invoke-Api POST "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId/submit" $null $merchantToken) 409 'A0409'
|
||
|
||
$null=Require-Success '平台履约写入快递信息' (Invoke-Api PUT "$GatewayBaseUrl/api/platform/v1/orders/first-leg/$orderId/express?tenantId=10001" @{expressCompany='顺丰速运';expressTrackingNo="SF$stamp"} $platformToken)
|
||
Require-Http '商户身份不能写平台快递接口' (Invoke-Api PUT "$GatewayBaseUrl/api/platform/v1/orders/first-leg/$orderId/express?tenantId=10001" @{expressCompany='顺丰速运';expressTrackingNo="SF$stamp-X"} $merchantToken) 403 'A0403'
|
||
$detail=Require-Success '商户订单详情只读展示快递信息' (Invoke-Api GET "$GatewayBaseUrl/api/merchant/v1/orders/first-leg/$orderId" $null $merchantToken)
|
||
Require-Check '快递公司和单号真实回显' ($detail.order.expressCompany -eq '顺丰速运' -and $detail.order.expressTrackingNo -eq "SF$stamp") "快递=$($detail.order.expressCompany)，单号=$($detail.order.expressTrackingNo)"
|
||
|
||
foreach($item in @(
|
||
@{name='Order merchant api-docs';url="$OrderBaseUrl/v3/api-docs/merchant"},
|
||
@{name='Warehouse merchant api-docs';url="$WarehouseBaseUrl/v3/api-docs/merchant"}
|
||
)) {
|
||
$doc=Invoke-Api GET $item.url
|
||
Require-Check $item.name ($doc.status -eq 200 -and $doc.body -match '"openapi"') "HTTP=$($doc.status)"
|
||
}
|
||
$gatewayConfig=Get-Content -LiteralPath (Join-Path $root 'gateway\src\main\resources\application-cn.yml') -Raw -Encoding UTF8
|
||
Require-Check 'Gateway Order api-docs 路由源配置' ($gatewayConfig -match 'order-service/v3/api-docs') '已静态审查源配置'
|
||
Require-Check 'Gateway Warehouse api-docs 路由源配置' ($gatewayConfig -match 'warehouse-service/v3/api-docs') '已静态审查源配置'
|
||
} catch {
|
||
$fatal=$_.Exception.Message
|
||
$results.Add([pscustomobject]@{name='脚本主流程';passed=$false;evidence=$fatal})
|
||
} finally {
|
||
try { Invoke-Sql baiyue_iam "UPDATE iam_tenant SET status='ACTIVE' WHERE id=10001;" } catch {}
|
||
try {
|
||
if($orderId) {
|
||
Invoke-Sql baiyue_order "DELETE FROM ord_order_internal_note WHERE tenant_id=10001 AND order_id=$orderId; DELETE FROM ord_order_status_history WHERE tenant_id=10001 AND order_id=$orderId; DELETE FROM ord_order_cargo WHERE tenant_id=10001 AND order_id=$orderId; DELETE FROM ord_order_party WHERE tenant_id=10001 AND order_id=$orderId; DELETE FROM ord_outbox_event WHERE tenant_id=10001 AND aggregate_id=$orderId; DELETE FROM ord_order WHERE tenant_id=10001 AND id=$orderId;"
|
||
}
|
||
} catch {}
|
||
try { Invoke-Sql baiyue_warehouse "UPDATE wh_warehouse SET status='ACTIVE' WHERE id=$activeWarehouse AND tenant_id=10001; UPDATE wh_partner SET status='ACTIVE' WHERE id=$activePartner AND tenant_id=10001; DELETE FROM wh_service_capability WHERE id IN (190000000000000022,190000000000000023); DELETE FROM wh_warehouse_address WHERE id IN (190000000000000012,190000000000000013); DELETE FROM wh_partner WHERE id IN ($inactivePartner,$crossPartner); DELETE FROM wh_warehouse WHERE id IN ($inactiveWarehouse,$crossWarehouse);" } catch {}
|
||
try { if(-not $permissionPreexisting){Invoke-Sql baiyue_iam "DELETE FROM iam_role_permission WHERE permission_id=5102018; DELETE FROM iam_permission WHERE id=5102018;"} } catch {}
|
||
$passed=@($results|Where-Object{$_.passed}).Count; $failed=@($results|Where-Object{-not $_.passed}).Count
|
||
$report=[ordered]@{reportName='订单仓库往来单位真实API回归报告';startedAt=$startedAt.ToString('o');finishedAt=(Get-Date).ToString('o');stack=[ordered]@{gateway=$GatewayBaseUrl;order=$OrderBaseUrl;warehouse=$WarehouseBaseUrl};success=($failed -eq 0);summary=[ordered]@{total=$results.Count;passed=$passed;failed=$failed};testData=$testData;results=$results;fatalMessage=$fatal;securityNote='报告不保存密码或令牌'}
|
||
$dir=Split-Path -Parent $OutputPath; if(-not(Test-Path $dir)){New-Item -ItemType Directory -Path $dir -Force|Out-Null}
|
||
$report|ConvertTo-Json -Depth 12|Set-Content -LiteralPath $OutputPath -Encoding UTF8
|
||
if ($null -eq $previousMysqlPassword) { Remove-Item Env:MYSQL_PWD -ErrorAction SilentlyContinue } else { $env:MYSQL_PWD=$previousMysqlPassword }
|
||
Write-Host "报告已生成：$OutputPath"
|
||
if(-not $report.success){exit 1}
|
||
}
|