统一用户信息付费查看

tests/Feature/BankControllerTest.php

@@ -1,17 +1,41 @@
 <?php
 
+/**
+ * 文件功能：银行接口功能测试
+ * 覆盖银行余额、存取款、排行榜遮罩和统一信息查看付费。
+ */
+
 namespace Tests\Feature;
 
+use App\Enums\CurrencySource;
 use App\Models\BankLog;
+use App\Models\Sysparam;
 use App\Models\User;
+use App\Models\UserCurrencyLog;
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Tests\TestCase;
 
+/**
+ * 类功能：验证银行控制器的资金操作与存款可见性规则。
+ */
 class BankControllerTest extends TestCase
 {
     use RefreshDatabase;
 
-    public function test_info_returns_balances_and_logs()
+    /**
+     * 初始化银行接口测试所需的系统参数。
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        Sysparam::updateOrCreate(['alias' => 'superlevel'], ['body' => '100']);
+    }
+
+    /**
+     * 测试银行信息接口返回本人余额和最近流水。
+     */
+    public function test_info_returns_balances_and_logs(): void
     {
         $user = User::factory()->create([
             'jjb' => 1000,
@@ -36,7 +60,10 @@ class BankControllerTest extends TestCase
         $response->assertJsonCount(1, 'logs');
     }
 
-    public function test_deposit_transfers_jjb_to_bank()
+    /**
+     * 测试存款会把流通金币转入银行账户。
+     */
+    public function test_deposit_transfers_jjb_to_bank(): void
     {
         $user = User::factory()->create([
             'jjb' => 1000,
@@ -68,7 +95,10 @@ class BankControllerTest extends TestCase
         ]);
     }
 
-    public function test_deposit_fails_if_insufficient_funds()
+    /**
+     * 测试流通金币不足时不能存款。
+     */
+    public function test_deposit_fails_if_insufficient_funds(): void
     {
         $user = User::factory()->create([
             'jjb' => 100,
@@ -89,7 +119,10 @@ class BankControllerTest extends TestCase
         ]);
     }
 
-    public function test_withdraw_transfers_bank_to_jjb()
+    /**
+     * 测试取款会把银行存款转回流通金币。
+     */
+    public function test_withdraw_transfers_bank_to_jjb(): void
     {
         $user = User::factory()->create([
             'jjb' => 0,
@@ -115,7 +148,10 @@ class BankControllerTest extends TestCase
         ]);
     }
 
-    public function test_withdraw_fails_if_insufficient_funds()
+    /**
+     * 测试银行余额不足时不能取款。
+     */
+    public function test_withdraw_fails_if_insufficient_funds(): void
     {
         $user = User::factory()->create([
             'jjb' => 0,
@@ -132,12 +168,18 @@ class BankControllerTest extends TestCase
         ]);
     }
 
-    public function test_ranking_returns_paginated_users_ordered_by_bank_jjb()
+    /**
+     * 测试普通用户查看存款排行时，别人存款被星号遮罩且本人存款可见。
+     */
+    public function test_ranking_masks_other_users_bank_balance_for_normal_user(): void
     {
-        $user = User::factory()->create(); // To act as
+        $user = User::factory()->create([
+            'bank_jjb' => 750,
+            'username' => 'Viewer',
+            'user_level' => 10,
+        ]);
 
         User::factory()->create(['bank_jjb' => 1000, 'username' => 'Rich']);
-        User::factory()->create(['bank_jjb' => 500, 'username' => 'Poorer']);
 
         $response = $this->actingAs($user)->getJson(route('bank.ranking'));
 
@@ -149,6 +191,156 @@ class BankControllerTest extends TestCase
         $ranking = $response->json('ranking');
         $this->assertCount(2, $ranking);
         $this->assertEquals('Rich', $ranking[0]['username']);
-        $this->assertEquals('Poorer', $ranking[1]['username']);
+        $this->assertSame('******', $ranking[0]['bank_jjb']);
+        $this->assertTrue($ranking[0]['can_reveal']);
+        $this->assertEquals('Viewer', $ranking[1]['username']);
+        $this->assertSame(750, $ranking[1]['bank_jjb']);
+        $this->assertFalse($ranking[1]['can_reveal']);
+    }
+
+    /**
+     * 测试 superlevel 用户查看存款排行时所有金额真实可见。
+     */
+    public function test_ranking_shows_all_bank_balances_for_superlevel_user(): void
+    {
+        $admin = User::factory()->create([
+            'user_level' => 100,
+            'bank_jjb' => 1,
+        ]);
+
+        User::factory()->create(['bank_jjb' => 1000, 'username' => 'Rich']);
+
+        $response = $this->actingAs($admin)->getJson(route('bank.ranking'));
+
+        $response->assertOk();
+        $ranking = $response->json('ranking');
+        $this->assertSame(1000, $ranking[0]['bank_jjb']);
+        $this->assertFalse($ranking[0]['can_reveal']);
+    }
+
+    /**
+     * 测试普通用户付费查看别人存款时扣除金币并写入流水。
+     */
+    public function test_reveal_balance_charges_normal_user_and_returns_target_bank_balance(): void
+    {
+        $viewer = User::factory()->create([
+            'jjb' => 1500,
+            'user_level' => 10,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'TargetUser',
+            'bank_jjb' => 4321,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'bank_jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'bank_jjb')
+            ->assertJsonPath('value', 4321)
+            ->assertJsonPath('charged', true)
+            ->assertJsonPath('jjb', 500);
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 500,
+        ]);
+        $this->assertDatabaseHas('user_currency_logs', [
+            'user_id' => $viewer->id,
+            'currency' => 'gold',
+            'amount' => -1000,
+            'balance_after' => 500,
+            'source' => CurrencySource::USER_INFO_REVEAL->value,
+            'remark' => '查看 TargetUser 的存款',
+        ]);
+    }
+
+    /**
+     * 测试金币不足时不能付费查看别人存款，也不会泄露金额。
+     */
+    public function test_reveal_balance_fails_without_enough_gold(): void
+    {
+        $viewer = User::factory()->create([
+            'jjb' => 999,
+            'user_level' => 10,
+        ]);
+        $target = User::factory()->create([
+            'bank_jjb' => 4321,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'bank_jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'error')
+            ->assertJsonMissingPath('value');
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 999,
+        ]);
+        $this->assertSame(0, UserCurrencyLog::query()
+            ->where('user_id', $viewer->id)
+            ->where('source', CurrencySource::USER_INFO_REVEAL->value)
+            ->count());
+    }
+
+    /**
+     * 测试查看自己存款不扣费。
+     */
+    public function test_reveal_own_balance_is_free(): void
+    {
+        $viewer = User::factory()->create([
+            'jjb' => 10,
+            'bank_jjb' => 2222,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $viewer->id,
+            'asset' => 'bank_jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'bank_jjb')
+            ->assertJsonPath('value', 2222)
+            ->assertJsonPath('charged', false)
+            ->assertJsonPath('jjb', 10);
+
+        $this->assertSame(0, UserCurrencyLog::query()
+            ->where('user_id', $viewer->id)
+            ->where('source', CurrencySource::USER_INFO_REVEAL->value)
+            ->count());
+    }
+
+    /**
+     * 测试 superlevel 用户查看别人存款不扣费。
+     */
+    public function test_superlevel_reveal_other_balance_is_free(): void
+    {
+        $admin = User::factory()->create([
+            'jjb' => 10,
+            'user_level' => 100,
+        ]);
+        $target = User::factory()->create([
+            'bank_jjb' => 3333,
+        ]);
+
+        $response = $this->actingAs($admin)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'bank_jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'bank_jjb')
+            ->assertJsonPath('value', 3333)
+            ->assertJsonPath('charged', false)
+            ->assertJsonPath('jjb', 10);
     }
 }

tests/Feature/UserControllerTest.php

@@ -7,9 +7,11 @@
 
 namespace Tests\Feature;
 
+use App\Enums\CurrencySource;
 use App\Models\Room;
 use App\Models\Sysparam;
 use App\Models\User;
+use App\Models\UserCurrencyLog;
 use App\Services\ChatUserPresenceService;
 use Carbon\Carbon;
 use Illuminate\Foundation\Testing\RefreshDatabase;
@@ -63,6 +65,235 @@ class UserControllerTest extends TestCase
             ->assertJsonPath('data.user_level', 10);
     }
 
+    /**
+     * 测试普通用户查看别人名片时银行存款默认显示星号。
+     */
+    public function test_normal_user_sees_masked_bank_balance_on_other_profile(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 10,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'targetuser',
+            'user_level' => 1,
+            'exp_num' => 123,
+            'jjb' => 456,
+            'bank_jjb' => 6000,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.exp_num', 123)
+            ->assertJsonPath('data.jjb', 456)
+            ->assertJsonPath('data.meili', 789)
+            ->assertJsonPath('data.bank_jjb', '******')
+            ->assertJsonPath('data.bank_jjb_masked', true)
+            ->assertJsonPath('data.bank_jjb_can_reveal', true)
+            ->assertJsonPath('data.bank_jjb_reveal_cost', 1000)
+            ->assertJsonPath('data.bank_reveal_user_id', $target->id);
+    }
+
+    /**
+     * 测试低等级用户查看高等级名片时资产卡片仍展示但具体数值被星号遮罩。
+     */
+    public function test_low_level_user_sees_masked_asset_numbers_on_higher_profile(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'highlevel',
+            'user_level' => 10,
+            'exp_num' => 123,
+            'jjb' => 456,
+            'bank_jjb' => 6000,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.exp_num', '******')
+            ->assertJsonPath('data.jjb', '******')
+            ->assertJsonPath('data.bank_jjb', '******')
+            ->assertJsonPath('data.meili', '******')
+            ->assertJsonPath('data.bank_jjb_masked', true)
+            ->assertJsonPath('data.bank_jjb_can_reveal', true)
+            ->assertJsonPath('data.asset_numbers_masked', true)
+            ->assertJsonPath('data.asset_numbers_can_reveal', true)
+            ->assertJsonPath('data.asset_numbers_reveal_cost', 1000)
+            ->assertJsonPath('data.asset_reveal_user_id', $target->id);
+    }
+
+    /**
+     * 测试低等级用户付费查看高等级用户隐藏经验时扣费并返回真实数值。
+     */
+    public function test_low_level_user_can_pay_to_reveal_hidden_exp_number(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 1500,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'highlevel',
+            'user_level' => 10,
+            'exp_num' => 12345,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'exp_num',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'exp_num')
+            ->assertJsonPath('value', 12345)
+            ->assertJsonPath('charged', true)
+            ->assertJsonPath('jjb', 500);
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 500,
+        ]);
+        $this->assertDatabaseHas('user_currency_logs', [
+            'user_id' => $viewer->id,
+            'currency' => 'gold',
+            'amount' => -1000,
+            'balance_after' => 500,
+            'source' => CurrencySource::USER_INFO_REVEAL->value,
+            'remark' => '查看 highlevel 的经验',
+        ]);
+    }
+
+    /**
+     * 测试低等级用户付费查看高等级用户隐藏金币时返回目标金币且同步扣费后余额。
+     */
+    public function test_low_level_user_can_pay_to_reveal_hidden_gold_number(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 2000,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'goldtarget',
+            'user_level' => 10,
+            'jjb' => 4567,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'jjb')
+            ->assertJsonPath('value', 4567)
+            ->assertJsonPath('charged', true)
+            ->assertJsonPath('jjb', 1000);
+    }
+
+    /**
+     * 测试金币不足时不能查看隐藏资产，也不会泄露真实数值。
+     */
+    public function test_reveal_hidden_asset_fails_without_enough_gold(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 999,
+        ]);
+        $target = User::factory()->create([
+            'user_level' => 10,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'meili',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'error')
+            ->assertJsonMissingPath('value');
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 999,
+        ]);
+        $this->assertSame(0, UserCurrencyLog::query()
+            ->where('user_id', $viewer->id)
+            ->where('source', CurrencySource::USER_INFO_REVEAL->value)
+            ->count());
+    }
+
+    /**
+     * 测试等级足够时通过查看接口读取资产不扣费。
+     */
+    public function test_reveal_asset_is_free_when_level_allows_direct_view(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 10,
+            'jjb' => 50,
+        ]);
+        $target = User::factory()->create([
+            'user_level' => 1,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'meili',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('value', 789)
+            ->assertJsonPath('charged', false)
+            ->assertJsonPath('jjb', 50);
+    }
+
+    /**
+     * 测试查看自己名片时银行存款真实可见且不需要付费查看。
+     */
+    public function test_self_profile_shows_real_bank_balance(): void
+    {
+        $user = User::factory()->create([
+            'username' => 'selfuser',
+            'bank_jjb' => 7000,
+        ]);
+
+        $response = $this->actingAs($user)->getJson("/user/{$user->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.bank_jjb', 7000)
+            ->assertJsonPath('data.bank_jjb_masked', false)
+            ->assertJsonPath('data.bank_jjb_can_reveal', false);
+    }
+
+    /**
+     * 测试 superlevel 用户查看别人名片时银行存款真实可见。
+     */
+    public function test_superlevel_profile_shows_other_bank_balance(): void
+    {
+        $admin = User::factory()->create([
+            'user_level' => 100,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'richuser',
+            'bank_jjb' => 8000,
+        ]);
+
+        $response = $this->actingAs($admin)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.bank_jjb', 8000)
+            ->assertJsonPath('data.bank_jjb_masked', false)
+            ->assertJsonPath('data.bank_jjb_can_reveal', false);
+    }
+
     /**
      * 测试不改邮箱时可以正常更新个人资料。
      */