统一用户信息付费查看

tests/Feature/UserControllerTest.php

@@ -7,9 +7,11 @@
 
 namespace Tests\Feature;
 
+use App\Enums\CurrencySource;
 use App\Models\Room;
 use App\Models\Sysparam;
 use App\Models\User;
+use App\Models\UserCurrencyLog;
 use App\Services\ChatUserPresenceService;
 use Carbon\Carbon;
 use Illuminate\Foundation\Testing\RefreshDatabase;
@@ -63,6 +65,235 @@ class UserControllerTest extends TestCase
             ->assertJsonPath('data.user_level', 10);
     }
 
+    /**
+     * 测试普通用户查看别人名片时银行存款默认显示星号。
+     */
+    public function test_normal_user_sees_masked_bank_balance_on_other_profile(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 10,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'targetuser',
+            'user_level' => 1,
+            'exp_num' => 123,
+            'jjb' => 456,
+            'bank_jjb' => 6000,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.exp_num', 123)
+            ->assertJsonPath('data.jjb', 456)
+            ->assertJsonPath('data.meili', 789)
+            ->assertJsonPath('data.bank_jjb', '******')
+            ->assertJsonPath('data.bank_jjb_masked', true)
+            ->assertJsonPath('data.bank_jjb_can_reveal', true)
+            ->assertJsonPath('data.bank_jjb_reveal_cost', 1000)
+            ->assertJsonPath('data.bank_reveal_user_id', $target->id);
+    }
+
+    /**
+     * 测试低等级用户查看高等级名片时资产卡片仍展示但具体数值被星号遮罩。
+     */
+    public function test_low_level_user_sees_masked_asset_numbers_on_higher_profile(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'highlevel',
+            'user_level' => 10,
+            'exp_num' => 123,
+            'jjb' => 456,
+            'bank_jjb' => 6000,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.exp_num', '******')
+            ->assertJsonPath('data.jjb', '******')
+            ->assertJsonPath('data.bank_jjb', '******')
+            ->assertJsonPath('data.meili', '******')
+            ->assertJsonPath('data.bank_jjb_masked', true)
+            ->assertJsonPath('data.bank_jjb_can_reveal', true)
+            ->assertJsonPath('data.asset_numbers_masked', true)
+            ->assertJsonPath('data.asset_numbers_can_reveal', true)
+            ->assertJsonPath('data.asset_numbers_reveal_cost', 1000)
+            ->assertJsonPath('data.asset_reveal_user_id', $target->id);
+    }
+
+    /**
+     * 测试低等级用户付费查看高等级用户隐藏经验时扣费并返回真实数值。
+     */
+    public function test_low_level_user_can_pay_to_reveal_hidden_exp_number(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 1500,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'highlevel',
+            'user_level' => 10,
+            'exp_num' => 12345,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'exp_num',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'exp_num')
+            ->assertJsonPath('value', 12345)
+            ->assertJsonPath('charged', true)
+            ->assertJsonPath('jjb', 500);
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 500,
+        ]);
+        $this->assertDatabaseHas('user_currency_logs', [
+            'user_id' => $viewer->id,
+            'currency' => 'gold',
+            'amount' => -1000,
+            'balance_after' => 500,
+            'source' => CurrencySource::USER_INFO_REVEAL->value,
+            'remark' => '查看 highlevel 的经验',
+        ]);
+    }
+
+    /**
+     * 测试低等级用户付费查看高等级用户隐藏金币时返回目标金币且同步扣费后余额。
+     */
+    public function test_low_level_user_can_pay_to_reveal_hidden_gold_number(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 2000,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'goldtarget',
+            'user_level' => 10,
+            'jjb' => 4567,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'jjb',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('asset', 'jjb')
+            ->assertJsonPath('value', 4567)
+            ->assertJsonPath('charged', true)
+            ->assertJsonPath('jjb', 1000);
+    }
+
+    /**
+     * 测试金币不足时不能查看隐藏资产，也不会泄露真实数值。
+     */
+    public function test_reveal_hidden_asset_fails_without_enough_gold(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 1,
+            'jjb' => 999,
+        ]);
+        $target = User::factory()->create([
+            'user_level' => 10,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'meili',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'error')
+            ->assertJsonMissingPath('value');
+
+        $this->assertDatabaseHas('users', [
+            'id' => $viewer->id,
+            'jjb' => 999,
+        ]);
+        $this->assertSame(0, UserCurrencyLog::query()
+            ->where('user_id', $viewer->id)
+            ->where('source', CurrencySource::USER_INFO_REVEAL->value)
+            ->count());
+    }
+
+    /**
+     * 测试等级足够时通过查看接口读取资产不扣费。
+     */
+    public function test_reveal_asset_is_free_when_level_allows_direct_view(): void
+    {
+        $viewer = User::factory()->create([
+            'user_level' => 10,
+            'jjb' => 50,
+        ]);
+        $target = User::factory()->create([
+            'user_level' => 1,
+            'meili' => 789,
+        ]);
+
+        $response = $this->actingAs($viewer)->postJson(route('user.reveal-info'), [
+            'user_id' => $target->id,
+            'asset' => 'meili',
+        ]);
+
+        $response->assertOk()
+            ->assertJsonPath('status', 'success')
+            ->assertJsonPath('value', 789)
+            ->assertJsonPath('charged', false)
+            ->assertJsonPath('jjb', 50);
+    }
+
+    /**
+     * 测试查看自己名片时银行存款真实可见且不需要付费查看。
+     */
+    public function test_self_profile_shows_real_bank_balance(): void
+    {
+        $user = User::factory()->create([
+            'username' => 'selfuser',
+            'bank_jjb' => 7000,
+        ]);
+
+        $response = $this->actingAs($user)->getJson("/user/{$user->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.bank_jjb', 7000)
+            ->assertJsonPath('data.bank_jjb_masked', false)
+            ->assertJsonPath('data.bank_jjb_can_reveal', false);
+    }
+
+    /**
+     * 测试 superlevel 用户查看别人名片时银行存款真实可见。
+     */
+    public function test_superlevel_profile_shows_other_bank_balance(): void
+    {
+        $admin = User::factory()->create([
+            'user_level' => 100,
+        ]);
+        $target = User::factory()->create([
+            'username' => 'richuser',
+            'bank_jjb' => 8000,
+        ]);
+
+        $response = $this->actingAs($admin)->getJson("/user/{$target->username}");
+
+        $response->assertOk()
+            ->assertJsonPath('data.bank_jjb', 8000)
+            ->assertJsonPath('data.bank_jjb_masked', false)
+            ->assertJsonPath('data.bank_jjb_can_reveal', false);
+    }
+
     /**
      * 测试不改邮箱时可以正常更新个人资料。
      */