abf1f5afbb
- 新增 isPlausibleWechatOpenid：wx_openid_ 前缀/长度异常的种子 openid 一律视为无效，notifyBySubscribe 与内容安全 openid 均跳过，避免 40003 无效 openid 噪音 - 后台模拟推送返回 openidValid 诊断，并对演示账号给出「请改用真实微信登录用户测试」的明确提示；表单默认 UID 清空 - 115 套件/751 用例全绿；实测 2010 已走到微信侧（43101 用户未授权，需小程序内点击允许）
64 行
3.0 KiB
TypeScript
64 行
3.0 KiB
TypeScript
// 已读取AGENTS.md
|
|
import * as fs from 'fs';
|
|
import * as path from 'path';
|
|
|
|
/**
|
|
* 第一百批：资金巡检告警 + 后台操作审计 + 每日备份。
|
|
*/
|
|
describe('第一百批系统告警与后台审计', () => {
|
|
const root = path.resolve(__dirname, '../../');
|
|
const read = (rel: string) => fs.readFileSync(path.join(root, rel), 'utf-8');
|
|
|
|
const mysql = read('server/src/db/mysql.ts');
|
|
const repo = read('server/src/db/repository.ts');
|
|
const indexCode = read('server/src/index.ts');
|
|
const adminPage = read('admin/arco-design-pro-vite/src/views/safety/system-alerts/index.vue');
|
|
const safetyRoute = read('admin/arco-design-pro-vite/src/router/routes/modules/safety.ts');
|
|
const zhLocale = read('admin/arco-design-pro-vite/src/locale/zh-CN.ts');
|
|
const backupScript = read('server/scripts/backup-db.sh');
|
|
|
|
it('告警与审计表必须落库，并补充巡检所需索引', () => {
|
|
expect(mysql).toContain('CREATE TABLE IF NOT EXISTS system_alerts');
|
|
expect(mysql).toContain('CREATE TABLE IF NOT EXISTS admin_audit_logs');
|
|
expect(mysql).toContain("['withdrawals', 'idx_wd_status_created'");
|
|
expect(mysql).toContain("['payment_intents', 'idx_pi_status_created'");
|
|
});
|
|
|
|
it('巡检必须覆盖提现卡单、支付与订单不一致、待接单超时', () => {
|
|
expect(indexCode).toContain('runSystemAlertScan');
|
|
expect(indexCode).toContain('提现打款卡在「处理中」');
|
|
expect(indexCode).toContain('支付已成功但订单仍为待付款');
|
|
expect(indexCode).toContain('待接单订单超时未退款');
|
|
expect(indexCode).toContain('startSystemAlertScheduler');
|
|
});
|
|
|
|
it('敏感后台操作必须写审计日志', () => {
|
|
expect(repo).toContain('async createAdminAuditLog');
|
|
expect(indexCode).toContain('function logAdminAudit');
|
|
const actions = ['余额充值', '封禁用户', '删除用户', '通过大神入驻', '提现打款'];
|
|
for (const a of actions) expect(indexCode).toContain(a);
|
|
});
|
|
|
|
it('后台必须提供告警/审计查询与处理入口', () => {
|
|
expect(indexCode).toContain("app.get('/api/admin/system/alerts'");
|
|
expect(indexCode).toContain("app.get('/api/admin/audit-logs'");
|
|
expect(safetyRoute).toContain("path: 'system-alerts'");
|
|
expect(zhLocale).toContain('menu.safety.systemAlerts');
|
|
expect(adminPage).toContain('/api/admin/system/alerts');
|
|
expect(adminPage).toContain('/api/admin/audit-logs');
|
|
});
|
|
|
|
it('每日备份脚本必须校验压缩包并保留 14 天', () => {
|
|
expect(backupScript).toContain('mysqldump --single-transaction --quick --no-tablespaces');
|
|
expect(backupScript).toContain('gzip -t');
|
|
expect(backupScript).toContain("-mtime +14 -delete");
|
|
});
|
|
|
|
it('订阅消息必须识别演示账号的假 openid，避免 40003', () => {
|
|
expect(indexCode).toContain('function isPlausibleWechatOpenid');
|
|
expect(indexCode).toContain("if (/^wx_openid_/i.test(value)) return false;");
|
|
expect(indexCode).toContain('openidValid');
|
|
expect(indexCode).toContain('请改用真实微信登录用户测试');
|
|
});
|
|
});
|