129 lines
11 KiB
PHP
129 lines
11 KiB
PHP
<?php
|
|
namespace Tests\Feature;
|
|
use App\Modules\Services\ServiceInvoicing;
|
|
use App\Shared\Context\CompanyContext;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Str;
|
|
use Tests\Support\InvoiceFixture;
|
|
use Tests\Support\IdentityFixture;
|
|
use Tests\TestCase;
|
|
|
|
final class ServiceInvoiceTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
private array $f; private string $token; private string $key;
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp(); $this->f=InvoiceFixture::create(); $this->key=(string)Str::uuid(); $this->login();
|
|
}
|
|
private function login(string $who='manager'): void
|
|
{
|
|
$this->postJson('/api/login',['email'=>$this->f[$who]->email,'password'=>$this->f['password']])->assertOk();
|
|
$this->token=$this->postJson('/api/context',['tenant_id'=>$this->f['tenant'],'company_id'=>$this->f['company'],'unit_id'=>$this->f['unit']])->assertOk()->json('context.token');
|
|
}
|
|
private function review()
|
|
{
|
|
return $this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/drafts/'.$this->f['draft'].'/review',['series_id'=>$this->f['series'],'rule_id'=>$this->f['rule']]);
|
|
}
|
|
private function issue(string $hash,?string $key=null,array $changes=[])
|
|
{
|
|
return $this->withHeaders(['X-SGF-Context'=>$this->token,'Idempotency-Key'=>$key ?? $this->key])->postJson('/api/service-invoices/drafts/'.$this->f['draft'].'/issue',array_replace(['series_id'=>$this->f['series'],'rule_id'=>$this->f['rule'],'review_hash'=>$hash],$changes));
|
|
}
|
|
public function test_atomic_issuance_pdf_snapshot_replay_and_correction_request(): void
|
|
{
|
|
$review=$this->review()->assertOk()->assertJsonPath('ready',true); $this->assertDatabaseCount('si_invoices',0);
|
|
$hash=$review->json('review_hash'); $id=$this->issue($hash)->assertOk()->assertJsonPath('number',1)->json('id');
|
|
$this->issue($hash)->assertOk()->assertJsonPath('id',$id)->assertJsonPath('replayed',true);
|
|
$this->issue(str_repeat('a',64))->assertStatus(409);
|
|
$this->issue($hash,(string)Str::uuid())->assertStatus(409);
|
|
$show=$this->getJson('/api/service-invoices/'.$id)->assertOk()->assertJsonPath('snapshot.notice',ServiceInvoicing::NOTICE)->assertJsonPath('snapshot.calculation.total_document_proposed','9106.00')->assertJsonPath('snapshot.assessment_period',substr($this->f['today'],0,7));
|
|
$this->assertSame($show->json('snapshot.document_lines'),$show->json('document_lines'));
|
|
$pdf=$this->get('/api/service-invoices/'.$id.'/pdf')->assertOk()->assertHeader('Content-Type','application/pdf')->getContent();
|
|
$this->assertStringStartsWith('%PDF-1.4',$pdf); $this->assertSame($show->json('pdf_sha256'),hash('sha256',$pdf));
|
|
$before=DB::table('si_invoices')->get()->toJson();
|
|
$this->withHeaders(['X-SGF-Context'=>$this->token,'Idempotency-Key'=>(string)Str::uuid()])->patchJson('/api/a/clients/'.$this->f['client'],['version'=>1,'name'=>'Changed after issue'])->assertOk();
|
|
$this->assertSame($pdf,$this->get('/api/service-invoices/'.$id.'/pdf')->assertOk()->getContent());
|
|
$this->getJson('/api/service-invoices/'.$id)->assertOk()->assertJsonPath('snapshot.document.client.name','Cliente sintético Horizonte');
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/'.$id.'/corrections',['reason'=>'Pedido sintético sem efeito monetário'])->assertOk()->assertJsonPath('state','pending_no_fiscal_effect');
|
|
$this->assertSame($before,DB::table('si_invoices')->get()->toJson());
|
|
$this->assertDatabaseCount('si_events',1); $this->assertDatabaseCount('si_outbox',1); $this->assertDatabaseCount('si_commands',1);
|
|
}
|
|
public function test_real_environment_cannot_issue_or_configure_even_with_grants(): void
|
|
{
|
|
$hash=$this->review()->assertOk()->json('review_hash');
|
|
$this->app->instance('env','local');
|
|
$this->withHeader('X-CSRF-TOKEN',session()->token());
|
|
$this->issue($hash)->assertForbidden(); $this->review()->assertForbidden();
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/proposals',[])->assertForbidden();
|
|
$this->getJson('/api/service-invoices')->assertOk()->assertJsonPath('real_blocked',true)->assertJsonPath('invoices',[]);
|
|
$this->assertDatabaseCount('si_invoices',0);
|
|
try { ServiceInvoicing::guard(); $this->fail('CLI bypass allowed'); } catch(\Symfony\Component\HttpKernel\Exception\HttpException $e) { $this->assertSame(403,$e->getStatusCode()); }
|
|
}
|
|
public function test_reader_separation_revocation_and_cross_company_access(): void
|
|
{
|
|
$hash=$this->review()->assertOk()->json('review_hash'); $id=$this->issue($hash)->assertOk()->json('id');
|
|
$this->login('reader'); $this->getJson('/api/service-invoices/'.$id)->assertOk(); $this->issue($hash)->assertForbidden();
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/'.$id.'/corrections',['reason'=>'No right'])->assertForbidden();
|
|
$this->login(); DB::table('permission_grants')->where('user_id',$this->f['manager']->id)->where('permission','service_invoices.issue')->delete(); $this->issue($hash)->assertForbidden();
|
|
$this->postJson('/api/context',['tenant_id'=>$this->f['tenant'],'company_id'=>$this->f['sibling'],'unit_id'=>$this->f['siblingUnit']])->assertOk();
|
|
$this->getJson('/api/service-invoices/'.$id)->assertForbidden();
|
|
}
|
|
public function test_stale_revision_date_changes_missing_data_and_pending_rule_refuse(): void
|
|
{
|
|
$hash=$this->review()->assertOk()->json('review_hash');
|
|
$this->issue($hash,null,['number'=>999])->assertUnprocessable();
|
|
$this->travel(1)->days(); $this->issue($hash)->assertStatus(409); $this->review()->assertOk()->assertJsonPath('ready',false); $this->travelBack();
|
|
$this->withHeader('X-SGF-Context',$this->token)->patchJson('/api/document-preparation/client/'.$this->f['client'],['version'=>1,'nuit'=>null])->assertOk();
|
|
$this->issue($hash)->assertStatus(409); $this->review()->assertOk()->assertJsonPath('ready',false);
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/drafts/'.$this->f['draft'].'/review',['series_id'=>$this->f['series'],'rule_id'=>$this->f['series']])->assertOk()->assertJsonPath('ready',false);
|
|
$this->assertDatabaseCount('si_invoices',0); $this->assertDatabaseCount('si_counters',0);
|
|
}
|
|
public function test_failure_during_outbox_rolls_back_number_invoice_and_audit(): void
|
|
{
|
|
$hash=$this->review()->assertOk()->json('review_hash');
|
|
DB::unprepared("CREATE OR REPLACE FUNCTION si_test_fail() RETURNS trigger LANGUAGE plpgsql AS $$ BEGIN RAISE EXCEPTION 'SYNTHETIC_FAILURE'; END; $$; CREATE TRIGGER si_failure BEFORE INSERT ON si_outbox FOR EACH ROW EXECUTE FUNCTION si_test_fail()");
|
|
$this->issue($hash)->assertStatus(500);
|
|
$this->assertDatabaseCount('si_invoices',0); $this->assertDatabaseCount('si_counters',0); $this->assertDatabaseCount('si_events',0); $this->assertDatabaseCount('si_commands',0);
|
|
$this->assertSame(0,DB::table('identity_audit')->where('action','service_invoice.test_issued')->count());
|
|
DB::unprepared('DROP TRIGGER si_failure ON si_outbox');
|
|
$this->issue($hash)->assertOk()->assertJsonPath('number',1);
|
|
}
|
|
public function test_database_immutability_and_b1_snapshot_are_preserved(): void
|
|
{
|
|
$id=$this->issue($this->review()->assertOk()->json('review_hash'))->assertOk()->json('id');
|
|
foreach(['si_invoices','si_proposals','si_decisions','si_events','si_outbox','si_commands'] as $table) {
|
|
try { DB::transaction(fn()=>DB::table($table)->delete()); $this->fail('History deleted'); }
|
|
catch(\Illuminate\Database\QueryException $e) { $this->assertStringContainsString('SGF_',$e->getMessage()); }
|
|
}
|
|
try { DB::transaction(fn()=>DB::table('si_invoices')->where('id',$id)->update(['unit_id'=>$this->f['hidden']])); $this->fail('Mass transfer allowed'); }
|
|
catch(\Illuminate\Database\QueryException $e) { $this->assertStringContainsString('SGF_',$e->getMessage()); }
|
|
$this->assertDatabaseCount('b_internal_confirmations',0);
|
|
}
|
|
public function test_b1_confirmed_draft_is_not_converted_or_changed(): void
|
|
{
|
|
$this->withHeaders(['X-SGF-Context'=>$this->token,'Idempotency-Key'=>(string)Str::uuid()])->postJson('/api/b1/billing-drafts/'.$this->f['draft'].'/confirm-internal',['version'=>1])->assertOk();
|
|
$before=DB::table('b_internal_confirmations')->get()->toJson();
|
|
$this->review()->assertStatus(409); $this->assertDatabaseCount('si_invoices',0);
|
|
$this->assertSame($before,DB::table('b_internal_confirmations')->get()->toJson());
|
|
}
|
|
public function test_closed_series_new_approval_changes_revision_and_has_no_counter_reset(): void
|
|
{
|
|
$old=$this->review()->assertOk()->json('review_hash');
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/proposals',['kind'=>'series','identifier'=>'TEST-SERIE-ISOLADA','previous_id'=>$this->f['series'],'data'=>['code'=>'TEST-SERIE-ISOLADA','first_number'=>1,'state'=>'closed','valid_from'=>$this->f['start'],'evidence'=>'Encerramento sintético aprovado.']])->assertOk();
|
|
$new=(int)DB::table('si_proposals')->max('id');
|
|
$this->login('reader'); $this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/proposals/'.$new.'/decision',['version'=>2,'decision'=>'approved','reason'=>'Encerrar sem apagar contador.'])->assertOk();
|
|
$this->login(); $this->issue($old)->assertStatus(409); $this->review()->assertOk()->assertJsonPath('ready',false);
|
|
$this->withHeader('X-SGF-Context',$this->token)->postJson('/api/service-invoices/proposals',['kind'=>'series','identifier'=>'TEST-SERIE-ISOLADA','previous_id'=>$new,'data'=>['code'=>'TEST-SERIE-ISOLADA','first_number'=>10,'state'=>'open','valid_from'=>$this->f['start'],'evidence'=>'Illegal reset attempt.']])->assertUnprocessable();
|
|
}
|
|
public function test_pdf_encoding_and_long_text_are_not_silently_lost(): void
|
|
{
|
|
$this->withHeaders(['X-SGF-Context'=>$this->token,'Idempotency-Key'=>(string)Str::uuid()])->patchJson('/api/a/clients/'.$this->f['client'],['version'=>1,'name'=>'测试'])->assertOk();
|
|
$this->review()->assertOk()->assertJsonPath('ready',false);
|
|
$this->assertDatabaseCount('si_invoices',0);
|
|
$pdf=new \App\Modules\Services\InvoicePdf();
|
|
// Encoding refusal must be explicit, rather than generating replacement glyphs.
|
|
$this->assertFalse(\App\Modules\Services\InvoicePdf::supports([['text','测试']]));
|
|
}
|
|
}
|