<?php

namespace Tests\Feature;

use App\Models\BillModel;
use App\Models\NoticeModel;
use App\Models\PaymentModel;
use App\Models\PurchaseOrderModel;
use App\Models\StoreModel;
use App\Services\WechatPayService;
use EasyWeChat\Kernel\Support\AesGcm;
use Illuminate\Support\Facades\Http;
use Symfony\Component\HttpClient\MockHttpClient;
use Symfony\Component\HttpClient\Response\MockResponse;

/**
 * 小程序在线支付（微信官方渠道 APIv3，EasyWeChat）：下单 → 调起支付 → 后台通知/主动查询结账
 *
 * - Symfony MockHttpClient 模拟微信支付接口，不触网；商户私钥/证书为测试专用自签名（与生产无关）
 * - 通知报文以 APIv3 密钥 AES-256-GCM 加密构造，走真实解密链路
 * - 配置平台证书时走真实 Wechatpay-Signature 验签链路
 * - 结账幂等：重复通知/查询不重复累加门店总采购金额
 */
class MiniWechatPaymentTest extends ProcurementTestCase
{
    /** 测试专用商户 API 私钥（自签名，仅测试使用） */
    private const string TEST_PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----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\n+XXHpYd3dKJ/BJA/RfiP7sg=\n-----END PRIVATE KEY-----";

    /** 测试专用商户 API 证书（自签名 X509，请求签名序列号取自证书） */
    private const string TEST_CERTIFICATE = "-----BEGIN CERTIFICATE-----\nMIIC4TCCAcmgAwIBAgIUIDIEwVtecMJKfY0NCx1l8Fwv7LowDQYJKoZIhvcNAQEL\nBQAwADAeFw0yNjA5MDExMzM5NThaFw0zNjA4MjkxMzM5NThaMAAwggEiMA0GCSqG\nSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGoUMvCaiaf97XcUExEA3VP4FVwUCPQf/\nGPvm2cjHZACcPj65rjKNs5nJ0xaKELrJkUCZ3+N5YJJ4VGBBhh9GXekrzFckeqUn\n1sRS9FFbWfNeqAvz3qgps+ohnriPMkTRTw/SONTVRuNVesKz8FTYbT5Vl6jSHv71\nCMMcm6qrhvZ9av1nB03MrUN06v2OMhfXrZTBV5KI5zvIOwxetOz0MTAHcfRyrW8c\nejiJo3baRsRRHXsnDRB7p4H1KIPx+N7yTJKv/L2+tgXYmhIjKJRC5hDmrLrLOzie\nvqKlBTsBcG41UWzcLEDG96BcR6Le+dzlJIXXi2taoFXGFuDUVt/bAgMBAAGjUzBR\nMB0GA1UdDgQWBBQ2SD9beEd/0EU6ouWHHSW6Pdh8OjAfBgNVHSMEGDAWgBQ2SD9b\neEd/0EU6ouWHHSW6Pdh8OjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUA\nA4IBAQByZckpIfdi5BeWwX4FZK9D5+78hZpOpDi+a8rxyd22BYYbkft5WfWnTjWh\nuXZgwOBPoYwmQ9FtC8rIeXWCadcp/ohGCkVVm9Y2CtkutrTC+uxdl4LnDPRQjXPL\nuRubAzvv3leRrphd1dOmAku32TfE0bK6Xul6pCnQaEgIlFp8zp8UkCrYcm9SPNye\nRt/1vt5iBPB6UiZ9oQL1IDUdqJV2Hl9snzHi0AzuZHy+ZMZY6WEY2lBohN8wvfak\nqrejyeA3nY7+a+QRPCg9fAOhxJlIj/eJXJXUUgJTiwTDHN16JQYcqgX5/AdrqnNj\ndkhBOR8mPPmE9hCoXwcDt017y7YV\n-----END CERTIFICATE-----";

    /** 测试专用 APIv3 密钥（32 字节） */
    private const string TEST_SECRET_KEY = 'testSecr3tKey0123456789abcdef01';

    /** 测试专用平台证书序列号 */
    private const string TEST_PLATFORM_SERIAL = 'TESTPUBKEYID0001';

    protected function setUp(): void
    {
        parent::setUp();

        config([
            'services.wechat.mini.appid' => 'wx-mini-test',
            'services.wechat.mini.secret' => 'wx-secret-test',
            'services.pay.online_channel' => 'wechat',
            'services.wxpay.mch_id' => '1630000001',
            'services.wxpay.private_key' => self::TEST_PRIVATE_KEY,
            'services.wxpay.certificate' => self::TEST_CERTIFICATE,
            'services.wxpay.secret_key' => self::TEST_SECRET_KEY,
        ]);
    }

    /**
     * 以 MockHttpClient 替换微信支付接口应答，并注入容器（控制器经由容器取同一实例）
     *
     * @param callable|array<int, MockResponse> $responses 应答回调或应答队列
     */
    private function fakeWechatApi(callable|array $responses): WechatPayService
    {
        $service = app(WechatPayService::class);
        $app = $service->app();
        $app->setHttpClient(new MockHttpClient($responses, 'https://api.mch.weixin.qq.com'));
        $this->app->instance(WechatPayService::class, $service);

        return $service;
    }

    /** 模拟微信 code2session 成功 */
    private function fakeCode2session(string $openid = 'oOpenidTest001'): void
    {
        Http::fake([
            'https://api.weixin.qq.com/*' => Http::response(['openid' => $openid, 'session_key' => 'sk'], 200),
        ]);
    }

    /** 造一张指定金额的未支付账单（总额=商品金额） */
    private function makeBill(StoreModel $store, string $amount, array $attributes = []): BillModel
    {
        return BillModel::create(array_merge([
            'bill_no' => 'ZD' . random_int(100000000000, 999999999999),
            'purchase_id' => PurchaseOrderModel::factory()->create()->id,
            'store_id' => $store->id,
            'bill_date' => '2026-09-01',
            'product_amount' => $amount,
            'delivery_fee' => '0.00',
            'box_num' => 0,
            'tray_num' => 0,
            'box_price' => '0.00',
            'tray_price' => '0.00',
            'added_amount' => '0.00',
            'total_amount' => $amount,
            'status' => BillModel::STATUS_UNPAID,
        ], $attributes));
    }

    /** 造一笔待支付的微信渠道在线支付单并锁定账单 */
    private function makeWechatPayment(StoreModel $store, string $amount, BillModel ...$bills): PaymentModel
    {
        $payment = PaymentModel::create([
            'payment_no' => 'ZF' . now()->format('Ymd') . random_int(1000, 9999),
            'store_id' => $store->id,
            'amount' => $amount,
            'pay_type' => PaymentModel::TYPE_ONLINE,
            'pay_method' => PaymentModel::METHOD_WECHAT,
            'voucher_ids' => '',
            'status' => PaymentModel::STATUS_PENDING,
            'openid' => 'oOpenidTest001',
        ]);
        foreach ($bills as $bill) {
            $bill->update(['payment_id' => $payment->id]);
        }
        return $payment;
    }

    /**
     * 构造微信支付结果通知报文（交易报文以 APIv3 密钥 AES-256-GCM 加密装入 resource）
     *
     * @param array<string, mixed> $resourceOverrides 交易报文覆盖项
     * @return array<string, mixed> 通知报文
     */
    private function wechatNotifyBody(PaymentModel $payment, array $resourceOverrides = []): array
    {
        $resource = array_merge([
            'mchid' => '1630000001',
            'appid' => 'wx-mini-test',
            'out_trade_no' => $payment->payment_no,
            'transaction_id' => '4200002501202609010001',
            'trade_state' => 'SUCCESS',
            'trade_state_desc' => '支付成功',
            'success_time' => '2026-09-01T14:00:00+08:00',
            'amount' => [
                'total' => (int) bcmul((string) $payment->amount, '100'),
                'payer_total' => (int) bcmul((string) $payment->amount, '100'),
                'currency' => 'CNY',
            ],
        ], $resourceOverrides);

        return [
            'id' => 'EV-202609011400000001',
            'create_time' => '2026-09-01T14:00:05+08:00',
            'resource_type' => 'encrypt-resource',
            'event_type' => 'TRANSACTION.SUCCESS',
            'summary' => '支付成功',
            'resource' => [
                'original_type' => 'transaction',
                'algorithm' => 'AEAD_AES_256_GCM',
                'ciphertext' => AesGcm::encrypt((string) json_encode($resource), self::TEST_SECRET_KEY, 'nonce1234567', 'transaction'),
                'associated_data' => 'transaction',
                'nonce' => 'nonce1234567',
            ],
        ];
    }

    /** 以原始报文 + 自定义请求头发送微信通知（验签场景需要精确控制 body 参与签名） */
    private function postWechatNotify(array $body, array $headers = []): \Illuminate\Testing\TestResponse
    {
        $server = ['CONTENT_TYPE' => 'application/json'];
        foreach ($headers as $name => $value) {
            $server['HTTP_' . strtoupper(str_replace('-', '_', $name))] = $value;
        }
        return $this->call('POST', '/mini/payment/wechat-notify', [], [], [], $server, (string) json_encode($body));
    }

    /** 对通知报文按微信规则签名（平台证书验签场景）：timestamp\nnonce\nbody\n */
    private function signNotify(string $body, int $timestamp, string $nonce): string
    {
        openssl_sign("{$timestamp}\n{$nonce}\n{$body}\n", $signature, self::TEST_PRIVATE_KEY, 'sha256WithRSAEncryption');
        return base64_encode($signature);
    }

    /** 发起微信渠道在线支付：锁定账单、创建支付单、上送报文正确、返回标准 wx.requestPayment 调起参数 */
    public function test_create_wechat_payment_success(): void
    {
        $this->fakeCode2session();
        $captured = [];
        $this->fakeWechatApi(function (string $method, string $url, array $options) use (&$captured) {
            $captured = compact('method', 'url', 'options');
            return new MockResponse((string) json_encode(['prepay_id' => 'wx202609011200000001']), ['http_code' => 200]);
        });

        $store = StoreModel::factory()->create();
        $bill1 = $this->makeBill($store, '100.00');
        $bill2 = $this->makeBill($store, '50.50');

        $this->actingAsMiniStore($store);
        $response = $this->postJson('/mini/payment/online', [
            'bill_ids' => [$bill1->id, $bill2->id],
            'code' => 'wx-login-code',
        ])->assertJsonPath('success', true);

        $paymentNo = $response->json('data.payment_no');
        $this->assertSame('150.50', $response->json('data.amount'));

        // 调起参数为标准 wx.requestPayment 五要素，package 含 prepay_id
        $payParams = $response->json('data.pay_params');
        $this->assertSame('wx-mini-test', $payParams['appId'] ?? null);
        $this->assertNotEmpty($payParams['timeStamp']);
        $this->assertNotEmpty($payParams['nonceStr']);
        $this->assertSame('prepay_id=wx202609011200000001', $payParams['package']);
        $this->assertSame('RSA', $payParams['signType']);
        $this->assertNotEmpty($payParams['paySign']);

        $payment = PaymentModel::where('payment_no', $paymentNo)->first();
        $this->assertSame(PaymentModel::TYPE_ONLINE, $payment->pay_type);
        $this->assertSame(PaymentModel::METHOD_WECHAT, $payment->pay_method);
        $this->assertSame(PaymentModel::STATUS_PENDING, $payment->status);
        $this->assertSame('', (string) $payment->order_id, '微信渠道下单成功后才回传 transaction_id');

        // 账单锁定 + openid 绑定门店
        $this->assertSame($payment->id, $bill1->fresh()->payment_id);
        $this->assertSame($payment->id, $bill2->fresh()->payment_id);
        $this->assertSame('oOpenidTest001', $store->fresh()->openid);

        // 上送微信的报文：JSAPI 下单，金额转换为分，通知地址为微信回调路由
        //（MockHttpClient 回调收到的是预处理后的 options：json 已编码进 body，header 名小写且值为数组）
        $this->assertSame('POST', $captured['method']);
        $this->assertStringContainsString('/v3/pay/transactions/jsapi', $captured['url']);
        $json = (array) json_decode((string) ($captured['options']['body'] ?? ''), true);
        $this->assertSame('wx-mini-test', $json['appid']);
        $this->assertSame('1630000001', $json['mchid']);
        $this->assertSame($paymentNo, $json['out_trade_no']);
        $this->assertSame(15050, $json['amount']['total']);
        $this->assertSame('CNY', $json['amount']['currency']);
        $this->assertSame('oOpenidTest001', $json['payer']['openid']);
        $this->assertStringContainsString('/mini/payment/wechat-notify', $json['notify_url']);
        // 请求头携带商户签名（预处理后的 headers 为 "Name: value" 字符串列表）
        $headerLines = implode("\n", array_map('strval', (array) ($captured['options']['headers'] ?? [])));
        $this->assertStringContainsString('Authorization: WECHATPAY2-SHA256-RSA2048', $headerLines);
    }

    /** 微信下单失败（应答 4xx）：支付单作废并释放账单，可重新发起 */
    public function test_create_wechat_payment_gateway_failure_releases_bills(): void
    {
        $this->fakeCode2session();
        $this->fakeWechatApi([
            new MockResponse((string) json_encode(['code' => 'PARAM_ERROR', 'message' => 'appid 与 mchid 不匹配']), ['http_code' => 400]),
        ]);

        $store = StoreModel::factory()->create();
        $bill = $this->makeBill($store, '20.00');

        $this->actingAsMiniStore($store);
        $this->postJson('/mini/payment/online', ['bill_ids' => [$bill->id], 'code' => 'c'])
            ->assertJsonPath('success', false);

        $payment = PaymentModel::first();
        $this->assertSame(PaymentModel::STATUS_REJECTED, $payment->status);
        $this->assertSame(0, $bill->fresh()->payment_id, '账单释放可重新付款');
    }

    /** 微信支付成功通知：AES-GCM 解密 → 幂等结账（账单置已支付 + 累加门店总采购金额 + 通知门店） */
    public function test_wechat_notify_settles_payment(): void
    {
        $store = StoreModel::factory()->create();
        $bill1 = $this->makeBill($store, '100.00');
        $bill2 = $this->makeBill($store, '50.00');
        $payment = $this->makeWechatPayment($store, '150.00', $bill1, $bill2);

        $this->postWechatNotify($this->wechatNotifyBody($payment))
            ->assertJsonPath('code', 'SUCCESS');

        $payment->refresh();
        $this->assertSame(PaymentModel::STATUS_APPROVED, $payment->status);
        $this->assertSame('4200002501202609010001', $payment->trade_no);
        $this->assertSame('2026-09-01 14:00:00', (string) $payment->paid_at);

        foreach ([$bill1, $bill2] as $bill) {
            $bill->refresh();
            $this->assertSame(BillModel::STATUS_PAID, $bill->status);
            $this->assertStringContainsString('微信支付', (string) $bill->pay_remark);
            $this->assertStringContainsString($payment->payment_no, (string) $bill->pay_remark);
        }
        $this->assertSame('150.00', (string) $store->fresh()->total_purchase_amount);
        $this->assertTrue(
            NoticeModel::where('store_id', $store->id)->where('title', '账单支付成功')->exists()
        );

        // 重复通知幂等：仍应答成功，金额不重复累加
        $this->postWechatNotify($this->wechatNotifyBody($payment))
            ->assertJsonPath('code', 'SUCCESS');
        $this->assertSame('150.00', (string) $store->fresh()->total_purchase_amount);
        $this->assertSame(1, NoticeModel::where('store_id', $store->id)->count());
    }

    /** 通知解密失败 / 金额不一致 / 订单号不存在 / 非支付成功状态 / 商户号不一致：应答失败且不结账 */
    public function test_wechat_notify_rejects_invalid_messages(): void
    {
        $store = StoreModel::factory()->create();
        $bill = $this->makeBill($store, '100.00');
        $payment = $this->makeWechatPayment($store, '100.00', $bill);

        // 密文非法（密钥不匹配）→ 解密失败
        $badBody = $this->wechatNotifyBody($payment);
        $badBody['resource']['ciphertext'] = AesGcm::encrypt('{"out_trade_no":"x"}', str_repeat('x', 32), 'nonce1234567', 'transaction');
        $this->postWechatNotify($badBody)->assertJsonPath('code', 'FAIL');

        // 金额不一致（防篡改）
        $this->postWechatNotify($this->wechatNotifyBody($payment, ['amount' => ['total' => 9999, 'payer_total' => 9999]]))
            ->assertJsonPath('code', 'FAIL');

        // 订单号不存在
        $this->postWechatNotify($this->wechatNotifyBody($payment, ['out_trade_no' => 'ZF000000000000']))
            ->assertJsonPath('code', 'FAIL');

        // 非支付成功状态
        $this->postWechatNotify($this->wechatNotifyBody($payment, ['trade_state' => 'NOTPAY']))
            ->assertJsonPath('code', 'FAIL');

        // 商户号不一致（防串号）
        $this->postWechatNotify($this->wechatNotifyBody($payment, ['mchid' => '9999999999']))
            ->assertJsonPath('code', 'FAIL');

        // 均未结账
        $this->assertSame(PaymentModel::STATUS_PENDING, $payment->fresh()->status);
        $this->assertSame(BillModel::STATUS_UNPAID, $bill->fresh()->status);
        $this->assertSame('0.00', (string) $store->fresh()->total_purchase_amount);
    }

    /** 配置平台证书后走验签链路：签名合法才受理通知 */
    public function test_wechat_notify_with_platform_cert_validates_signature(): void
    {
        config([
            'services.wxpay.platform_cert' => self::TEST_CERTIFICATE,
            'services.wxpay.platform_serial' => self::TEST_PLATFORM_SERIAL,
        ]);

        $store = StoreModel::factory()->create();
        $bill = $this->makeBill($store, '66.00');
        $payment = $this->makeWechatPayment($store, '66.00', $bill);

        $body = (string) json_encode($this->wechatNotifyBody($payment));
        $timestamp = time();
        $nonce = 'notifyNonce001';

        // 无签名头 → 验签失败（微信请求必带签名头）
        $this->postWechatNotify($this->wechatNotifyBody($payment))->assertJsonPath('code', 'FAIL');

        // 签名头齐全且合法 → 受理并结账
        $this->postWechatNotify($this->wechatNotifyBody($payment), [
            'Wechatpay-Timestamp' => (string) $timestamp,
            'Wechatpay-Nonce' => $nonce,
            'Wechatpay-Serial' => self::TEST_PLATFORM_SERIAL,
            'Wechatpay-Signature' => $this->signNotify($body, $timestamp, $nonce),
        ])->assertJsonPath('code', 'SUCCESS');

        $this->assertSame(PaymentModel::STATUS_APPROVED, $payment->fresh()->status);
        $this->assertSame(BillModel::STATUS_PAID, $bill->fresh()->status);
    }

    /** 主动查询：微信已支付则同步结账；未支付保持待支付；已结账后不再请求微信 */
    public function test_wechat_query_syncs_status(): void
    {
        $store = StoreModel::factory()->create();
        $bill = $this->makeBill($store, '80.00');
        $payment = $this->makeWechatPayment($store, '80.00', $bill);

        $queryCount = 0;
        $this->fakeWechatApi(function (string $method, string $url) use (&$queryCount, $payment) {
            $queryCount++;
            $this->assertSame('GET', $method);
            $this->assertStringContainsString('/v3/pay/transactions/out-trade-no/' . $payment->payment_no, $url);
            $data = $queryCount === 1
                ? ['trade_state' => 'NOTPAY', 'out_trade_no' => $payment->payment_no]
                : [
                    'trade_state' => 'SUCCESS',
                    'out_trade_no' => $payment->payment_no,
                    'transaction_id' => '4200002501202609010002',
                    'success_time' => '2026-09-01T15:00:00+08:00',
                    'amount' => ['total' => 8000, 'payer_total' => 8000],
                ];
            return new MockResponse((string) json_encode($data), ['http_code' => 200]);
        });

        // 场景一：微信未支付
        $this->actingAsMiniStore($store);
        $this->getJson("/mini/payment/online/{$payment->payment_no}/query")
            ->assertJsonPath('success', true)
            ->assertJsonPath('data.status', PaymentModel::STATUS_PENDING);
        $this->assertSame(BillModel::STATUS_UNPAID, $bill->fresh()->status);

        // 场景二：微信已支付 → 查询即结账
        $this->getJson("/mini/payment/online/{$payment->payment_no}/query")
            ->assertJsonPath('success', true)
            ->assertJsonPath('data.status', PaymentModel::STATUS_APPROVED)
            ->assertJsonPath('data.trade_no', '4200002501202609010002');

        $this->assertSame(BillModel::STATUS_PAID, $bill->fresh()->status);
        $this->assertSame('80.00', (string) $store->fresh()->total_purchase_amount);

        // 已结账后重复查询不再请求微信（本地直接返回）
        $this->getJson("/mini/payment/online/{$payment->payment_no}/query")
            ->assertJsonPath('success', true)
            ->assertJsonPath('data.status', PaymentModel::STATUS_APPROVED);
        $this->assertSame(2, $queryCount, '已结账后不再请求微信');
        $this->assertSame('80.00', (string) $store->fresh()->total_purchase_amount);
    }

    /** 渠道开关为旺铺（默认）时不受影响：仍走旺铺下单（pay_method=旺铺支付，旺铺通道报错而非微信） */
    public function test_wangpu_channel_remains_default(): void
    {
        config(['services.pay.online_channel' => 'wangpu']);
        Http::fake([
            'https://api.weixin.qq.com/*' => Http::response(['openid' => 'oOpenidTest001'], 200),
        ]);

        $store = StoreModel::factory()->create();
        $bill = $this->makeBill($store, '10.00');

        $this->actingAsMiniStore($store);
        // 未配置旺铺密钥：旺铺通道在本地装信封即报错（证明分发到旺铺而非微信），支付单作废释放账单
        $this->postJson('/mini/payment/online', ['bill_ids' => [$bill->id], 'code' => 'c'])
            ->assertJsonPath('success', false);

        $payment = PaymentModel::first();
        $this->assertSame(PaymentModel::METHOD_WANGPU, $payment->pay_method);
        $this->assertSame(PaymentModel::STATUS_REJECTED, $payment->status);
        $this->assertSame(0, $bill->fresh()->payment_id);
    }
}