using Domain.Entities.Payments.Toss; using Domain.Entities.Payments.ValueObject; using Domain.Entities.Wallets; using Domain.Entities.Wallets.ValueObject; using Microsoft.EntityFrameworkCore; using WebhookCommand = Application.Features.Api.Payment.Toss.Webhook.Command; using WebhookHandler = Application.Features.Api.Payment.Toss.Webhook.Handler; namespace Application.Tests; /// /// 토스 일반결제 웹훅 — 서명 헤더가 없으므로 본문을 신뢰하지 않고 paymentKey 재조회 결과만 반영하는 계약 검증. /// [TestClass] public sealed class TossWebhookHandlerTests { [TestMethod] public async Task DepositCallback_Done_CreditsOnce_AndIsIdempotent() { // 가상계좌 입금 완료: DEPOSIT_CALLBACK(본문에 paymentKey 없음) → orderId 로 TossConfirm 역참조 → // 조회 API 재조회 DONE → 멱등 적립. 동일 웹훅 재수신 시 이중적립 금지. var paymentKey = $"PK-{Guid.NewGuid():N}"; int memberID; string orderID; int orderAmount; using (var setup = TestDb.Create()) { memberID = await TestDb.CreateMemberAsync(setup); await setup.Wallet.AddAsync(Wallet.Create(memberID)); var order = await TestDb.CreateOrderAsync(setup, memberID, 10000); order.MarkWaitingDeposit("9-4444-0000-1234", "20", "개미투자", DateTime.UtcNow.AddDays(7)); await setup.TossConfirm.AddAsync(TossConfirm.CreateRequest(memberID, order.ID, paymentKey, order.OrderID, order.Amount)); await setup.SaveChangesAsync(default); orderID = order.OrderID; orderAmount = order.Amount; } var fake = new FakeTossPaymentService { GetPaymentResult = FakeTossPaymentService.Done(paymentKey, orderID, orderAmount) }; using (var db = TestDb.Create()) { var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance); var result = await handler.Handle(new WebhookCommand("DEPOSIT_CALLBACK", null, orderID), default); Assert.IsTrue(result.IsSuccess, "입금 완료 웹훅은 성공 처리되어야 한다"); } using (var mid = TestDb.Create()) { var paidOrder = await mid.PaymentOrder.SingleAsync(o => o.OrderID == orderID); Assert.AreEqual(PaymentStatus.Paid, paidOrder.Status, "재조회 DONE 확인 후 주문이 Paid 로 전이되어야 한다"); var wallet = await mid.Wallet.Include(w => w.Balances).Include(w => w.Transactions).AsSplitQuery().SingleAsync(w => w.MemberID == memberID); Assert.AreEqual(10000m, wallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "입금 확인 후 캐시가 적립되어야 한다"); } // 동일 웹훅 재수신 (토스 재시도) — 멱등, 이중적립 금지 using (var db2 = TestDb.Create()) { var handler2 = new WebhookHandler(db2, fake, FakeAppDbContextFactory.Instance); var replay = await handler2.Handle(new WebhookCommand("DEPOSIT_CALLBACK", null, orderID), default); Assert.IsTrue(replay.IsSuccess, "재수신 웹훅도 성공(멱등) 응답이어야 한다"); } using var verify = TestDb.Create(); var savedWallet = await verify.Wallet.Include(w => w.Balances).Include(w => w.Transactions).AsSplitQuery().SingleAsync(w => w.MemberID == memberID); Assert.AreEqual(10000m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "웹훅 재수신 시 이중적립 금지"); Assert.AreEqual(1, savedWallet.Transactions.Count(t => t.TxType == WalletTransactionType.Charge && t.RefID == orderID), "충전 원장은 정확히 1건이어야 한다"); } [TestMethod] public async Task UnknownStatus_NoChange_LogsOnly() { // 재조회 결과가 판별 불가 상태(IN_PROGRESS 등)면 아무것도 반영하지 않고 로그만 남긴다. var paymentKey = $"PK-{Guid.NewGuid():N}"; using var db = TestDb.Create(); var memberID = await TestDb.CreateMemberAsync(db); await db.Wallet.AddAsync(Wallet.Create(memberID)); var order = await TestDb.CreateOrderAsync(db, memberID, 10000); var fake = new FakeTossPaymentService { GetPaymentResult = FakeTossPaymentService.Done(paymentKey, order.OrderID, order.Amount) with { Status = "IN_PROGRESS" } }; var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance); var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default); Assert.IsTrue(result.IsSuccess, "판별 불가 상태는 정상 응답으로 종결한다 (재시도 무의미)"); using var verify = TestDb.Create(); var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID); Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "판별 불가 상태는 주문을 변경하지 않는다"); var savedWallet = await verify.Wallet.Include(w => w.Balances).AsSplitQuery().SingleAsync(w => w.MemberID == memberID); Assert.AreEqual(0m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "판별 불가 상태에서는 적립하지 않는다"); var log = await verify.TossLog.Where(c => c.OrderID == order.OrderID && c.Code == "IGNORED").ToListAsync(); Assert.AreEqual(1, log.Count, "IGNORED 웹훅 로그가 남아야 한다"); } [TestMethod] public async Task Done_AmountMismatch_DoesNotCredit_WritesReconcileLog() { // 재조회 DONE 이라도 금액이 서버 저장 주문 금액과 다르면 적립하지 않고 수동 대사 대상으로 남긴다. var paymentKey = $"PK-{Guid.NewGuid():N}"; using var db = TestDb.Create(); var memberID = await TestDb.CreateMemberAsync(db); await db.Wallet.AddAsync(Wallet.Create(memberID)); var order = await TestDb.CreateOrderAsync(db, memberID, 10000); var fake = new FakeTossPaymentService { GetPaymentResult = FakeTossPaymentService.Done(paymentKey, order.OrderID, order.Amount + 1000) }; var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance); var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default); Assert.IsTrue(result.IsSuccess); using var verify = TestDb.Create(); var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID); Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "금액 불일치는 자동 반영하지 않는다"); var savedWallet = await verify.Wallet.Include(w => w.Balances).AsSplitQuery().SingleAsync(w => w.MemberID == memberID); Assert.AreEqual(0m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "금액 불일치 시 적립 금지"); var reconcileLog = await verify.PaymentReconcileLog.Where(c => c.PaymentOrderID == order.ID).ToListAsync(); Assert.AreEqual(1, reconcileLog.Count, "수동 대사용 로그가 남아야 한다"); } [TestMethod] public async Task RequeryFails_ReturnsFailure_ForTossRetry() { // 재조회 통신 실패는 실패 응답(5xx) — 토스 재시도로 재처리를 유도한다. var paymentKey = $"PK-{Guid.NewGuid():N}"; using var db = TestDb.Create(); var memberID = await TestDb.CreateMemberAsync(db); var order = await TestDb.CreateOrderAsync(db, memberID, 10000); var fake = new FakeTossPaymentService { GetPaymentException = new HttpRequestException("timeout") }; var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance); var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default); Assert.IsFalse(result.IsSuccess, "재조회 실패는 실패 응답으로 토스 재시도를 유도해야 한다"); using var verify = TestDb.Create(); var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID); Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "재조회 실패 시 주문은 변경되지 않는다"); } }