ANTOOZA-BACKEND/Tests/Application.Tests/TossWebhookHandlerTests.cs

using Domain.Entities.Payments.Toss;
using Domain.Entities.Payments.ValueObject;
using Domain.Entities.Wallets;
using Domain.Entities.Wallets.ValueObject;
using Microsoft.EntityFrameworkCore;
using WebhookCommand = Application.Features.Api.Payment.Toss.Webhook.Command;
using WebhookHandler = Application.Features.Api.Payment.Toss.Webhook.Handler;

namespace Application.Tests;

/// <summary>
/// 토스 일반결제 웹훅 — 서명 헤더가 없으므로 본문을 신뢰하지 않고 paymentKey 재조회 결과만 반영하는 계약 검증.
/// </summary>
[TestClass]
public sealed class TossWebhookHandlerTests
{
    [TestMethod]
    public async Task DepositCallback_Done_CreditsOnce_AndIsIdempotent()
    {
        // 가상계좌 입금 완료: DEPOSIT_CALLBACK(본문에 paymentKey 없음) → orderId 로 TossConfirm 역참조 →
        // 조회 API 재조회 DONE → 멱등 적립. 동일 웹훅 재수신 시 이중적립 금지.
        var paymentKey = $"PK-{Guid.NewGuid():N}";
        int memberID;
        string orderID;
        int orderAmount;
        using (var setup = TestDb.Create())
        {
            memberID = await TestDb.CreateMemberAsync(setup);
            await setup.Wallet.AddAsync(Wallet.Create(memberID));
            var order = await TestDb.CreateOrderAsync(setup, memberID, 10000);
            order.MarkWaitingDeposit("9-4444-0000-1234", "20", "개미투자", DateTime.UtcNow.AddDays(7));
            await setup.TossConfirm.AddAsync(TossConfirm.CreateRequest(memberID, order.ID, paymentKey, order.OrderID, order.Amount));
            await setup.SaveChangesAsync(default);
            orderID = order.OrderID;
            orderAmount = order.Amount;
        }

        var fake = new FakeTossPaymentService { GetPaymentResult = FakeTossPaymentService.Done(paymentKey, orderID, orderAmount) };

        using (var db = TestDb.Create())
        {
            var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance);
            var result = await handler.Handle(new WebhookCommand("DEPOSIT_CALLBACK", null, orderID), default);
            Assert.IsTrue(result.IsSuccess, "입금 완료 웹훅은 성공 처리되어야 한다");
        }

        using (var mid = TestDb.Create())
        {
            var paidOrder = await mid.PaymentOrder.SingleAsync(o => o.OrderID == orderID);
            Assert.AreEqual(PaymentStatus.Paid, paidOrder.Status, "재조회 DONE 확인 후 주문이 Paid 로 전이되어야 한다");

            var wallet = await mid.Wallet.Include(w => w.Balances).Include(w => w.Transactions).AsSplitQuery().SingleAsync(w => w.MemberID == memberID);
            Assert.AreEqual(10000m, wallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "입금 확인 후 캐시가 적립되어야 한다");
        }

        // 동일 웹훅 재수신 (토스 재시도) — 멱등, 이중적립 금지
        using (var db2 = TestDb.Create())
        {
            var handler2 = new WebhookHandler(db2, fake, FakeAppDbContextFactory.Instance);
            var replay = await handler2.Handle(new WebhookCommand("DEPOSIT_CALLBACK", null, orderID), default);
            Assert.IsTrue(replay.IsSuccess, "재수신 웹훅도 성공(멱등) 응답이어야 한다");
        }

        using var verify = TestDb.Create();
        var savedWallet = await verify.Wallet.Include(w => w.Balances).Include(w => w.Transactions).AsSplitQuery().SingleAsync(w => w.MemberID == memberID);
        Assert.AreEqual(10000m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "웹훅 재수신 시 이중적립 금지");
        Assert.AreEqual(1, savedWallet.Transactions.Count(t => t.TxType == WalletTransactionType.Charge && t.RefID == orderID), "충전 원장은 정확히 1건이어야 한다");
    }

    [TestMethod]
    public async Task UnknownStatus_NoChange_LogsOnly()
    {
        // 재조회 결과가 판별 불가 상태(IN_PROGRESS 등)면 아무것도 반영하지 않고 로그만 남긴다.
        var paymentKey = $"PK-{Guid.NewGuid():N}";
        using var db = TestDb.Create();
        var memberID = await TestDb.CreateMemberAsync(db);
        await db.Wallet.AddAsync(Wallet.Create(memberID));
        var order = await TestDb.CreateOrderAsync(db, memberID, 10000);

        var fake = new FakeTossPaymentService
        {
            GetPaymentResult = FakeTossPaymentService.Done(paymentKey, order.OrderID, order.Amount) with { Status = "IN_PROGRESS" }
        };
        var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance);

        var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default);

        Assert.IsTrue(result.IsSuccess, "판별 불가 상태는 정상 응답으로 종결한다 (재시도 무의미)");

        using var verify = TestDb.Create();
        var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID);
        Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "판별 불가 상태는 주문을 변경하지 않는다");

        var savedWallet = await verify.Wallet.Include(w => w.Balances).AsSplitQuery().SingleAsync(w => w.MemberID == memberID);
        Assert.AreEqual(0m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "판별 불가 상태에서는 적립하지 않는다");

        var log = await verify.TossLog.Where(c => c.OrderID == order.OrderID && c.Code == "IGNORED").ToListAsync();
        Assert.AreEqual(1, log.Count, "IGNORED 웹훅 로그가 남아야 한다");
    }

    [TestMethod]
    public async Task Done_AmountMismatch_DoesNotCredit_WritesReconcileLog()
    {
        // 재조회 DONE 이라도 금액이 서버 저장 주문 금액과 다르면 적립하지 않고 수동 대사 대상으로 남긴다.
        var paymentKey = $"PK-{Guid.NewGuid():N}";
        using var db = TestDb.Create();
        var memberID = await TestDb.CreateMemberAsync(db);
        await db.Wallet.AddAsync(Wallet.Create(memberID));
        var order = await TestDb.CreateOrderAsync(db, memberID, 10000);

        var fake = new FakeTossPaymentService { GetPaymentResult = FakeTossPaymentService.Done(paymentKey, order.OrderID, order.Amount + 1000) };
        var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance);

        var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default);

        Assert.IsTrue(result.IsSuccess);

        using var verify = TestDb.Create();
        var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID);
        Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "금액 불일치는 자동 반영하지 않는다");

        var savedWallet = await verify.Wallet.Include(w => w.Balances).AsSplitQuery().SingleAsync(w => w.MemberID == memberID);
        Assert.AreEqual(0m, savedWallet.Balances.Single(b => b.Type == WalletBalanceType.PgCharged).Amount.Value, "금액 불일치 시 적립 금지");

        var reconcileLog = await verify.PaymentReconcileLog.Where(c => c.PaymentOrderID == order.ID).ToListAsync();
        Assert.AreEqual(1, reconcileLog.Count, "수동 대사용 로그가 남아야 한다");
    }

    [TestMethod]
    public async Task RequeryFails_ReturnsFailure_ForTossRetry()
    {
        // 재조회 통신 실패는 실패 응답(5xx) — 토스 재시도로 재처리를 유도한다.
        var paymentKey = $"PK-{Guid.NewGuid():N}";
        using var db = TestDb.Create();
        var memberID = await TestDb.CreateMemberAsync(db);
        var order = await TestDb.CreateOrderAsync(db, memberID, 10000);

        var fake = new FakeTossPaymentService { GetPaymentException = new HttpRequestException("timeout") };
        var handler = new WebhookHandler(db, fake, FakeAppDbContextFactory.Instance);

        var result = await handler.Handle(new WebhookCommand("PAYMENT_STATUS_CHANGED", paymentKey, null), default);

        Assert.IsFalse(result.IsSuccess, "재조회 실패는 실패 응답으로 토스 재시도를 유도해야 한다");

        using var verify = TestDb.Create();
        var savedOrder = await verify.PaymentOrder.SingleAsync(o => o.OrderID == order.OrderID);
        Assert.AreEqual(PaymentStatus.Pending, savedOrder.Status, "재조회 실패 시 주문은 변경되지 않는다");
    }
}