from __future__ import annotations from datetime import datetime, timedelta, timezone from data.customer_portal.token import issue_portal_token from data.orders.dao import OrdersDAO from data.orders.intake_store import IntakeStore from data.orders.models import Order from data.payments.service import PaymentService def _expire_retention_window(db_path: str, order_id: str, days: int = 200) -> None: """把订单的 status_updated_at 拨到 N 天前, 让保留期门禁放行。 真实 180 天窗口太慢, 测试场景需要可重现的"已过保留期"状态。 """ backdated = ( (datetime.now(timezone.utc) - timedelta(days=days)) .replace(microsecond=0) .isoformat() ) with OrdersDAO.connect(db_path) as dao: dao.conn.execute( "UPDATE orders SET status_updated_at=? WHERE id=?", (backdated, order_id), ) dao.conn.commit() def _seed_order(db_path: str, order_id: str = "GKO-20260614-INFO") -> Order: order = Order( id=order_id, source="web", service_version="standard", amount_cents=9900, status="pending", customer_name="张家长", customer_phone="13800138000", candidate_name="张三", candidate_province="湖南", ) with OrdersDAO.connect(db_path) as dao: return dao.create(order, actor="test", reason="seed") def _mark_paid(settings, order: Order) -> None: service = PaymentService.for_db( settings.orders_db_path, base_url=settings.payment_base_url, webhook_secret=settings.payment_webhook_secret, ) checkout = service.create_checkout(order.id, portal_token="portal-token") payload, headers = service.provider.build_webhook_request( payment_id=checkout.payment_id, amount_cents=order.amount_cents, provider_trade_no=f"MOCK-{order.id}", ) handled = service.handle_webhook(payload, headers["X-Mock-Signature"]) assert handled.order_status == "paid" def test_order_info_form_accepts_draft_and_submit(client, settings): order = _seed_order(settings.orders_db_path) _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) page = client.get(f"/portal/{token}/info") assert page.status_code == 200, page.text assert "资料填写向导" in page.text assert "五步资料向导" in page.text assert "当前资料状态" in page.text assert "/static/portal-ui.css" in page.text assert "目标城市" in page.text assert "目标专业" in page.text assert "已有方案说明" in page.text assert "基础信息" in page.text assert "院校偏好" in page.text assert "专业偏好" in page.text assert "其他偏好与确认" in page.text assert "已有方案与附件" in page.text assert "当前还需要补充" in page.text assert "分数" in page.text assert "位次" in page.text assert page.text.count("locked", encoding="utf-8") pdf_path.write_bytes(b"%PDF-1.4\nlocked\n") with OrdersDAO.connect(settings.orders_db_path) as dao: dao.update( order.id, {"audit_report": str(report_path), "pdf_path": str(pdf_path)}, actor="test", reason="attach_report", ) dao.transition_status(order.id, "serving", actor="test", reason="processing") dao.transition_status(order.id, "delivered", actor="test", reason="ready") resp = client.post( f"/portal/{token}/info", json={ "mode": "submit", "candidate_province": "湖南", "candidate_score": 600, "candidate_rank": 999, "candidate_subjects": ["物理"], "candidate_interests": "数学", "consent_version": "t12-web-mvp-v1", "consent_scope": "web-self-service-order-intake", "privacy_accepted": True, "service_terms_accepted": True, "guardian_confirmed": True, }, ) assert resp.status_code == 409 def test_submit_requires_consent_fields(client, settings): order = _seed_order(settings.orders_db_path, order_id="GKO-20260614-INFO-CONSENT") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) resp = client.post( f"/portal/{token}/info", json={ "mode": "submit", "candidate_province": "湖南", "candidate_score": 578, "candidate_rank": 12034, "candidate_subjects": ["物理", "化学", "生物"], "consent_version": "t12-web-mvp-v1", "consent_scope": "web-self-service-order-intake", "privacy_accepted": False, "service_terms_accepted": True, "guardian_confirmed": True, }, ) assert resp.status_code == 422 assert "privacy_accepted" in resp.text def test_submit_requires_at_least_one_target_preference(client, settings): order = _seed_order(settings.orders_db_path, order_id="GKO-20260615-INFO-TARGET") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) resp = client.post( f"/portal/{token}/info", json={ "mode": "submit", "candidate_province": "湖南", "candidate_score": 578, "candidate_rank": 12034, "candidate_subjects": ["物理", "化学", "生物"], "candidate_interests": None, "target_cities": [], "target_majors": [], "university_preferences": None, "consent_version": "t12-web-mvp-v1", "consent_scope": "web-self-service-order-intake", "privacy_accepted": True, "service_terms_accepted": True, "guardian_confirmed": True, }, ) assert resp.status_code == 200, resp.text assert resp.json()["intake_status"] == "submitted" def test_portal_intake_persists_consent_audit_fields(client, settings): order = _seed_order(settings.orders_db_path, order_id="GKO-20260618-CONSENT") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) resp = client.post( f"/portal/{token}/info", json={ "mode": "submit", "candidate_province": "湖南", "candidate_score": 601, "candidate_rank": 2123, "candidate_subjects": ["物理", "化学", "生物"], "candidate_interests": "计算机", "consent_version": "t12-web-mvp-v1", "consent_scope": "web-self-service-order-intake", "privacy_accepted": True, "service_terms_accepted": True, "guardian_confirmed": True, }, ) assert resp.status_code == 200, resp.text intake = IntakeStore.for_db(settings.orders_db_path) try: record = intake.get(order.id) finally: intake.close() assert record is not None assert record.payload["consent_channel"] == "portal" assert record.payload["consent_given_at"] assert record.payload["privacy_accepted_at"] assert record.payload["service_terms_accepted_at"] def test_order_info_page_exposes_policy_and_deletion_links(client, settings): order = _seed_order(settings.orders_db_path, order_id="GKO-20260615-INFO-LINKS") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) page = client.get(f"/portal/{token}/info") assert page.status_code == 200, page.text assert 'href="/privacy"' in page.text assert 'href="/service-terms"' in page.text assert f"/portal/{token}/deletion-request" in page.text def test_portal_deletion_request_is_logged_and_visible_in_admin( client, auth_headers, settings ): order = _seed_order(settings.orders_db_path, order_id="GKO-20260615-DELETE-REQ") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) form_page = client.get(f"/portal/{token}/deletion-request") assert form_page.status_code == 200, form_page.text assert "删除申请" in form_page.text assert "提交删除申请" in form_page.text assert "/static/portal-ui.css" in form_page.text submit = client.post( f"/portal/{token}/deletion-request", json={ "requester_name": "张家长", "requester_contact": "parent@example.com", "reason": "需要撤回资料并删除附件", "scope": "order_and_attachments", "confirm_guardian": True, }, ) assert submit.status_code == 200, submit.text body = submit.json() assert body["order_id"] == order.id assert body["request_logged"] is True # 2026-06-19 T12-C: next_step 必须根据保留期窗口分文案 assert ( body["next_step"] == "提交成功后将由人工核验后处理（订单仍在 180 天保留期内）" ) admin_page = client.get( f"/admin/deletion-requests?order_id={order.id}", headers=auth_headers ) assert admin_page.status_code == 200, admin_page.text assert order.id in admin_page.text assert "需要撤回资料并删除附件" in admin_page.text assert "parent@example.com" in admin_page.text def test_portal_deletion_request_after_retention_window_uses_outside_next_step( client, auth_headers, settings ): order = _seed_order( settings.orders_db_path, order_id="GKO-20250619-DELETE-RETN-OUTSIDE" ) _mark_paid(settings, order) _expire_retention_window(settings.orders_db_path, order.id) token = issue_portal_token(order.id, settings.portal_token_secret) submit = client.post( f"/portal/{token}/deletion-request", json={ "requester_name": "张家长", "requester_contact": "parent@example.com", "reason": "已经超过保留期，请尽快删除", "scope": "order_and_attachments", "confirm_guardian": True, }, ) assert submit.status_code == 200, submit.text body = submit.json() # 2026-06-19 T12-C: 保留期外可申请, next_step 必须明确可走删除 assert ( body["next_step"] == "已超过 180 天保留期，可申请删除；提交成功后将由人工核验后处理" ) def test_portal_deletion_request_rejects_invalid_scope(client, settings): order = _seed_order( settings.orders_db_path, order_id="GKO-20260619-DELETE-BAD-SCOPE" ) _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) submit = client.post( f"/portal/{token}/deletion-request", json={ "requester_name": "张家长", "requester_contact": "parent@example.com", "reason": "test", "scope": "bogus_scope", "confirm_guardian": True, }, ) # 2026-06-19 T12-C: scope 必须锁定到白名单 assert submit.status_code == 422, submit.text def test_portal_deletion_request_page_shows_retention_outside_hint(client, settings): order = _seed_order( settings.orders_db_path, order_id="GKO-20260619-DELETE-PAGE-OUTSIDE" ) _mark_paid(settings, order) _expire_retention_window(settings.orders_db_path, order.id) token = issue_portal_token(order.id, settings.portal_token_secret) page = client.get(f"/portal/{token}/deletion-request") assert page.status_code == 200, page.text # 2026-06-19 T12-C: 保留期外页面必须明确告诉用户"可申请删除" assert "已超过 180 天保留期" in page.text assert "可申请删除" in page.text def test_portal_deletion_request_page_shows_retention_within_hint(client, settings): order = _seed_order( settings.orders_db_path, order_id="GKO-20260619-DELETE-PAGE-WITHIN" ) _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) page = client.get(f"/portal/{token}/deletion-request") assert page.status_code == 200, page.text # 2026-06-19 T12-C: 保留期内页面必须明确"保留期内 + 保留期满后会清理" assert "180 天保留期" in page.text def test_deletion_request_log_is_purged_by_retention_cleanup(settings): from pathlib import Path from data.orders.retention_cleanup import run_cleanup order = Order( id="GKO-20250101-DELETE-LOG", source="web", service_version="standard", amount_cents=9900, status="completed", customer_name="张家长", customer_phone="13800138000", candidate_name="张三", candidate_province="湖南", created_at="2025-01-01T00:00:00+00:00", completed_at="2025-01-02T00:00:00+00:00", status_updated_at="2025-01-02T00:00:00+00:00", ) with OrdersDAO.connect(settings.orders_db_path) as dao: dao.create(order, actor="test", reason="seed_old_completed") log_path = Path(settings.deletion_request_log_path) log_path.parent.mkdir(parents=True, exist_ok=True) log_path.write_text( '{"created_at":"2025-01-02T00:00:00Z","order_id":"GKO-20250101-DELETE-LOG","requester_contact":"parent@example.com"}\n' '{"created_at":"2026-01-02T00:00:00Z","order_id":"GKO-KEEP-LOG","requester_contact":"keep@example.com"}\n', encoding="utf-8", ) result = run_cleanup( settings.orders_db_path, cutoff_iso="2025-06-30T00:00:00+00:00", apply=True, ) assert result.anonymized == 1 remaining = log_path.read_text(encoding="utf-8") assert "GKO-20250101-DELETE-LOG" not in remaining assert "GKO-KEEP-LOG" in remaining def test_order_info_page_uses_checkbox_checked_state_for_submit(client, settings): order = _seed_order(settings.orders_db_path, order_id="GKO-20260615-INFO-CHECKED") _mark_paid(settings, order) token = issue_portal_token(order.id, settings.portal_token_secret) page = client.get(f"/portal/{token}/info") assert page.status_code == 200, page.text assert ( "document.querySelector('input[name=\"privacy_accepted\"]')?.checked" in page.text ) assert "form.get('privacy_accepted') === 'on'" not in page.text assert "form.get('service_terms_accepted') === 'on'" not in page.text assert "form.get('guardian_confirmed') === 'on'" not in page.text