Files
lotteryLaravel/tests/Feature/AdminRiskPoolApiTest.php

285 lines
9.2 KiB
PHP

<?php
use App\Models\Draw;
use App\Models\RiskPool;
use App\Models\AdminUser;
use App\Models\RiskPoolLockLog;
use Illuminate\Support\Facades\Hash;
use App\Services\Ticket\RiskPoolService;
use Illuminate\Foundation\Testing\RefreshDatabase;
use App\Exceptions\TicketOperationException;
uses(RefreshDatabase::class);
function mintRiskAdminToken(): string
{
$admin = AdminUser::query()->create([
'username' => 'risk_pool_admin',
'name' => 'Risk QA',
'email' => null,
'password' => Hash::make('secret-strong'),
'status' => 0,
]);
grantSuperAdminRole($admin);
return $admin->createToken('test', ['*'], now()->addDay())->plainTextToken;
}
test('admin risk pools index returns rows for draw', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-001',
'business_date' => '2026-05-12',
'sequence_no' => 1,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '1234',
'total_cap_amount' => 1_000_000,
'locked_amount' => 200_000,
'remaining_amount' => 800_000,
'sold_out_status' => 0,
'version' => 1,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '9999',
'total_cap_amount' => 100,
'locked_amount' => 100,
'remaining_amount' => 0,
'sold_out_status' => 1,
'version' => 2,
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools?per_page=10')
->assertOk()
->assertJsonPath('data.draw_no', '20260512-001')
->assertJsonPath('data.meta.total', 2);
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools?sold_out_only=1')
->assertOk()
->assertJsonPath('data.meta.total', 1)
->assertJsonPath('data.items.0.normalized_number', '9999')
->assertJsonPath('data.items.0.is_sold_out', true);
});
test('admin risk pools index filters by number and high risk usage', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-004',
'business_date' => '2026-05-12',
'sequence_no' => 4,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '1288',
'total_cap_amount' => 1_000,
'locked_amount' => 850,
'remaining_amount' => 150,
'sold_out_status' => 0,
'version' => 1,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '5678',
'total_cap_amount' => 1_000,
'locked_amount' => 100,
'remaining_amount' => 900,
'sold_out_status' => 0,
'version' => 1,
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools?high_risk_only=1')
->assertOk()
->assertJsonPath('data.meta.total', 1)
->assertJsonPath('data.items.0.normalized_number', '1288');
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools?normalized_number=67')
->assertOk()
->assertJsonPath('data.meta.total', 1)
->assertJsonPath('data.items.0.normalized_number', '5678');
});
test('admin can manually close and recover a risk pool number', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-005',
'business_date' => '2026-05-12',
'sequence_no' => 5,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '2468',
'total_cap_amount' => 1_000,
'locked_amount' => 300,
'remaining_amount' => 700,
'sold_out_status' => 0,
'version' => 1,
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->postJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools/2468/manual-close')
->assertOk()
->assertJsonPath('data.normalized_number', '2468')
->assertJsonPath('data.is_sold_out', true)
->assertJsonPath('data.version', 2);
$this->assertDatabaseHas('risk_pool_lock_logs', [
'draw_id' => $draw->id,
'normalized_number' => '2468',
'action_type' => 'close',
'amount' => 0,
'source_reason' => 'admin_manual_close',
]);
expect(fn () => app(RiskPoolService::class)->preview($draw->id, [['number_4d' => '2468', 'amount' => 1]]))
->toThrow(TicketOperationException::class, 'risk_sold_out');
expect(fn () => app(RiskPoolService::class)->acquire($draw->id, null, [['number_4d' => '2468', 'amount' => 1]]))
->toThrow(TicketOperationException::class, 'risk_sold_out');
});
test('admin can recover a manually closed risk pool number', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-006',
'business_date' => '2026-05-12',
'sequence_no' => 6,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
RiskPool::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '2468',
'total_cap_amount' => 1_000,
'locked_amount' => 300,
'remaining_amount' => 700,
'sold_out_status' => 1,
'version' => 2,
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->postJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools/2468/recover')
->assertOk()
->assertJsonPath('data.normalized_number', '2468')
->assertJsonPath('data.is_sold_out', false)
->assertJsonPath('data.version', 3);
$this->assertDatabaseHas('risk_pool_lock_logs', [
'draw_id' => $draw->id,
'normalized_number' => '2468',
'action_type' => 'recover',
'amount' => 0,
'source_reason' => 'admin_manual_recover',
]);
expect(app(RiskPoolService::class)->acquire($draw->id, null, [['number_4d' => '2468', 'amount' => 1]]))
->toBe(1);
});
test('admin risk pool lock logs include ticket_no when linked', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-002',
'business_date' => '2026-05-12',
'sequence_no' => 2,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
RiskPoolLockLog::query()->create([
'draw_id' => $draw->id,
'normalized_number' => '5678',
'ticket_item_id' => null,
'action_type' => 'lock',
'amount' => 50,
'source_reason' => 'ticket_place',
'created_at' => now(),
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pool-lock-logs')
->assertOk()
->assertJsonPath('data.meta.total', 1)
->assertJsonPath('data.items.0.amount', 50);
});
test('admin risk pool show 404 when pool missing', function (): void {
$draw = Draw::query()->create([
'draw_no' => '20260512-003',
'business_date' => '2026-05-12',
'sequence_no' => 3,
'status' => 'open',
'start_time' => now()->subHour(),
'close_time' => now()->addHour(),
'draw_time' => now()->addHours(2),
'cooling_end_time' => null,
'result_source' => null,
'current_result_version' => 0,
'settle_version' => 0,
'is_reopened' => false,
]);
$token = mintRiskAdminToken();
$this->withHeader('Authorization', 'Bearer '.$token)
->getJson('/api/v1/admin/draws/'.$draw->id.'/risk-pools/0000')
->assertStatus(404);
});