优化结构
This commit is contained in:
@@ -1,33 +0,0 @@
|
||||
package payment
|
||||
|
||||
import (
|
||||
"crypto/sha256"
|
||||
"encoding/hex"
|
||||
"strings"
|
||||
"testing"
|
||||
)
|
||||
|
||||
func TestChinaumsCallbackAuthorizationVerification(t *testing.T) {
|
||||
profile := &vendorPaymentAdapter{profile: vendorChinaums}
|
||||
config := map[string]any{"app_id": "china-app", "app_key": "china-secret"}
|
||||
raw := []byte(`{"status":"SUCCESS","trade_no":"T-1"}`)
|
||||
timestamp, nonceValue := "1700000000", "nonce-1"
|
||||
digest := sha256.Sum256([]byte("china-app" + timestamp + nonceValue + string(raw) + "china-secret"))
|
||||
headers := map[string]string{
|
||||
"authorization": "OPEN-BODY-SIG AppId=china-app, Timestamp=" + timestamp + ", Nonce=" + nonceValue + ", Signature=" + hex.EncodeToString(digest[:]),
|
||||
}
|
||||
if err := profile.verify(nil, raw, headers, config); err != nil {
|
||||
t.Fatalf("valid Chinaums callback rejected: %v", err)
|
||||
}
|
||||
if err := profile.verify(nil, []byte(`{"status":"FAILED","trade_no":"T-1"}`), headers, config); err == nil {
|
||||
t.Fatal("tampered Chinaums callback accepted")
|
||||
}
|
||||
missingNonce := map[string]string{"Authorization": "OPEN-BODY-SIG AppId=china-app, Timestamp=" + timestamp + ", Signature=" + hex.EncodeToString(digest[:])}
|
||||
if err := profile.verify(nil, raw, missingNonce, config); err == nil || !strings.Contains(err.Error(), "信息不完整") {
|
||||
t.Fatalf("missing Chinaums signature component error = %v", err)
|
||||
}
|
||||
mismatchedApp := map[string]string{"Authorization": "OPEN-BODY-SIG AppId=other-app, Timestamp=" + timestamp + ", Nonce=" + nonceValue + ", Signature=" + hex.EncodeToString(digest[:])}
|
||||
if err := profile.verify(nil, raw, mismatchedApp, config); err == nil || !strings.Contains(err.Error(), "AppId") {
|
||||
t.Fatalf("mismatched Chinaums AppId error = %v", err)
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user