feat: add HTTP API and complete client workflows

2026-07-16 11:34:06 +08:00
parent 4f07b331e5
commit dcb6162dcf
40 changed files with 2548 additions and 365 deletions
@@ -0,0 +1,86 @@
+import { BadRequestException, ConflictException } from '@nestjs/common';
+import { decryptSecret, encryptSecret } from './open-api.crypto';
+import { OpenApiService } from './open-api.service';
+
+describe('OpenApiService', () => {
+  beforeAll(() => { process.env.HTTP_API_MASTER_KEY = 'test-master-key-with-at-least-32-characters'; });
+
+  it('encrypts secrets with authenticated encryption', () => {
+    const encrypted = encryptSecret('customer-secret');
+    expect(encrypted).not.toContain('customer-secret');
+    expect(decryptSecret(encrypted)).toBe('customer-secret');
+  });
+
+  it('replays a completed request for the same idempotency key and body', async () => {
+    const prisma = {
+      openApiRequest: { findUnique: jest.fn().mockResolvedValue({ bodyHash: 'same', status: 'completed', responseBody: { code: 'ACCEPTED', messageId: 'MSG-1' } }) },
+    };
+    const sendChain = { createBatchTask: jest.fn() };
+    const service = new OpenApiService(prisma as never, sendChain as never);
+    const result = await service.sendMessage(auth() as never, { mobile: '18821203795', content: '【测试】短信' }, { idempotencyKey: 'idem-0001', bodyHash: 'same' });
+    expect(result).toEqual({ code: 'ACCEPTED', messageId: 'MSG-1' });
+    expect(sendChain.createBatchTask).not.toHaveBeenCalled();
+  });
+
+  it('rejects reuse of an idempotency key with a different body', async () => {
+    const prisma = { openApiRequest: { findUnique: jest.fn().mockResolvedValue({ bodyHash: 'old', status: 'completed' }) } };
+    const service = new OpenApiService(prisma as never, { createBatchTask: jest.fn() } as never);
+    await expect(service.sendMessage(auth() as never, { mobile: '18821203795', content: '【测试】短信' }, { idempotencyKey: 'idem-0001', bodyHash: 'new' })).rejects.toBeInstanceOf(ConflictException);
+  });
+
+  it('replays the same persisted business rejection', async () => {
+    const prisma = { openApiRequest: { findUnique: jest.fn().mockResolvedValue({ bodyHash: 'same', status: 'failed', httpStatus: 422, responseBody: { code: 'SEND_REJECTED', message: '模板不匹配' } }) } };
+    const service = new OpenApiService(prisma as never, { createBatchTask: jest.fn() } as never);
+    await expect(service.sendMessage(auth() as never, { mobile: '18821203795', content: '【测试】短信' }, { idempotencyKey: 'idem-0001', bodyHash: 'same' })).rejects.toMatchObject({ status: 422 });
+  });
+
+  it('uses the real send chain and persists the accepted response', async () => {
+    const prisma = {
+      openApiRequest: {
+        findUnique: jest.fn().mockResolvedValue(null),
+        create: jest.fn().mockResolvedValue({ id: 'request-row-1' }),
+        update: jest.fn().mockResolvedValue({}),
+      },
+      smsMessageRecord: { findFirst: jest.fn().mockResolvedValue(null) },
+    };
+    const sendChain = { createBatchTask: jest.fn().mockResolvedValue({ status: 'ready', messages: [{ id: 'row-1', messageId: 'MSG-1', status: 'queued' }] }) };
+    const service = new OpenApiService(prisma as never, sendChain as never);
+    const result = await service.sendMessage(auth() as never, { mobile: '18821203795', content: '【测试】短信', clientMessageId: 'client-1' }, { idempotencyKey: 'idem-0001', bodyHash: 'hash' });
+    expect(sendChain.createBatchTask).toHaveBeenCalledWith(expect.objectContaining({ sourceType: 'api', phones: ['18821203795'], clientMessageId: 'client-1' }));
+    expect(result).toEqual(expect.objectContaining({ code: 'ACCEPTED', messageId: 'MSG-1', clientMessageId: 'client-1' }));
+    expect(prisma.openApiRequest.update).toHaveBeenCalledWith(expect.objectContaining({ data: expect.objectContaining({ status: 'completed', httpStatus: 202, messageRecordId: 'row-1' }) }));
+  });
+
+  it('persists a 422 result when the real send chain rejects the business request', async () => {
+    const prisma = {
+      openApiRequest: { findUnique: jest.fn().mockResolvedValue(null), create: jest.fn().mockResolvedValue({ id: 'request-row-1' }), update: jest.fn().mockResolvedValue({}) },
+      smsMessageRecord: { findFirst: jest.fn().mockResolvedValue(null) },
+    };
+    const service = new OpenApiService(prisma as never, { createBatchTask: jest.fn().mockRejectedValue(new BadRequestException('短信未匹配模板')) } as never);
+    await expect(service.sendMessage(auth() as never, { mobile: '18821203795', content: '未匹配模板' }, { idempotencyKey: 'idem-0001', bodyHash: 'hash' })).rejects.toMatchObject({ status: 422 });
+    expect(prisma.openApiRequest.update).toHaveBeenCalledWith(expect.objectContaining({ data: expect.objectContaining({ status: 'failed', httpStatus: 422, businessCode: 'SEND_REJECTED' }) }));
+  });
+
+  it('creates an HTTP webhook event only for an enabled HTTP delivery mode', async () => {
+    const prisma = {
+      smsApplication: { findUnique: jest.fn().mockResolvedValue({ httpConfig: { enabled: true, receiptWebhookEnabled: true, receiptDeliveryMode: 'http' } }) },
+      httpWebhookEndpoint: { findUnique: jest.fn().mockResolvedValue({ id: 'endpoint-1', status: 'active' }) },
+      httpWebhookEvent: { create: jest.fn().mockResolvedValue({ id: 'event-row-1' }) },
+      httpWebhookDelivery: { create: jest.fn().mockResolvedValue({ id: 'delivery-1' }) },
+    };
+    const service = new OpenApiService(prisma as never, {} as never);
+    await service.queueWebhookEvent({ tenantId: 'tenant-1', applicationId: 'app-1', eventType: 'receipt', messageId: 'MSG-1', payload: { receiptStatus: 'delivered' } });
+    expect(prisma.httpWebhookEvent.create).toHaveBeenCalled();
+    expect(prisma.httpWebhookDelivery.create).toHaveBeenCalledWith({ data: { eventId: 'event-row-1', endpointId: 'endpoint-1' } });
+  });
+});
+
+function auth() {
+  return {
+    application: { id: 'app-1', tenantId: 'tenant-1', status: 'active' },
+    config: { sendEnabled: true },
+    credentialId: 'credential-1',
+    accessKey: 'ak_test',
+    sourceIp: '203.0.113.10',
+  };
+}