钱包充值为开发态测试功能(生产环境本就禁用),且支付回调存在重复入账风险:入账与标记 paid 两步非原子、wallet_ledger 去重无唯一索引、幂等键使用了可变的 ProviderOrderID。直接删除该功能从根本上消除风险。 后端: - payment 移除 StartWalletRecharge/QueryWalletRecharge 及相关 handler/DTO/常量;confirmPaid 增加 OrderID 守卫;解除对 wallet 仓库的依赖 - wallet 移除 Recharge/ConfirmRechargeFromChannel 及相关定义 - 移除三条充值路由;adminfinance 财务统计口径只统计 order_pay - 清理充值相关测试用例 前端: - 移除充值 API、WalletView 充值面板/弹窗、admin 充值标签与筛选 - 保留钱包余额、流水、提现等核心能力 go build/vet 与 vue-tsc typecheck 均通过。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
145 lines
3.3 KiB
Go
145 lines
3.3 KiB
Go
package wallet
|
|
|
|
import (
|
|
"errors"
|
|
"strconv"
|
|
|
|
"hfb_sys/backend/internal/middleware"
|
|
"hfb_sys/backend/pkg/response"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
type Handler struct {
|
|
service *Service
|
|
}
|
|
|
|
func NewHandler(service *Service) *Handler {
|
|
return &Handler{service: service}
|
|
}
|
|
|
|
func (h *Handler) Balance(c *gin.Context) {
|
|
userID, ok := currentUserID(c)
|
|
if !ok {
|
|
response.Unauthorized(c, "缺少用户上下文")
|
|
return
|
|
}
|
|
account, err := h.service.Account(c.Request.Context(), userID)
|
|
if err != nil {
|
|
writeWalletError(c, err)
|
|
return
|
|
}
|
|
response.OK(c, account)
|
|
}
|
|
|
|
func parsePagination(c *gin.Context) (int, int) {
|
|
page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
|
|
pageSize, _ := strconv.Atoi(c.DefaultQuery("page_size", "20"))
|
|
if page < 1 {
|
|
page = 1
|
|
}
|
|
if pageSize < 1 {
|
|
pageSize = 20
|
|
}
|
|
if pageSize > 100 {
|
|
pageSize = 100
|
|
}
|
|
return page, pageSize
|
|
}
|
|
|
|
func (h *Handler) Ledger(c *gin.Context) {
|
|
userID, ok := currentUserID(c)
|
|
if !ok {
|
|
response.Unauthorized(c, "缺少用户上下文")
|
|
return
|
|
}
|
|
page, pageSize := parsePagination(c)
|
|
result, err := h.service.Ledger(c.Request.Context(), userID, page, pageSize)
|
|
if err != nil {
|
|
writeWalletError(c, err)
|
|
return
|
|
}
|
|
response.OK(c, result)
|
|
}
|
|
|
|
func (h *Handler) Withdraw(c *gin.Context) {
|
|
userID, ok := currentUserID(c)
|
|
if !ok {
|
|
response.Unauthorized(c, "缺少用户上下文")
|
|
return
|
|
}
|
|
var req WithdrawRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
response.BadRequest(c, "提现金额不正确")
|
|
return
|
|
}
|
|
account, err := h.service.Withdraw(c.Request.Context(), userID, req)
|
|
if err != nil {
|
|
writeWalletError(c, err)
|
|
return
|
|
}
|
|
response.OK(c, account)
|
|
}
|
|
|
|
func (h *Handler) AdminLedger(c *gin.Context) {
|
|
query, ok := parseAdminLedgerQuery(c)
|
|
if !ok {
|
|
return
|
|
}
|
|
result, err := h.service.AdminLedger(c.Request.Context(), query)
|
|
if err != nil {
|
|
writeWalletError(c, err)
|
|
return
|
|
}
|
|
response.OK(c, result)
|
|
}
|
|
|
|
func parseAdminLedgerQuery(c *gin.Context) (AdminLedgerQuery, bool) {
|
|
var query AdminLedgerQuery
|
|
if raw := c.Query("user_id"); raw != "" {
|
|
value, err := strconv.ParseUint(raw, 10, 64)
|
|
if err != nil || value == 0 {
|
|
response.BadRequest(c, "用户 ID 不正确")
|
|
return query, false
|
|
}
|
|
query.UserID = value
|
|
}
|
|
if raw := c.Query("order_id"); raw != "" {
|
|
value, err := strconv.ParseUint(raw, 10, 64)
|
|
if err != nil || value == 0 {
|
|
response.BadRequest(c, "订单 ID 不正确")
|
|
return query, false
|
|
}
|
|
query.OrderID = value
|
|
}
|
|
query.BizType = c.Query("biz_type")
|
|
page, pageSize := parsePagination(c)
|
|
query.Page = page
|
|
query.PageSize = pageSize
|
|
return query, true
|
|
}
|
|
|
|
func currentUserID(c *gin.Context) (uint64, bool) {
|
|
value, ok := c.Get(middleware.ContextUserID)
|
|
if !ok {
|
|
return 0, false
|
|
}
|
|
userID, ok := value.(uint64)
|
|
return userID, ok
|
|
}
|
|
|
|
func writeWalletError(c *gin.Context, err error) {
|
|
switch {
|
|
case errors.Is(err, ErrDependencyUnavailable):
|
|
response.ServiceUnavailable(c, "数据库未连接")
|
|
case errors.Is(err, ErrInvalidAmount):
|
|
response.BadRequest(c, "充值金额不正确")
|
|
case errors.Is(err, ErrInsufficientBalance):
|
|
response.Error(c, 409, "insufficient_balance", "钱包余额不足")
|
|
case errors.Is(err, ErrFeaturePending):
|
|
response.Error(c, 501, "feature_pending", "提现功能待开发")
|
|
default:
|
|
response.ServiceUnavailable(c, "钱包服务暂时不可用")
|
|
}
|
|
}
|