接入流程敏感字段加密与列表脱敏

ruoyi-loan-pricing/src/test/java/com/ruoyi/loanpricing/service/impl/LoanPricingWorkflowServiceImplTest.java

@@ -1,10 +1,16 @@
 package com.ruoyi.loanpricing.service.impl;
 
 import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.Mockito.verify;
 import static org.mockito.Mockito.when;
 
+import com.baomidou.mybatisplus.core.MybatisConfiguration;
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.baomidou.mybatisplus.core.metadata.IPage;
+import com.baomidou.mybatisplus.core.metadata.TableInfoHelper;
 import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
 import com.ruoyi.loanpricing.domain.entity.LoanPricingWorkflow;
 import com.ruoyi.loanpricing.domain.entity.ModelCorpOutputFields;
@@ -14,13 +20,20 @@ import com.ruoyi.loanpricing.domain.vo.LoanPricingWorkflowVO;
 import com.ruoyi.loanpricing.mapper.LoanPricingWorkflowMapper;
 import com.ruoyi.loanpricing.mapper.ModelCorpOutputFieldsMapper;
 import com.ruoyi.loanpricing.mapper.ModelRetailOutputFieldsMapper;
+import com.ruoyi.loanpricing.service.LoanPricingSensitiveDisplayService;
 import com.ruoyi.loanpricing.service.LoanPricingModelService;
+import com.ruoyi.loanpricing.service.SensitiveFieldCryptoService;
+import org.apache.ibatis.builder.MapperBuilderAssistant;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
 import org.mockito.InjectMocks;
 import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 
+import java.util.Collections;
+import java.util.Objects;
+
 @ExtendWith(MockitoExtension.class)
 class LoanPricingWorkflowServiceImplTest
 {
@@ -36,9 +49,34 @@ class LoanPricingWorkflowServiceImplTest
     @Mock
     private ModelCorpOutputFieldsMapper modelCorpOutputFieldsMapper;
 
+    @Mock
+    private SensitiveFieldCryptoService sensitiveFieldCryptoService;
+
+    @Mock
+    private LoanPricingSensitiveDisplayService loanPricingSensitiveDisplayService;
+
     @InjectMocks
     private LoanPricingWorkflowServiceImpl loanPricingWorkflowService;
 
+    @Test
+    void shouldEncryptCustNameAndIdNumBeforeInsert()
+    {
+        LoanPricingWorkflow workflow = new LoanPricingWorkflow();
+        workflow.setCustName("张三");
+        workflow.setIdNum("110101199001011234");
+        workflow.setCustIsn("CUST001");
+
+        when(sensitiveFieldCryptoService.encrypt("张三")).thenReturn("cipher-name");
+        when(sensitiveFieldCryptoService.encrypt("110101199001011234")).thenReturn("cipher-id");
+
+        loanPricingWorkflowService.createLoanPricing(workflow);
+
+        verify(loanPricingWorkflowMapper).insert(argThat((LoanPricingWorkflow entity) ->
+                Objects.equals("cipher-name", entity.getCustName())
+                        && Objects.equals("cipher-id", entity.getIdNum())
+                        && Objects.equals("CUST001", entity.getCustIsn())));
+    }
+
     @Test
     void shouldReturnPagedWorkflowListWithCalculateRate()
     {
@@ -55,6 +93,46 @@ class LoanPricingWorkflowServiceImplTest
         assertEquals("6.15", result.getRecords().get(0).getCalculateRate());
     }
 
+    @Test
+    void shouldMaskCustNameWhenReturningPagedWorkflowList()
+    {
+        LoanPricingWorkflowListVO row = new LoanPricingWorkflowListVO();
+        row.setCustName("cipher-name");
+
+        Page<LoanPricingWorkflowListVO> pageResult = new Page<>(1, 10);
+        pageResult.setRecords(Collections.singletonList(row));
+
+        when(loanPricingWorkflowMapper.selectWorkflowPageWithRates(any(), any())).thenReturn(pageResult);
+        when(sensitiveFieldCryptoService.decrypt("cipher-name")).thenReturn("张三");
+        when(loanPricingSensitiveDisplayService.maskCustName("张三")).thenReturn("张*");
+
+        IPage<LoanPricingWorkflowListVO> result = loanPricingWorkflowService.selectLoanPricingPage(new Page<>(1, 10), new LoanPricingWorkflow());
+
+        assertEquals("张*", result.getRecords().get(0).getCustName());
+    }
+
+    @Test
+    void shouldUseCustIsnInsteadOfCustNameAsQueryCondition()
+    {
+        LoanPricingWorkflow query = new LoanPricingWorkflow();
+        query.setCustIsn("CUST001");
+        query.setCustName("张三");
+
+        when(loanPricingWorkflowMapper.selectList(any())).thenReturn(Collections.emptyList());
+
+        loanPricingWorkflowService.selectLoanPricingList(query);
+
+        ArgumentCaptor<LambdaQueryWrapper<LoanPricingWorkflow>> wrapperCaptor = ArgumentCaptor.forClass(LambdaQueryWrapper.class);
+        verify(loanPricingWorkflowMapper).selectList(wrapperCaptor.capture());
+
+        LambdaQueryWrapper<LoanPricingWorkflow> wrapper = wrapperCaptor.getValue();
+        TableInfoHelper.initTableInfo(new MapperBuilderAssistant(new MybatisConfiguration(), ""), LoanPricingWorkflow.class);
+        String sqlSegment = wrapper.getSqlSegment();
+
+        assertTrue(sqlSegment.contains("cust_isn"), sqlSegment);
+        assertTrue(!sqlSegment.contains("cust_name"), sqlSegment);
+    }
+
     @Test
     void shouldUseRetailModelOutputCalculateRateForWorkflowDetail()
     {