优化

2026-08-25 14:46:06 +08:00
parent 5abc7543ae
commit f325d57fc1
106 changed files with 3682 additions and 450 deletions
@@ -96,6 +96,21 @@ class ContainerShippingNodeConsumerTest {
            .hasMessageContaining("摘要冲突");
    }

+    @Test
+    void tamperedPayloadHashIsRejectedBeforeInboxMutation() {
+        EventEnvelope source = event("123e4567-e89b-12d3-a456-426614174105", "PICKUP_READY", 80, 5,
+            Instant.parse("2026-08-21T10:00:00Z"));
+        EventEnvelope tampered = new EventEnvelope(source.eventId(), source.eventType(), source.eventVersion(),
+            source.occurredAt(), source.sourceRegion(), source.targetRegion(), source.tenantId(),
+            source.aggregateType(), source.aggregateId(), source.aggregateVersion(), source.handoverVersion(),
+            source.traceId(), source.correlationId(), source.causationId(), source.payload(),
+            "sha256:" + "0".repeat(64));
+
+        assertThatThrownBy(() -> consumer.consume(tampered)).isInstanceOf(IllegalArgumentException.class)
+            .hasMessageContaining("payloadHash");
+        verify(inboxes, never()).insert(any(LastlegEventInbox.class));
+    }
+
    private ContainerShippingGate gate(String status, int sequence, long version, Instant actualAt) {
        ContainerShippingGate gate = new ContainerShippingGate(); gate.setContainerBookingId("CB-1");
        gate.setCustomerId("100"); gate.setOceanBookingId("OB-1"); gate.setContainerNo("CONT-1");