修复钱包余额变更后的鉴权缓存延迟

apps/aether-gateway/src/state/runtime/payments.rs

@@ -196,7 +196,11 @@ impl AppState {
             order.credited_at_unix_secs = Some(now_unix_secs);
             order.refundable_amount_usd = order.amount_usd;
             order.gateway_response = Some(serde_json::Value::Object(gateway_response));
-            return Ok(AdminWalletMutationOutcome::Applied((order.clone(), true)));
+            let updated_order = order.clone();
+            drop(wallets);
+            drop(orders);
+            self.invalidate_auth_context_cache();
+            return Ok(AdminWalletMutationOutcome::Applied((updated_order, true)));
         }
 
         match self
@@ -344,10 +348,18 @@ impl AppState {
         input: aether_data::repository::wallet::RedeemWalletCodeInput,
     ) -> Result<Option<aether_data::repository::wallet::RedeemWalletCodeOutcome>, GatewayError>
     {
-        self.data
+        let outcome = self
+            .data
             .redeem_wallet_code(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if matches!(
+            outcome,
+            Some(aether_data::repository::wallet::RedeemWalletCodeOutcome::Redeemed { .. })
+        ) {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(outcome)
     }
 }
 

apps/aether-gateway/src/state/runtime/wallet/balance_mutations.rs

@@ -87,7 +87,10 @@ impl AppState {
                 ),
                 created_at_unix_ms: chrono::Utc::now().timestamp().max(0) as u64,
             };
-            return Ok(Some((wallet.clone(), transaction)));
+            let updated_wallet = wallet.clone();
+            drop(guard);
+            self.invalidate_auth_context_cache();
+            return Ok(Some((updated_wallet, transaction)));
         }
 
         Ok(self
@@ -153,7 +156,10 @@ impl AppState {
                 credited_at_unix_secs: Some(created_at),
                 expires_at_unix_secs: None,
             };
-            return Ok(Some((wallet.clone(), order)));
+            let updated_wallet = wallet.clone();
+            drop(guard);
+            self.invalidate_auth_context_cache();
+            return Ok(Some((updated_wallet, order)));
         }
 
         let now = chrono::Utc::now();

apps/aether-gateway/src/state/runtime/wallet/mutations.rs

@@ -44,10 +44,15 @@ impl AppState {
         &self,
         input: ProcessPaymentCallbackInput,
     ) -> Result<Option<ProcessPaymentCallbackOutcome>, GatewayError> {
-        self.data
+        let outcome = self
+            .data
             .process_payment_callback(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if matches!(outcome, Some(ProcessPaymentCallbackOutcome::Applied { .. })) {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(outcome)
     }
 
     pub(crate) async fn adjust_wallet_balance(
@@ -60,10 +65,15 @@ impl AppState {
         )>,
         GatewayError,
     > {
-        self.data
+        let result = self
+            .data
             .adjust_wallet_balance(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if result.is_some() {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(result)
     }
 
     pub(crate) async fn create_manual_wallet_recharge(
@@ -76,10 +86,15 @@ impl AppState {
         )>,
         GatewayError,
     > {
-        self.data
+        let result = self
+            .data
             .create_manual_wallet_recharge(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if result.is_some() {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(result)
     }
 
     pub(crate) async fn process_admin_wallet_refund(
@@ -95,10 +110,15 @@ impl AppState {
         >,
         GatewayError,
     > {
-        self.data
+        let outcome = self
+            .data
             .process_admin_wallet_refund(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if matches!(outcome, Some(WalletMutationOutcome::Applied(_))) {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(outcome)
     }
 
     pub(crate) async fn complete_admin_wallet_refund(
@@ -127,10 +147,18 @@ impl AppState {
         >,
         GatewayError,
     > {
-        self.data
+        let outcome = self
+            .data
             .fail_admin_wallet_refund(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if matches!(
+            outcome,
+            Some(WalletMutationOutcome::Applied((_, _, Some(_))))
+        ) {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(outcome)
     }
 
     pub(crate) async fn expire_admin_payment_order(
@@ -176,9 +204,14 @@ impl AppState {
         >,
         GatewayError,
     > {
-        self.data
+        let outcome = self
+            .data
             .credit_admin_payment_order(input)
             .await
-            .map_err(|err| GatewayError::Internal(err.to_string()))
+            .map_err(|err| GatewayError::Internal(err.to_string()))?;
+        if matches!(outcome, Some(WalletMutationOutcome::Applied((_, true)))) {
+            self.invalidate_auth_context_cache();
+        }
+        Ok(outcome)
     }
 }

apps/aether-gateway/src/state/runtime/wallet/refund_lifecycle.rs

@@ -131,6 +131,7 @@ impl AppState {
                     .insert(updated_order.id.clone(), updated_order);
             }
 
+            self.invalidate_auth_context_cache();
             return Ok(AdminWalletMutationOutcome::Applied((
                 updated_wallet,
                 updated_refund,
@@ -354,6 +355,7 @@ impl AppState {
                 .expect("admin wallet refund store should lock")
                 .insert(updated_refund.id.clone(), updated_refund.clone());
 
+            self.invalidate_auth_context_cache();
             return Ok(AdminWalletMutationOutcome::Applied((
                 updated_wallet,
                 updated_refund,