增加后台支付列表，修改前台有问题也能支付成功，增加支付日志

video-gen-api/app/api/v1/payments.py

@@ -89,7 +89,10 @@ async def wechat_callback(request: Request, db: AsyncSession = Depends(get_db)):
 async def alipay_callback(request: Request, db: AsyncSession = Depends(get_db)):
     form_data = await request.form()
     data = dict(form_data)
-    logger.info(f"Alipay callback received: {list(data.keys())}")
+    logger.info(
+        f"ALIPAY_CALLBACK order_no={data.get('out_trade_no')} "
+        f"trade_no={data.get('trade_no', '')} status={data.get('trade_status', '')}"
+    )
 
     # Verify signature first
     if not await verify_alipay_callback(data, db):
@@ -114,9 +117,40 @@ async def list_orders(
     current_user: User = Depends(get_current_user),
     db: AsyncSession = Depends(get_db),
 ):
+    # Auto-expire stale pending orders before returning
+    from app.services.payment import _check_and_expire_order
     result = await db.execute(
         select(PaymentOrder)
         .where(PaymentOrder.user_id == current_user.id)
         .order_by(PaymentOrder.created_at.desc())
     )
-    return result.scalars().all()
+    orders = result.scalars().all()
+    for o in orders:
+        await _check_and_expire_order(db, o)
+    return orders
+
+
+@router.post("/orders/{order_no}/cancel")
+async def cancel_order(
+    order_no: str,
+    current_user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db),
+):
+    """Cancel a pending order. Only the order owner can cancel, only if still pending."""
+    result = await db.execute(
+        select(PaymentOrder).where(
+            PaymentOrder.order_no == order_no,
+            PaymentOrder.user_id == current_user.id,
+        ).limit(1)
+    )
+    order = result.scalar_one_or_none()
+    if not order:
+        raise HTTPException(status_code=404, detail="订单不存在")
+    if order.status != "pending":
+        raise HTTPException(status_code=400, detail=f"订单状态为{order.status}，无法取消")
+    order.status = "cancelled"
+    await db.flush()
+    logger.info(
+        f"ORDER_CANCELLED order_no={order_no} user={current_user.id} amount={order.amount}"
+    )
+    return {"ok": True}