优化结构

internal/server/middleware/access_log.go

@@ -7,6 +7,7 @@ import (
 	"errors"
 	"io"
 	"kra/internal/biz/system"
+	httpx "kra/pkg/httpx"
 	"log/slog"
 	"mime"
 	"net/http"
@@ -51,7 +52,7 @@ func AccessLog(runtime *config.Store, logger *slog.Logger, version string) gin.H
 		c.Header("X-Kra-Version", version)
 		requestReadFailed := c.Request.ContentLength > bodyLimit
 		if requestReadFailed {
-			c.AbortWithStatusJSON(http.StatusRequestEntityTooLarge, gin.H{"code": CodeError, "msg": "请求体超过大小上限"})
+			c.AbortWithStatusJSON(http.StatusRequestEntityTooLarge, gin.H{"code": httpx.CodeError, "msg": "请求体超过大小上限"})
 		} else if c.Request.Body != nil && !mediaUpload {
 			limited := http.MaxBytesReader(c.Writer, c.Request.Body, bodyLimit)
 			var err error
@@ -60,9 +61,9 @@ func AccessLog(runtime *config.Store, logger *slog.Logger, version string) gin.H
 				requestReadFailed = true
 				var tooLarge *http.MaxBytesError
 				if errors.As(err, &tooLarge) {
-					c.AbortWithStatusJSON(http.StatusRequestEntityTooLarge, gin.H{"code": CodeError, "msg": "请求体超过大小上限"})
+					c.AbortWithStatusJSON(http.StatusRequestEntityTooLarge, gin.H{"code": httpx.CodeError, "msg": "请求体超过大小上限"})
 				} else {
-					c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"code": CodeError, "msg": "请求体读取失败"})
+					c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"code": httpx.CodeError, "msg": "请求体读取失败"})
 				}
 			} else {
 				c.Request.Body = io.NopCloser(bytes.NewReader(requestBody))
@@ -204,9 +205,8 @@ func paymentConfigSummary(body []byte) string {
 func redactHeaders(headers map[string][]string) map[string]string {
 	out := make(map[string]string, len(headers))
 	for key, values := range headers {
-		lower := strings.ToLower(key)
-		if lower == "authorization" || lower == "cookie" || lower == "set-cookie" || lower == "x-token" {
-			out[key] = "***"
+		if isSensitiveHeader(key) {
+			out[key] = redactedValue
 		} else {
 			out[key] = strings.Join(values, ",")
 		}
@@ -220,23 +220,13 @@ func redactQuery(raw string) string {
 	}
 	values, _ := url.ParseQuery(raw)
 	for key := range values {
-		if sensitiveQueryKey(key) {
-			values[key] = []string{"***"}
+		if isSensitivePayloadKey(key) {
+			values[key] = []string{redactedValue}
 		}
 	}
 	return values.Encode()
 }
 
-func sensitiveQueryKey(key string) bool {
-	normalized := strings.ToLower(strings.ReplaceAll(strings.ReplaceAll(key, "_", ""), "-", ""))
-	switch normalized {
-	case "token", "accesstoken", "refreshtoken", "authorization", "apikey", "secret":
-		return true
-	default:
-		return strings.HasSuffix(normalized, "token")
-	}
-}
-
 func stringValueFromContext(c *gin.Context, key string) string {
 	value, _ := c.Get(key)
 	return stringValue(value)