优化结构

internal/server/middleware/audit.go

@@ -87,8 +87,22 @@ func OperationAudit(runtime *config.Store, recorder *systemservice.AuditRecorder
 			responseBody = "[超出记录长度]"
 		}
 		errorMessage := c.Errors.ByType(gin.ErrorTypePrivate).String()
-		operationBody := operationRequestBody(requestBody, c.GetHeader("Content-Type"), maxBytes)
-		if routecatalog.BodyPolicyFor(c.Request.Method, path) == routecatalog.BodyPolicyPaymentConfig {
+		operationBody := ""
+		capturedBody := false
+		if c.Request.Method != http.MethodGet {
+			if value, ok := c.Get(ctxReqBodyKey); ok {
+				// AccessLog has already captured, redacted, summarized, and bounded the
+				// request body. Treat that value as final so audit does not process it a
+				// second time.
+				operationBody = stringValue(value)
+				capturedBody = true
+			} else {
+				operationBody = operationRequestBody(requestBody, c.GetHeader("Content-Type"), maxBytes)
+			}
+		} else {
+			operationBody = operationRequestBody(requestBody, c.GetHeader("Content-Type"), maxBytes)
+		}
+		if !capturedBody && routecatalog.BodyPolicyFor(c.Request.Method, path) == routecatalog.BodyPolicyPaymentConfig {
 			operationBody = paymentConfigSummary(requestBody)
 		}
 		if err := recorder.RecordOperationRequest(c.Request.Context(), &dto.OperationRecordRequest{IP: c.ClientIP(), Method: c.Request.Method, Path: path, Status: status, LatencyMS: time.Since(started).Milliseconds(), Agent: c.Request.UserAgent(), ErrorMessage: errorMessage, Body: operationBody, Response: responseBody, UserID: userID, RequestID: stringValue(requestID), TraceID: stringValueFromContext(c, "trace_id"), DeviceID: c.GetHeader("X-Device-Id")}); err != nil {
@@ -105,7 +119,11 @@ func operationQueryBody(raw string) []byte {
 	values := make(map[string]string, len(parsed))
 	for key, items := range parsed {
 		if len(items) > 0 {
-			values[key] = items[len(items)-1]
+			value := items[len(items)-1]
+			if isSensitivePayloadKey(key) {
+				value = redactedValue
+			}
+			values[key] = value
 		}
 	}
 	body, _ := json.Marshal(&values)

internal/server/middleware/error_audit_test.go

@@ -23,6 +23,16 @@ func TestOperationQueryBodyPreservesEncodedSeparators(t *testing.T) {
 	}
 }
 
+func TestOperationQueryBodyRedactsSensitiveValues(t *testing.T) {
+	var values map[string]string
+	if err := json.Unmarshal(operationQueryBody("token=secret-token&name=alice"), &values); err != nil {
+		t.Fatal(err)
+	}
+	if values["token"] != redactedValue || values["name"] != "alice" {
+		t.Fatalf("unexpected redacted query body: %#v", values)
+	}
+}
+
 func runErrorAudit(t *testing.T, path, response string, logger *slog.Logger) {
 	t.Helper()
 	gin.SetMode(gin.TestMode)