优化结构

internal/biz/integration/integration_config.go

@@ -395,6 +395,19 @@ func integrationFirst(values map[string]any, keys ...string) string {
 	return ""
 }
 
+func IsIntegrationSecretKey(key string) bool {
+	normalized := strings.ToLower(strings.ReplaceAll(key, "-", "_"))
+	if strings.Contains(normalized, "secret") || strings.Contains(normalized, "password") || strings.Contains(normalized, "private") || strings.Contains(normalized, "credential") || strings.Contains(normalized, "token") {
+		return true
+	}
+	for _, item := range []string{"key", "key_pem", "api_key", "mch_key", "client_key", "certificate", "cert", "cert_pem", "p12", "pkcs12", "public_key", "platform_cert", "root_cert"} {
+		if normalized == item || strings.HasSuffix(normalized, "_"+item) {
+			return true
+		}
+	}
+	return false
+}
+
 func integrationInt64(values map[string]any, key string, fallback int64) int64 {
 	value := integrationText(values, key)
 	if value == "" {

internal/biz/system/media_upload.go

@@ -97,7 +97,13 @@ func (uc *MediaUsecase) InitUpload(ctx context.Context, userID uint, name, hash
 	completed, err := uc.FindCompletedSession(ctx, userID, strings.ToLower(hash))
 	if err == nil && completed.MediaID != 0 {
 		if media, findErr := uc.FindMedia(ctx, completed.MediaID); findErr == nil {
-			copy := &MediaFile{Name: name, URL: media.URL, Tag: media.Tag, Key: media.Key, Size: media.Size, MD5: media.MD5, Mime: media.Mime, UserID: userID}
+			copy := &MediaFile{Name: name, URL: media.URL, Tag: strings.TrimPrefix(filepath.Ext(name), "."), Key: media.Key, Size: media.Size, MD5: media.MD5, Mime: media.Mime, UserID: userID}
+			if strings.TrimSpace(copy.Mime) == "" {
+				copy.Mime = stdmime.TypeByExtension(strings.ToLower(filepath.Ext(name)))
+				if copy.Mime == "" {
+					copy.Mime = "application/octet-stream"
+				}
+			}
 			if createErr := uc.CreateMedia(ctx, copy); createErr == nil {
 				return nil, copy, nil, nil
 			}