优化结构

internal/server/middleware/audit.go

@@ -135,25 +135,12 @@ func operationRequestBody(raw []byte, contentType string, limit int) string {
 	return text
 }
 
-// operationSecretKeys holds the normalized JSON keys whose values never reach
-// the operation record. Keys are compared after lowercasing and stripping
-// separators, so "new_password" and "newPassword" both match "newpassword".
-var operationSecretKeys = map[string]struct{}{
-	"password": {}, "newpassword": {}, "oldpassword": {}, "confirmpassword": {},
-	"passwd": {}, "pwd": {}, "token": {}, "accesstoken": {}, "refreshtoken": {},
-	"secret": {}, "clientsecret": {}, "apikey": {}, "privatekey": {}, "idcard": {},
-	"appkey": {}, "mchkey": {}, "apiv3key": {}, "clientcert": {}, "clientkey": {},
-	"platformcert": {}, "platformserialno": {}, "credentialcode": {}, "certfile": {},
-	"keyfile": {}, "publickey": {}, "rootcert": {}, "appcert": {}, "webhookid": {},
-}
-
 func maskOperationBody(value any) {
 	switch current := value.(type) {
 	case map[string]any:
 		for key, item := range current {
-			normalized := strings.ToLower(strings.ReplaceAll(strings.ReplaceAll(key, "_", ""), "-", ""))
-			if _, secret := operationSecretKeys[normalized]; secret {
-				current[key] = "***"
+			if isSensitivePayloadKey(key) {
+				current[key] = redactedValue
 				continue
 			}
 			maskOperationBody(item)