修复

internal/service/customer_binding/audit.go

@@ -48,6 +48,8 @@ func (s *Service) writeBindingAudit(
 	if actionCode == constants.AuditActionPersonalCustomerAssetBound {
 		assetType, assetID := bindingAssetReference(cards, devices)
 		subjectData = map[string]any{"asset_type": assetType, "asset_id": assetID}
+		cards = nil
+		devices = nil
 	} else {
 		operatorID = middleware.GetUserIDFromContext(ctx)
 		if parsed, err := strconv.ParseUint(value.ActorID, 10, 64); err == nil && parsed > 0 {

internal/service/customer_binding/audit_test.go

@@ -0,0 +1,83 @@
+package customer_binding
+
+import (
+	"context"
+	"database/sql"
+	"database/sql/driver"
+	"io"
+	"testing"
+
+	"gorm.io/driver/postgres"
+	"gorm.io/gorm"
+
+	accessauditapp "github.com/break/junhong_cmp_fiber/internal/application/accessaudit"
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
+)
+
+func init() { sql.Register("customer_binding_audit_test", customerAuditDriver{}) }
+
+type customerAuditDriver struct{}
+
+func (customerAuditDriver) Open(string) (driver.Conn, error) { return customerAuditConn{}, nil }
+
+type customerAuditConn struct{}
+
+func (customerAuditConn) Prepare(string) (driver.Stmt, error) { return nil, driver.ErrSkip }
+func (customerAuditConn) Close() error                        { return nil }
+func (customerAuditConn) Begin() (driver.Tx, error)           { return nil, driver.ErrSkip }
+func (customerAuditConn) QueryContext(context.Context, string, []driver.NamedValue) (driver.Rows, error) {
+	return &customerAuditRows{}, nil
+}
+
+type customerAuditRows struct{ sent bool }
+
+func (*customerAuditRows) Columns() []string { return []string{"id", "nickname"} }
+func (r *customerAuditRows) Close() error    { return nil }
+func (r *customerAuditRows) Next(dest []driver.Value) error {
+	if r.sent {
+		return io.EOF
+	}
+	r.sent = true
+	dest[0], dest[1] = int64(7), "客户"
+	return nil
+}
+
+type captureAuditWriter struct{ change accessauditapp.ChangeAudit }
+
+func (w *captureAuditWriter) WriteAccessChange(_ context.Context, _ *gorm.DB, change accessauditapp.ChangeAudit) error {
+	w.change = change
+	return nil
+}
+
+func TestWriteBindingAuditOmitsInternalAssets(t *testing.T) {
+	db, err := sql.Open("customer_binding_audit_test", "")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer db.Close()
+	tx, err := gorm.Open(postgres.New(postgres.Config{Conn: db}), &gorm.Config{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	writer := &captureAuditWriter{}
+	service := &Service{accessAudit: writer}
+	personalDevices := []accessauditapp.PersonalCustomerDeviceChange{{Binding: &model.PersonalCustomerDevice{Model: gorm.Model{ID: 2}, CustomerID: 7, VirtualNo: "DEVICE-1"}}}
+	personalICCIDs := []accessauditapp.PersonalCustomerICCIDChange{{Binding: &model.PersonalCustomerICCID{Model: gorm.Model{ID: 3}, CustomerID: 7, ICCID: "ICCID-1"}}}
+	cards := []accessauditapp.IotCardChange{{Card: &model.IotCard{Model: gorm.Model{ID: 9}}}}
+	devices := []accessauditapp.DeviceChange{{Device: &model.Device{Model: gorm.Model{ID: 10}}}}
+
+	if err := service.writeBindingAudit(context.Background(), tx, constants.AuditActionPersonalCustomerAssetBound, "绑定个人客户资产", 7, personalDevices, personalICCIDs, cards, devices); err != nil {
+		t.Fatalf("写入绑定审计失败: %v", err)
+	}
+	change := writer.change
+	if len(change.Cards) != 0 || len(change.Devices) != 0 {
+		t.Fatalf("绑定审计泄露内部资源: Cards=%d Devices=%d", len(change.Cards), len(change.Devices))
+	}
+	if change.PersonalCustomer == nil || change.PersonalCustomer.ID != 7 || len(change.PersonalDevices) != 1 || len(change.PersonalICCIDs) != 1 {
+		t.Fatalf("绑定审计未保留个人客户字段: %#v", change)
+	}
+	if change.SubjectData["asset_type"] != constants.AuditResourceIotCard || change.SubjectData["asset_id"] != uint(9) {
+		t.Fatalf("绑定审计未保留主体摘要: %#v", change.SubjectData)
+	}
+}