实现审计覆盖门禁与外部集成日志闭环

pkg/logger/middleware.go

@@ -5,10 +5,10 @@ import (
 	"crypto/sha256"
 	"encoding/hex"
 	"net/url"
-	"strings"
 	"time"
 
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
+	"github.com/break/junhong_cmp_fiber/pkg/sanitizer"
 	"github.com/bytedance/sonic"
 	"github.com/gofiber/fiber/v2"
 	"go.uber.org/zap"
@@ -135,20 +135,7 @@ func sanitizeJSONValue(value any) {
 
 // shouldMaskField 判断字段名是否属于访问日志敏感字段
 func shouldMaskField(key string) bool {
-	normalized := strings.ToLower(key)
-	return strings.Contains(normalized, "password") ||
-		strings.Contains(normalized, "passwd") ||
-		strings.Contains(normalized, "credential") ||
-		strings.Contains(normalized, "authorization") ||
-		strings.Contains(normalized, "cookie") ||
-		strings.Contains(normalized, "key") ||
-		strings.Contains(normalized, "url") ||
-		strings.Contains(normalized, "qr_content") ||
-		strings.Contains(normalized, "verification_code") ||
-		strings.Contains(normalized, "sign") ||
-		strings.Contains(normalized, "nonce") ||
-		strings.Contains(normalized, "token") ||
-		strings.Contains(normalized, "secret")
+	return sanitizer.IsForbiddenField(key)
 }
 
 // Middleware 创建 Fiber 日志中间件