From 12732229b53d2280074cea3f91f3aa67b578ac7f Mon Sep 17 00:00:00 2001
From: 刘帅 <rr.iii@qq.com>
Date: 星期四, 17 九月 2026 17:56:05 +0800
Subject: [PATCH] feat&bug:操作日志修改

---
 cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/AccountAuditGlobalFilter.java |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/AccountAuditGlobalFilter.java b/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/AccountAuditGlobalFilter.java
index bfb58fa..d4bbe97 100644
--- a/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/AccountAuditGlobalFilter.java
+++ b/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/AccountAuditGlobalFilter.java
@@ -65,7 +65,8 @@
             audit.put("requestMethod", request.getMethodValue());
             audit.put("requestUri", uri);
             audit.put("requestParams", maskedQuery(request));
-            audit.put("userAccount", mask(username(request)));
+            // 审计账号用于追溯操作人,必须保留原始账号;手机号、证件号等请求参数仍按规则脱敏。
+            audit.put("userAccount", username(request));
             audit.put("clientIp", clientIp(request));
             int status = exchange.getResponse().getStatusCode() == null ? 200 : exchange.getResponse().getStatusCode().value();
             audit.put("result", status < 400 ? "SUCCESS" : "FAIL");
@@ -122,6 +123,5 @@
                 key.toLowerCase().matches(".*(password|token|secret|idcard|bank|phone|mobile).*") ? "***" : value));
         return JSON.toJSONString(values);
     }
-    private String mask(String value) { return StringUtils.isBlank(value) ? null : value.length() <= 4 ? "***" : value.substring(0, 3) + "***" + value.substring(value.length() - 2); }
     private String clientIp(ServerHttpRequest request) { String value = request.getHeaders().getFirst("X-Forwarded-For"); return StringUtils.isBlank(value) ? String.valueOf(request.getRemoteAddress()) : value.split(",")[0].trim(); }
 }

--
Gitblit v1.7.1