fix(security): complete security and delivery compliance remediation

backend/app/middleware/audit_middleware.py

@@ -26,6 +26,21 @@ _LOG_GET_PATHS = {
     "/api/auth/profile",
 }
 
+_SENSITIVE_PARAM_MARKERS = ("password", "passwd", "secret", "token", "authorization", "credential", "code")
+
+
+def sanitize_audit_params(value):
+    """Recursively redact sensitive request parameters before asynchronous logging."""
+    if isinstance(value, dict):
+        return {
+            key: "***" if any(marker in key.lower() for marker in _SENSITIVE_PARAM_MARKERS)
+            else sanitize_audit_params(item)
+            for key, item in value.items()
+        }
+    if isinstance(value, list):
+        return [sanitize_audit_params(item) for item in value]
+    return value
+
 
 def _should_log(method: str, path: str) -> bool:
     for skip in _SKIP_PATHS:
@@ -62,11 +77,7 @@ class AuditMiddleware(BaseHTTPMiddleware):
             if body_bytes:
                 try:
                     request_params = json.loads(body_bytes)
-                    # 脱敏：移除密码字段
-                    if isinstance(request_params, dict):
-                        for k in ("password", "passwd", "secret"):
-                            if k in request_params:
-                                request_params[k] = "***"
+                    request_params = sanitize_audit_params(request_params)
                 except Exception:
                     pass
         except Exception: