feat(logging): 增强日志功能，新增请求和响应日志记录，敏感信息脱敏处理

build-and-run.bat

@@ -1,6 +1,9 @@
 @echo off
 echo Building and Running Chronic Disease App...
 
+REM Switch to script directory to ensure Maven runs in project folder
+pushd "%~dp0"
+
 REM Check if Maven is installed
 where mvn >nul 2>nul
 if %errorlevel% neq 0 (
@@ -45,4 +48,7 @@ if %errorlevel% neq 0 (
 )
 
 echo Running application...
-java -jar target/ChronicDiseaseApp-1.0-SNAPSHOT.jar
+java -jar target/ChronicDiseaseApp-1.0-SNAPSHOT.jar
+
+REM Return to original directory
+popd

src/main/java/work/baiyun/chronicdiseaseapp/aop/LoggingAspect.java

@@ -0,0 +1,93 @@
+package work.baiyun.chronicdiseaseapp.aop;
+
+import lombok.extern.slf4j.Slf4j;
+import org.aspectj.lang.ProceedingJoinPoint;
+import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.annotation.Aspect;
+import org.springframework.stereotype.Component;
+
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+@Aspect
+@Component
+@Slf4j
+public class LoggingAspect {
+
+    private static final long SLOW_METHOD_MS = 1000L;
+
+    private static final Pattern TOKEN_PATTERN = Pattern.compile("(token=)([a-f0-9]{32})", Pattern.CASE_INSENSITIVE);
+    private static final Pattern SECRET_PATTERN = Pattern.compile("(secret=)([a-f0-9]{32})", Pattern.CASE_INSENSITIVE);
+
+    @Around("@annotation(org.springframework.web.bind.annotation.RequestMapping) || " +
+            "@annotation(org.springframework.web.bind.annotation.GetMapping) || " +
+            "@annotation(org.springframework.web.bind.annotation.PostMapping)")
+    public Object logController(ProceedingJoinPoint joinPoint) throws Throwable {
+        String className = joinPoint.getTarget() == null ? "" : joinPoint.getTarget().getClass().getSimpleName();
+        String methodName = joinPoint.getSignature().getName();
+
+        Object[] args = joinPoint.getArgs();
+        try {
+            if (log.isDebugEnabled()) {
+                log.debug("{}.{}() 入参: {}", className, methodName, maskSensitiveArgs(args));
+            }
+
+            long start = System.currentTimeMillis();
+            Object result = joinPoint.proceed();
+            long cost = System.currentTimeMillis() - start;
+
+            if (log.isDebugEnabled()) {
+                log.debug("{}.{}() 耗时: {}ms, 结果: {}", className, methodName, cost, maskSensitiveResult(result));
+            }
+
+            if (cost > SLOW_METHOD_MS) {
+                log.warn("{}.{}() 执行缓慢: {}ms", className, methodName, cost);
+            }
+
+            return result;
+
+        } catch (Throwable t) {
+            long cost = System.currentTimeMillis();
+            log.error("{}.{}() 异常: {}", className, methodName, t.getMessage(), t);
+            throw t;
+        }
+    }
+
+    private Object maskSensitiveArgs(Object[] args) {
+        if (args == null) return null;
+        StringBuilder sb = new StringBuilder();
+        for (Object a : args) {
+            if (a == null) {
+                sb.append("null;");
+            } else {
+                String s = a.toString();
+                sb.append(desensitize(s)).append(";");
+            }
+        }
+        return sb.toString();
+    }
+
+    private Object maskSensitiveResult(Object result) {
+        if (result == null) return null;
+        String s = result.toString();
+        return desensitize(s);
+    }
+
+    private String desensitize(String input) {
+        if (input == null || input.isEmpty()) return input;
+        String out = replacePattern(TOKEN_PATTERN, input);
+        out = replacePattern(SECRET_PATTERN, out);
+        return out;
+    }
+
+    private String replacePattern(Pattern p, String input) {
+        Matcher m = p.matcher(input);
+        StringBuffer sb = new StringBuffer();
+        while (m.find()) {
+            String g1 = m.group(1);
+            m.appendReplacement(sb, g1 + "***");
+        }
+        m.appendTail(sb);
+        return sb.toString();
+    }
+}

src/main/java/work/baiyun/chronicdiseaseapp/filter/RequestLoggingFilter.java

@@ -0,0 +1,93 @@
+package work.baiyun.chronicdiseaseapp.filter;
+
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.extern.slf4j.Slf4j;
+import org.slf4j.MDC;
+import org.springframework.core.Ordered;
+import org.springframework.core.annotation.Order;
+import org.springframework.stereotype.Component;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+import java.util.UUID;
+
+@Component
+@Slf4j
+@Order(Ordered.LOWEST_PRECEDENCE - 50)
+public class RequestLoggingFilter extends OncePerRequestFilter {
+
+    private static final long SLOW_REQUEST_MS = 3000L;
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest request,
+                                    HttpServletResponse response,
+                                    FilterChain filterChain) throws ServletException, IOException {
+        long start = System.currentTimeMillis();
+
+        // ensure traceId/requestId/spanId exist in MDC for this request
+        String traceId = MDC.get("traceId");
+        if (traceId == null || traceId.isEmpty()) {
+            String fromHeader = request.getHeader("X-Trace-Id");
+            traceId = (fromHeader == null || fromHeader.isEmpty()) ? UUID.randomUUID().toString() : fromHeader;
+            MDC.put("traceId", traceId);
+            request.setAttribute("traceId", traceId);
+        }
+
+        String requestId = MDC.get("requestId");
+        if (requestId == null || requestId.isEmpty()) {
+            String fromHeader = request.getHeader("X-Request-Id");
+            requestId = (fromHeader == null || fromHeader.isEmpty()) ? UUID.randomUUID().toString() : fromHeader;
+            MDC.put("requestId", requestId);
+            request.setAttribute("requestId", requestId);
+        }
+
+        try {
+            if (log.isInfoEnabled()) {
+                log.info("▶▶ {} {} - {} [traceId:{}]", request.getMethod(), getRequestUri(request), getClientIp(request), traceId);
+            }
+
+            filterChain.doFilter(request, response);
+
+        } finally {
+            long cost = System.currentTimeMillis() - start;
+            int status = response.getStatus();
+            if (log.isInfoEnabled()) {
+                log.info("◀◀ {} {} - {}ms [status:{}, traceId:{}]",
+                        request.getMethod(), getRequestUriWithQuery(request), cost, status, traceId);
+            }
+
+            if (cost > SLOW_REQUEST_MS) {
+                log.warn("慢请求: {} {} 耗时: {}ms [status:{}, traceId:{}]", request.getMethod(), getRequestUriWithQuery(request), cost, status, traceId);
+            }
+
+            // 清理 MDC 中的值（若不是由后续组件清理）
+            MDC.remove("requestId");
+            MDC.remove("traceId");
+            MDC.remove("spanId");
+        }
+    }
+
+    private String getRequestUri(HttpServletRequest request) {
+        return request.getRequestURI();
+    }
+
+    private String getRequestUriWithQuery(HttpServletRequest request) {
+        String qs = request.getQueryString();
+        if (qs == null || qs.isEmpty()) return request.getRequestURI();
+        return request.getRequestURI() + "?" + qs;
+    }
+
+    private String getClientIp(HttpServletRequest request) {
+        String ip = request.getHeader("X-Forwarded-For");
+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {
+            ip = request.getHeader("X-Real-IP");
+        }
+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {
+            ip = request.getRemoteAddr();
+        }
+        return ip;
+    }
+}

src/main/resources/logback-spring.xml

@@ -1,25 +1,77 @@
 <configuration>
     <property name="LOG_PATH" value="${LOG_PATH:-./logs}" />
 
+    <property name="LOG_PATTERN" value="%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] [%X{requestId:-}] [%X{traceId:-}] [%X{spanId:-}] %-5level %logger{36} - %msg%n" />
+
+    <!-- Console -->
     <appender name="CONSOLE" class="ch.qos.logback.core.ConsoleAppender">
         <encoder>
-            <pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] [%X{requestId}] [%X{traceId}] %-5level %logger{36} - %msg%n</pattern>
+            <pattern>${LOG_PATTERN}</pattern>
+            <charset>UTF-8</charset>
         </encoder>
     </appender>
 
-    <appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
+    <!-- Detailed rolling file -->
+    <appender name="FILE_DETAIL" class="ch.qos.logback.core.rolling.RollingFileAppender">
         <file>${LOG_PATH}/app.log</file>
         <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
-            <fileNamePattern>${LOG_PATH}/app.%d{yyyy-MM-dd}.log</fileNamePattern>
+            <fileNamePattern>${LOG_PATH}/app.%d{yyyy-MM-dd}.log.gz</fileNamePattern>
             <maxHistory>30</maxHistory>
         </rollingPolicy>
         <encoder>
-            <pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] [%X{requestId}] [%X{traceId}] %-5level %logger{36} - %msg%n</pattern>
+            <pattern>${LOG_PATTERN}</pattern>
+            <charset>UTF-8</charset>
         </encoder>
     </appender>
 
+    <appender name="ASYNC_FILE" class="ch.qos.logback.classic.AsyncAppender">
+        <appender-ref ref="FILE_DETAIL" />
+        <queueSize>512</queueSize>
+        <discardingThreshold>0</discardingThreshold>
+    </appender>
+
+    <!-- Error-only rolling file -->
+    <appender name="FILE_ERROR" class="ch.qos.logback.core.rolling.RollingFileAppender">
+        <file>${LOG_PATH}/error.log</file>
+        <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
+            <level>WARN</level>
+        </filter>
+        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+            <fileNamePattern>${LOG_PATH}/error.%d{yyyy-MM-dd}.log.gz</fileNamePattern>
+            <maxHistory>90</maxHistory>
+        </rollingPolicy>
+        <encoder>
+            <pattern>${LOG_PATTERN}</pattern>
+            <charset>UTF-8</charset>
+        </encoder>
+    </appender>
+
+    <appender name="ASYNC_ERROR" class="ch.qos.logback.classic.AsyncAppender">
+        <appender-ref ref="FILE_ERROR" />
+        <queueSize>256</queueSize>
+    </appender>
+
+    <!-- Application logger -->
+    <logger name="work.baiyun.chronicdiseaseapp" level="DEBUG" additivity="false">
+        <appender-ref ref="CONSOLE" />
+        <appender-ref ref="ASYNC_FILE" />
+    </logger>
+
+    <!-- Third-party libraries reduce noise -->
+    <logger name="org.springframework" level="INFO" />
+    <logger name="org.hibernate" level="WARN" />
+    <logger name="com.zaxxer.hikari" level="WARN" />
+    <logger name="org.apache" level="WARN" />
+    <logger name="org.mybatis" level="WARN" />
+
+    <!-- SQL logs (if needed) -->
+    <logger name="work.baiyun.chronicdiseaseapp.mapper" level="DEBUG">
+        <appender-ref ref="ASYNC_FILE" />
+    </logger>
+
     <root level="INFO">
         <appender-ref ref="CONSOLE" />
-        <appender-ref ref="FILE" />
+        <appender-ref ref="ASYNC_FILE" />
+        <appender-ref ref="ASYNC_ERROR" />
     </root>
 </configuration>