feat(middleware): 添加 API 请求日志记录功能

- 新增 ApiRequestLog 模型用于存储请求日志
- 实现 ApiRequestLogMiddleware 中间件记录请求信息
- 在全局中间件配置中添加 ApiRequestLogMiddleware
- 添加 api_log 别名方便配置和使用

app/common/model/system/ApiRequestLog.php

@@ -0,0 +1,128 @@
+<?php
+/**
+ * @package merchant
+ *
+ * @author xaboy
+ * @day 2025-09-15
+ *
+ * 
+ */
+
+namespace app\common\model\system;
+
+use app\common\model\BaseModel;
+
+class ApiRequestLog extends BaseModel
+{
+
+    /**
+     * @return string
+     * @author xaboy
+     * @day 2025-09-15
+     */
+    public static function tablePk(): string
+    {
+        return 'log_id';
+    }
+
+    /**
+     * @return string
+     * @author xaboy
+     * @day 2025-09-15
+     */
+    public static function tableName(): string
+    {
+        return 'api_request_log';
+    }
+
+    /**
+     * 记录接口请求日志
+     * @param array $data
+     * @return bool
+     */
+    public static function record(array $data): bool
+    {
+        try {
+            $logData = [
+                'request_id' => $data['request_id'] ?? self::generateRequestId(),
+                'app_type' => $data['app_type'] ?? '',
+                'request_method' => $data['request_method'] ?? '',
+                'request_url' => $data['request_url'] ?? '',
+                'request_params' => isset($data['request_params']) ? json_encode($data['request_params'], JSON_UNESCAPED_UNICODE) : null,
+                'request_headers' => isset($data['request_headers']) ? json_encode($data['request_headers'], JSON_UNESCAPED_UNICODE) : null,
+                'request_ip' => $data['request_ip'] ?? '',
+                'user_agent' => $data['user_agent'] ?? '',
+                'user_id' => $data['user_id'] ?? 0,
+                'merchant_id' => $data['merchant_id'] ?? 0,
+                'admin_id' => $data['admin_id'] ?? 0,
+                'response_code' => $data['response_code'] ?? 0,
+                'response_data' => isset($data['response_data']) ? json_encode($data['response_data'], JSON_UNESCAPED_UNICODE) : null,
+                'response_time' => $data['response_time'] ?? 0,
+                'error_message' => $data['error_message'] ?? '',
+            ];
+
+            return self::create($logData) !== false;
+        } catch (\Exception $e) {
+            // 记录日志失败时不中断主流程
+            return false;
+        }
+    }
+
+    /**
+     * 生成请求唯一标识
+     * @return string
+     */
+    private static function generateRequestId(): string
+    {
+        return md5(uniqid('api_request_', true) . mt_rand(1000, 9999));
+    }
+
+    /**
+     * 根据请求ID查找日志
+     * @param string $requestId
+     * @return array|null
+     */
+    public static function findByRequestId(string $requestId): ?array
+    {
+        $log = self::getDB()->where('request_id', $requestId)->find();
+        return $log ? $log->toArray() : null;
+    }
+
+    /**
+     * 获取指定时间范围内的日志列表
+     * @param string $startTime
+     * @param string $endTime
+     * @param int $page
+     * @param int $limit
+     * @return array
+     */
+    public static function getListByTimeRange(string $startTime, string $endTime, int $page = 1, int $limit = 20): array
+    {
+        $query = self::getDB()
+            ->where('create_time', '>=', $startTime)
+            ->where('create_time', '<=', $endTime)
+            ->order('log_id', 'desc');
+
+        $total = $query->count();
+        $list = $query->page($page, $limit)->select()->toArray();
+
+        return [
+            'list' => $list,
+            'total' => $total,
+            'page' => $page,
+            'limit' => $limit,
+            'total_page' => ceil($total / $limit)
+        ];
+    }
+
+    /**
+     * 清理过期日志
+     * @param int $days 保留天数
+     * @return int
+     */
+    public static function clearExpiredLogs(int $days = 30): int
+    {
+        $expireTime = date('Y-m-d H:i:s', strtotime("-$days days"));
+        return self::getDB()->where('create_time', '<', $expireTime)->delete();
+    }
+}

app/middleware.php

@@ -1,6 +1,9 @@
 <?php
 // 全局中间件定义文件
 return [
+    // 接口请求记录中间件
+    \app\middleware\ApiRequestLogMiddleware::class,
+    
     // 全局请求缓存
     // \think\middleware\CheckRequestCache::class,
     // 多语言加载

app/middleware/ApiRequestLogMiddleware.php

@@ -0,0 +1,279 @@
+<?php
+declare (strict_types=1);
+
+namespace app\middleware;
+
+use app\common\model\system\ApiRequestLog;
+use crmeb\services\JwtTokenService;
+use think\facade\Request;
+use think\Response;
+
+class ApiRequestLogMiddleware
+{
+    /**
+     * 处理请求
+     *
+     * @param \think\Request $request
+     * @param \Closure       $next
+     * @return Response
+     */
+    public function handle($request, \Closure $next)
+    {
+        // 记录请求开始时间
+        $startTime = microtime(true);
+        
+        // 执行请求
+        $response = $next($request);
+        
+        // 记录请求结束时间和计算响应时间
+        $endTime = microtime(true);
+        $responseTime = (int)(($endTime - $startTime) * 1000); // 转换为毫秒
+        
+        try {
+            // 获取应用类型
+            $appType = $this->getAppType($request);
+            
+            // 从token中获取所有用户信息
+            $userInfo = $this->getUserInfoFromToken($request);
+            $userId = $userInfo['userId'] ?? 0;
+            $merchantId = $userInfo['merchantId'] ?? 0;
+            $adminId = $userInfo['adminId'] ?? 0;
+
+            // 记录请求日志
+            ApiRequestLog::record([
+                'app_type' => $appType,
+                'request_method' => $request->method(),
+                'request_url' => $request->url(),
+                'request_params' => $this->getRequestParams($request),
+                'request_headers' => $this->getRequestHeaders($request),
+                'request_ip' => $request->ip(),
+                'user_agent' => $request->header('user-agent', ''),
+                'user_id' => $userId,
+                'merchant_id' => $merchantId,
+                'admin_id' => $adminId,
+                'response_code' => $response->getCode(),
+                'response_data' => $this->getResponseData($response),
+                'response_time' => $responseTime,
+                'error_message' => $this->getErrorMessage($response),
+            ]);
+        } catch (\Exception $e) {
+            // 记录日志失败时不中断主流程
+            // 可以在这里添加日志记录失败的日志
+        }
+        
+        return $response;
+    }
+
+    /**
+     * 获取应用类型
+     * @param \think\Request $request
+     * @return string
+     */
+    private function getAppType($request): string
+    {
+        // 获取请求路径
+        $path = $request->pathinfo();
+
+        $position = strpos($path, '/');
+        if ($position === false) {
+            return 'unknown';
+        }
+
+        return substr($path, 0, $position);
+    }
+
+    /**
+     * 获取请求参数
+     * @param \think\Request $request
+     * @return array
+     */
+    private function getRequestParams($request): array
+    {
+        $params = $request->param();
+        
+        // 过滤敏感信息
+        $sensitiveFields = ['password', 'pwd', 'token', 'secret', 'key', 'authorization'];
+        foreach ($sensitiveFields as $field) {
+            if (isset($params[$field])) {
+                $params[$field] = '***';
+            }
+        }
+        
+        return $params;
+    }
+
+    /**
+     * 获取请求头信息
+     * @param \think\Request $request
+     * @return array
+     */
+    private function getRequestHeaders($request): array
+    {
+        $headers = $request->header();
+        
+        // 过滤敏感头信息
+        $sensitiveHeaders = ['authorization', 'cookie', 'token'];
+        foreach ($sensitiveHeaders as $header) {
+            if (isset($headers[$header])) {
+                $headers[$header] = '***';
+            }
+        }
+        
+        return $headers;
+    }
+
+    /**
+     * 获取响应数据
+     * @param Response $response
+     * @return array|null
+     */
+    private function getResponseData(Response $response): ?array
+    {
+        $content = $response->getContent();
+        
+        try {
+            $data = json_decode($content, true);
+            if (json_last_error() === JSON_ERROR_NONE) {
+                return $data;
+            }
+        } catch (\Exception $e) {
+            // JSON解析失败，返回原始内容的前1000个字符
+            return ['raw_content' => substr($content, 0, 1000)];
+        }
+        
+        return null;
+    }
+
+    /**
+     * 获取错误信息
+     * @param Response $response
+     * @return string
+     */
+    private function getErrorMessage(Response $response): string
+    {
+        if ($response->getCode() >= 400) {
+            $content = $response->getContent();
+            try {
+                $data = json_decode($content, true);
+                if (json_last_error() === JSON_ERROR_NONE && isset($data['msg'])) {
+                    return $data['msg'];
+                }
+            } catch (\Exception $e) {
+                return substr($content, 0, 500);
+            }
+        }
+        
+        return '';
+    }
+
+    /**
+     * 从token中解析adminId
+     * @param \think\Request $request
+     * @return int
+     */
+    private function getAdminIdFromToken($request): int
+    {
+        try {
+            $token = $this->getTokenFromRequest($request);
+            if (!$token) {
+                return 0;
+            }
+            
+            $jwtService = new JwtTokenService();
+            
+            try {
+                // 尝试解析token
+                $payload = $jwtService->parseToken($token);
+            } catch (\Exception $e) {
+                // 如果解析失败，尝试解码（不验证签名）
+                $payload = $jwtService->decode($token);
+            }
+            
+            // 检查token类型是否为admin，并且包含有效的ID
+            if (isset($payload->jti) && is_array($payload->jti) && count($payload->jti) >= 2) {
+                if ($payload->jti[1] === 'admin') {
+                    return (int)$payload->jti[0];
+                }
+            }
+        } catch (\Exception $e) {
+            // token解析失败，返回0
+            return 0;
+        }
+        
+        return 0;
+    }
+
+    /**
+     * 从请求中获取token
+     * @param \think\Request $request
+     * @return string|null
+     */
+    private function getTokenFromRequest($request): ?string
+    {
+        // 从header中获取token
+        $token = $request->header('X-Token');
+        if ($token && strpos($token, 'Bearer ') === 0) {
+            $token = substr($token, 7);
+        }
+        
+        // 如果header中没有，尝试从参数中获取
+        if (!$token) {
+            $token = $request->param('token');
+        }
+        
+        return $token ? trim($token) : null;
+    }
+
+    /**
+     * 从token中获取所有用户信息
+     * @param \think\Request $request
+     * @return array
+     */
+    private function getUserInfoFromToken($request): array
+    {
+        $result = [
+            'userId' => 0,
+            'merchantId' => 0,
+            'adminId' => 0
+        ];
+        
+        try {
+            $token = $this->getTokenFromRequest($request);
+            if (!$token) {
+                return $result;
+            }
+            
+            $jwtService = new JwtTokenService();
+            
+            try {
+                // 尝试解析token
+                $payload = $jwtService->parseToken($token);
+            } catch (\Exception $e) {
+                // 如果解析失败，尝试解码（不验证签名）
+                $payload = $jwtService->decode($token);
+            }
+            
+            // 检查token类型并获取对应的ID
+            if (isset($payload->jti) && is_array($payload->jti) && count($payload->jti) >= 2) {
+                $userId = (int)$payload->jti[0];
+                $userType = $payload->jti[1];
+                
+                switch ($userType) {
+                    case 'user':
+                        $result['userId'] = $userId;
+                        break;
+                    case 'mer':
+                        $result['merchantId'] = $userId;
+                        break;
+                    case 'admin':
+                        $result['adminId'] = $userId;
+                        break;
+                }
+            }
+        } catch (\Exception $e) {
+            // token解析失败，返回默认值
+        }
+        
+        return $result;
+    }
+}

config/middleware.php

@@ -2,7 +2,9 @@
 // 中间件配置
 return [
     // 别名或分组
-    'alias'    => [],
+    'alias'    => [
+        'api_log' => \app\middleware\ApiRequestLogMiddleware::class,
+    ],
     // 优先级设置，此数组中的中间件会按照数组中的顺序优先执行
     'priority' => [],
 ];