调试信息脱敏并默认关闭trace

server/application/api/controller/ApiBase.php

@@ -95,7 +95,7 @@ class ApiBase extends Controller
                 'request' => [
                     'get' => $this->request->get(),
                     'post' => PasswordCryptoService::maskPasswordFields($this->request->post()),
-                    'header' => $this->request->header(),
+                    'header' => self::maskSensitiveHeaders($this->request->header()),
                 ]
             ];
         }
@@ -136,7 +136,7 @@ class ApiBase extends Controller
                 'request' => [
                     'get' => $this->request->get(),
                     'post' => PasswordCryptoService::maskPasswordFields($this->request->post()),
-                    'header' => $this->request->header(),
+                    'header' => self::maskSensitiveHeaders($this->request->header()),
                 ]
             ];
         }
@@ -150,5 +150,22 @@ class ApiBase extends Controller
         throw new HttpResponseException($response);
     }
 
+    /**
+     * User: 意象信息科技 lr
+     * Desc: 过滤调试信息中的敏感请求头
+     * @param array $headers
+     * @return array
+     */
+    private static function maskSensitiveHeaders(array $headers)
+    {
+        $sensitive = ['token', 'x-consume-token', 'authorization', 'cookie', 'set-cookie'];
+        foreach ($sensitive as $key) {
+            if (array_key_exists($key, $headers)) {
+                $headers[$key] = '******';
+            }
+        }
+        return $headers;
+    }
+
 
 }

server/config/app.php

@@ -23,7 +23,7 @@ return [
     // 应用调试模式
     'app_debug' => Env::get('app.app_debug', true),
     // 应用Trace
-    'app_trace' => Env::get('app.app_trace', true),
+    'app_trace' => Env::get('app.app_trace', false),
     // 是否支持多模块
     'app_multi_module' => true,
     // 入口自动绑定模块