@GetMapping("/profile")
public ResponseEntity<BaseResponse<UserVO>> getProfile(
        HttpServletRequest request) {
    // 从请求头中提取用户 UUID
    UUID userId = HeaderUtil.getAuthorizeUserUuid(request);
    UserVO user = userService.getById(userId);
    return ResultUtil.success("查询成功", user);
}

public void recordUserAction(HttpServletRequest request, String action) {
    // 使用字符串格式，避免 UUID 解析开销
    String userId = HeaderUtil.getAuthorizeUserUuidString(request);
    log.info("用户 {} 执行操作: {}", userId, action);
}

public void validateReferer(HttpServletRequest request) {
    if (!HeaderUtil.hasReferer(request)) {
        throw new BusinessException("缺少 Referer", ErrorCode.FORBIDDEN);
    }

    String referer = HeaderUtil.getReferer(request);
    if (!isAllowedReferer(referer)) {
        throw new BusinessException("非法来源", ErrorCode.FORBIDDEN);
    }
}

public void logClientInfo(HttpServletRequest request) {
    if (HeaderUtil.hasUserAgent(request)) {
        String ua = HeaderUtil.getUserAgent(request);
        log.info("客户端: {}", ua);
    }
}