feat: 更新SproutGate前后端代码

sproutgate-backend/internal/handlers/secondary_email.go

@@ -46,6 +46,9 @@ func (h *Handler) RequestSecondaryEmail(c *gin.Context) {
 	if abortIfUserBanned(c, user) {
 		return
 	}
+	if abortIfTokenEpochStale(c, claims, user) {
+		return
+	}
 	if strings.TrimSpace(user.Email) == emailAddr {
 		c.JSON(http.StatusBadRequest, gin.H{"error": "email already used as primary"})
 		return
@@ -137,6 +140,9 @@ func (h *Handler) VerifySecondaryEmail(c *gin.Context) {
 	if abortIfUserBanned(c, user) {
 		return
 	}
+	if abortIfTokenEpochStale(c, claims, user) {
+		return
+	}
 	for _, e := range user.SecondaryEmails {
 		if e == emailAddr {
 			_ = h.store.DeleteSecondaryVerification(claims.Account, emailAddr)