iven
c4b2de8294
fix(diary): 家长绑定改为两步验证 — 孩子确认后才生效
- bind_child: 创建 pending 状态绑定(不再自动 verified)
- validate_child_user: 验证目标用户存在且有 student 角色
- confirm_binding: 孩子确认后状态变为 verified,家长获得访问权限
- reject_binding: 孩子拒绝绑定请求
- list_pending_for_child: 孩子查看待确认绑定列表
- 新增 3 个 API 端点: /parent/pending, /bindings/{id}/confirm, /bindings/{id}/reject
- 防止未授权绑定(任何人不验证即可绑定孩子的漏洞)
审计 ID: S-10
2026-06-03 10:03:50 +08:00
..
2026-06-01 11:19:43 +08:00
2026-06-03 09:56:24 +08:00
2026-06-02 21:33:47 +08:00
2026-06-01 09:32:09 +08:00
2026-06-01 23:20:18 +08:00
2026-06-01 23:53:34 +08:00
2026-06-01 11:19:43 +08:00
2026-06-01 09:32:09 +08:00
2026-06-03 10:03:50 +08:00
2026-06-02 23:54:04 +08:00
2026-06-01 23:20:18 +08:00
2026-06-02 23:01:13 +08:00