security: harden proxy IP trust, token flow, health and sessions

routes/api_user.py

@@ -321,13 +321,16 @@ def bind_user_email():
 @api_user_bp.route("/api/verify-bind-email/<token>")
 def verify_bind_email(token):
     """验证邮箱绑定Token"""
-    result = email_service.verify_bind_email_token(token)
+    result = email_service.verify_bind_email_token(token, consume=False)
 
     if result:
+        token_id = result["token_id"]
         user_id = result["user_id"]
         email = result["email"]
 
         if database.update_user_email(user_id, email, verified=True):
+            if not email_service.consume_email_token(token_id):
+                logger.warning(f"邮箱绑定成功但Token消费失败: token_id={token_id}, user_id={user_id}")
             return _render_verify_bind_success(email)
 
         return _render_verify_bind_failed(title="绑定失败", error_message="邮箱绑定失败，请重试")