Harden auth, CSRF, and email log UX

admin-frontend/src/pages/EmailPage.vue

@@ -477,6 +477,12 @@ function emailTypeLabel(type) {
   return map[type] || type
 }
 
+function emailLogUserLabel(row) {
+  if (row?.username && row?.user_id) return `${row.username} (#${row.user_id})`
+  if (row?.user_id) return `用户#${row.user_id}`
+  return '系统'
+}
+
 async function loadEmailStats() {
   emailStatsLoading.value = true
   try {
@@ -709,6 +715,11 @@ onMounted(refreshAll)
         <el-table :data="emailLogs" v-loading="emailLogsLoading" style="width: 100%">
           <el-table-column prop="created_at" label="时间" width="180" />
           <el-table-column prop="email_to" label="收件人" min-width="180" />
+          <el-table-column label="来源用户" min-width="160">
+            <template #default="{ row }">
+              <span class="ellipsis" :title="emailLogUserLabel(row)">{{ emailLogUserLabel(row) }}</span>
+            </template>
+          </el-table-column>
           <el-table-column label="类型" width="120">
             <template #default="{ row }">{{ emailTypeLabel(row.email_type) }}</template>
           </el-table-column>