feat(mobile): only allow request from mobile client to copy session

routers/controllers/user.go

@@ -395,5 +395,4 @@ func UserPerformCopySession(c *gin.Context) {
 	} else {
 		c.JSON(200, ErrorResponse(err))
 	}
-
 }

routers/router.go

@@ -234,7 +234,12 @@ func InitMasterRouter() *gin.Engine {
 				file.GET("archive/:sessionID/archive.zip", controllers.DownloadArchive)
 			}
 
-			sign.GET("user/session/copy/:id", controllers.UserPerformCopySession)
+			// Copy user session
+			sign.GET(
+				"user/session/copy/:id",
+				middleware.MobileRequestOnly(),
+				controllers.UserPerformCopySession,
+			)
 		}
 
 		// 从机的 RPC 通信