feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all

backend/routes/polls.js

@@ -4,9 +4,10 @@ const { authenticate, requireRole } = require('../middleware/auth');
 
 const router = express.Router();
 
-router.get('/', authenticate, async (req, res) => {
-  const polls = await query('SELECT id, title, description, active, created_at FROM polls ORDER BY created_at DESC');
-  res.json(polls);
+router.get('/:id', authenticate, requireRole('owner'), async (req, res) => {
+  const p = await getRow('SELECT * FROM polls WHERE id = ?', [req.params.id]);
+  if (!p) return res.status(404).json({ error: '不存在' });
+  res.json(p);
 });
 
 router.get('/active', authenticate, async (req, res) => {