fix(mfa): 修复双重验证漏洞

src/locales/en-US.ts

@@ -248,6 +248,22 @@ export default {
     serverError: 'Login failed, server error!',
     loginFailed: 'Login Failed',
     checkCredentials: 'Please check your username, password or two-factor authentication code!',
+    twoFactorAuth: 'Two-Factor Authentication',
+    loginWithPasskey: 'Login with Passkey',
+    loginWithOtp: 'Login with OTP',
+    orUsePasskey: 'Or use Passkey for verification',
+    verifyWithPasskey: 'Verify with Passkey',
+    otpPlaceholder: 'Enter 6-digit code',
+    passkeyLoginStartFailed: 'Failed to start Passkey authentication',
+    passkeyNotSelected: 'No Passkey selected',
+    passkeyLoginFailed: 'Passkey login failed',
+    passkeyAuthCanceled: 'Passkey authentication canceled',
+    passkeyLoginRetry: 'Passkey login failed, please try again',
+    passkeyVerifyFailed: 'Passkey verification failed',
+    passkeyVerifyFailedRetry: 'Passkey verification failed, please try again',
+    mfa: {
+      selectVerificationMethod: 'Please select a verification method',
+    },
   },
   menu: {
     start: 'Start',
@@ -380,7 +396,7 @@ export default {
     username: 'Username',
     usernameHint: 'Username for system login',
     password: 'Password',
-    passwordHint: 'Password for system login',
+    passwordHint: 'Please enter your login password',
     confirmPassword: 'Confirm Password',
     confirmPasswordHint: 'Please enter the password again to confirm',
     role: 'Role',
@@ -2598,6 +2614,9 @@ export default {
     otpCodeRequired: 'Please enter the 6-digit verification code',
     otpEnableSuccess: 'Two-factor authentication enabled successfully!',
     otpEnableFailed: 'Failed to enable OTP: {message}!',
+    otpDisableRestrictedByPasskey: 'You have registered Passkeys. Please delete all Passkeys before disabling OTP verification.',
+    confirmToDisableOtp: 'For security reasons, verifying your login password is required to disable two-factor authentication.',
+    confirmToDeletePasskey: 'For security reasons, verifying your login password is required to delete a Passkey.',
     authenticatorApp: 'Authenticator App',
     authenticatorAppDescription:
       'Use an authenticator app like Google Authenticator, Microsoft Authenticator, Authy, or 1Password to scan the QR code. It will generate a 6-digit code for you to enter below.',

src/locales/zh-CN.ts

@@ -247,6 +247,22 @@ export default {
     serverError: '登录失败，服务器错误！',
     loginFailed: '登录失败',
     checkCredentials: '请检查用户名、密码或双重验证码是否正确！',
+    twoFactorAuth: '双重验证',
+    loginWithPasskey: '使用通行密钥登录',
+    loginWithOtp: '使用验证码登录',
+    orUsePasskey: '或使用通行密钥进行验证',
+    verifyWithPasskey: '使用通行密钥验证',
+    otpPlaceholder: '请输入6位验证码',
+    passkeyLoginStartFailed: '启动通行密钥认证失败',
+    passkeyNotSelected: '未选择通行密钥',
+    passkeyLoginFailed: '通行密钥登录失败',
+    passkeyAuthCanceled: '通行密钥认证被取消',
+    passkeyLoginRetry: '通行密钥登录失败，请重试',
+    passkeyVerifyFailed: '通行密钥验证失败',
+    passkeyVerifyFailedRetry: '通行密钥验证失败，请重试',
+    mfa: {
+      selectVerificationMethod: '请选择验证方式',
+    },
   },
   menu: {
     start: '开始',
@@ -379,7 +395,7 @@ export default {
     username: '用户名',
     usernameHint: '用于登录系统的用户名',
     password: '密码',
-    passwordHint: '用于登录系统的密码',
+    passwordHint: '请输入登录密码',
     confirmPassword: '确认密码',
     confirmPasswordHint: '请再次输入密码以确认',
     role: '角色',
@@ -2567,6 +2583,9 @@ export default {
     otpCodeRequired: '请填写6位验证码',
     otpEnableSuccess: '开启登录双重验证成功！',
     otpEnableFailed: '开启otp失败：{message}！',
+    otpDisableRestrictedByPasskey: '您已注册通行密钥，请先删除所有通行密钥再关闭 OTP 验证。',
+    confirmToDisableOtp: '为了安全起见，关闭双重验证需要验证您的登录密码。',
+    confirmToDeletePasskey: '为了安全起见，删除通行密钥需要验证您的登录密码。',
     authenticatorApp: '身份验证器',
     authenticatorAppDescription:
       '使用像Google Authenticator、Microsoft Authenticator、Authy或1Password这样的身份验证器应用程序，扫描二维码。它将为您生成一个6位数的代码，供您在下方输入。',

src/locales/zh-TW.ts

@@ -248,6 +248,22 @@ export default {
     noPermission: '登錄失敗，您沒有任何功能權限，請聯繫管理員！',
     loginFailed: '登錄失敗',
     checkCredentials: '請檢查用戶名、密碼或雙重驗證碼是否正確！',
+    twoFactorAuth: '雙重驗證',
+    loginWithPasskey: '使用通行密鑰登錄',
+    loginWithOtp: '使用驗證碼登錄',
+    orUsePasskey: '或使用通行密鑰進行驗證',
+    verifyWithPasskey: '使用通行密鑰驗證',
+    otpPlaceholder: '請輸入6位驗證碼',
+    passkeyLoginStartFailed: '啟動通行密鑰驗證失敗',
+    passkeyNotSelected: '未選擇通行密鑰',
+    passkeyLoginFailed: '通行密鑰登錄失敗',
+    passkeyAuthCanceled: '通行密鑰驗證被取消',
+    passkeyLoginRetry: '通行密鑰登錄失敗，請重試',
+    passkeyVerifyFailed: '通行密鑰驗证失敗',
+    passkeyVerifyFailedRetry: '通行密鑰驗证失敗，請重試',
+    mfa: {
+      selectVerificationMethod: '請選擇驗证方式',
+    },
   },
   menu: {
     start: '開始',
@@ -380,7 +396,7 @@ export default {
     username: '用戶名',
     usernameHint: '用於登入系統的用戶名',
     password: '密碼',
-    passwordHint: '用於登入系統的密碼',
+    passwordHint: '請輸入登入密碼',
     confirmPassword: '確認密碼',
     confirmPasswordHint: '請再次輸入密碼以確認',
     role: '角色',
@@ -2553,6 +2569,9 @@ export default {
     otpCodeRequired: '請填寫6位驗證碼',
     otpEnableSuccess: '開啟登錄雙重驗證成功！',
     otpEnableFailed: '開啟otp失敗：{message}！',
+    otpDisableRestrictedByPasskey: '您已註冊通行密鑰，請先刪除所有通行密鑰再關閉 OTP 驗證。',
+    confirmToDisableOtp: '為了安全起見，關閉雙重驗證需要驗證您的登錄密碼。',
+    confirmToDeletePasskey: '為了安全起見，刪除通行密鑰需要驗證您的登錄密碼。',
     authenticatorApp: '身份驗證器',
     authenticatorAppDescription:
       '使用像Google Authenticator、Microsoft Authenticator、Authy或1Password這樣的身份驗證器應用程序，掃描二維碼。它將為您生成一個6位數的代碼，供您在下方輸入。',