fix(mfa): 修复双重验证漏洞

2026-07-12 07:51:38 +08:00 · 2025-12-23 14:57:43 +08:00
parent 6b4ba8bfad
commit 7b99f09810
6 changed files with 104 additions and 65 deletions
--- a/app/api/endpoints/login.py
+++ b/app/api/endpoints/login.py
@@ -33,7 +33,7 @@ def login_access_token(
        if user_or_message == "MFA_REQUIRED":
            raise HTTPException(
                status_code=401, 
-                detail="需要双重验证",
+                detail="需要双重验证，请提供验证码或使用通行密钥",
                headers={"X-MFA-Required": "true"}
            )
        raise HTTPException(status_code=401, detail=user_or_message)
@@ -57,7 +57,7 @@ def login_access_token(
        avatar=user_or_message.avatar,
        level=level,
        permissions=user_or_message.permissions or {},
-        widzard=show_wizard
+        wizard=show_wizard
    )