@liujitcn/kratos-admin-core 0.0.66 → 0.0.68

package/dist/package/declarations/src/api/base/v1/login.d.ts

@@ -1,4 +1,4 @@
-import type { CaptchaRequest, CaptchaResponse, LogoutRequest, LoginRequest, LoginResponse, PasswordPublicKeyRequest, PasswordPublicKeyResponse, RefreshTokenRequest, RefreshTokenResponse, VerifyCaptchaRequest, VerifyCaptchaResponse, LoginService } from "../../../rpc/base/v1/login";
+import type { CaptchaRequest, CaptchaResponse, LogoutRequest, LoginRequest, LoginResponse, RefreshTokenRequest, RefreshTokenResponse, VerifyCaptchaRequest, VerifyCaptchaResponse, LoginService } from "../../../rpc/base/v1/login";
 import type { Empty } from "../../../rpc/google/protobuf/empty";
 /** 登录公共服务 */
 export declare class LoginServiceImpl implements LoginService {
@@ -6,8 +6,6 @@ export declare class LoginServiceImpl implements LoginService {
     Captcha(request: CaptchaRequest): Promise<CaptchaResponse>;
     /** 验证码预校验 */
     VerifyCaptcha(request: VerifyCaptchaRequest): Promise<VerifyCaptchaResponse>;
-    /** 获取密码临时公钥 */
-    PasswordPublicKey(request: PasswordPublicKeyRequest): Promise<PasswordPublicKeyResponse>;
     /** 登录 */
     Login(request: LoginRequest): Promise<LoginResponse>;
     /** 登出 */

package/dist/package/declarations/src/api/base/v1/secret_crypto.d.ts

@@ -0,0 +1,9 @@
+import type { GetSecretPublicKeyRequest, GetSecretPublicKeyResponse, RevealSecretFieldRequest, RevealSecretFieldResponse, SecretCryptoService } from "../../../rpc/base/v1/secret_crypto";
+/** 敏感字段加密公共服务 */
+export declare class SecretCryptoServiceImpl implements SecretCryptoService {
+    /** 获取敏感字段临时公钥 */
+    GetSecretPublicKey(request: GetSecretPublicKeyRequest): Promise<GetSecretPublicKeyResponse>;
+    /** 查看密钥字段明文 */
+    RevealSecretField(request: RevealSecretFieldRequest): Promise<RevealSecretFieldResponse>;
+}
+export declare const defSecretCryptoService: SecretCryptoServiceImpl;

package/dist/package/declarations/src/components/Dialog/PasswordVerifyDialog.vue.d.ts

@@ -1,6 +1,5 @@
 import type { ProFormLabelPosition } from "../../components/ProForm/interface";
-import type { PasswordCryptoScene } from "../../utils/passwordCrypto";
-import type { PasswordCrypto } from "../../rpc/common/v1/types";
+import type { SecretCrypto } from "../../rpc/common/v1/types";
 /** 通用密码验证弹窗属性。 */
 interface PasswordVerifyDialogProps {
     /** 弹窗显示状态。 */
@@ -23,8 +22,6 @@ interface PasswordVerifyDialogProps {
     cancelText?: string;
     /** 外部业务提交状态。 */
     confirmLoading?: boolean;
-    /** 密码加密场景。 */
-    scene?: PasswordCryptoScene;
     /** 是否关闭时销毁内容。 */
     destroyOnClose?: boolean;
     /** 是否允许点击遮罩关闭。 */
@@ -37,13 +34,13 @@ interface PasswordVerifyDialogProps {
     labelPosition?: ProFormLabelPosition;
 }
 declare const __VLS_export: import("vue").DefineComponent<PasswordVerifyDialogProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
-    confirm: (password: PasswordCrypto) => any;
+    confirm: (password: SecretCrypto) => any;
     close: () => any;
     "update:modelValue": (value: boolean) => any;
     closed: () => any;
     cancel: () => any;
 }, string, import("vue").PublicProps, Readonly<PasswordVerifyDialogProps> & Readonly<{
-    onConfirm?: ((password: PasswordCrypto) => any) | undefined;
+    onConfirm?: ((password: SecretCrypto) => any) | undefined;
     onClose?: (() => any) | undefined;
     "onUpdate:modelValue"?: ((value: boolean) => any) | undefined;
     onClosed?: (() => any) | undefined;
@@ -63,7 +60,6 @@ declare const __VLS_export: import("vue").DefineComponent<PasswordVerifyDialogPr
     labelPosition: ProFormLabelPosition;
     passwordLabel: string;
     passwordPlaceholder: string;
-    scene: PasswordCryptoScene;
 }, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 declare const _default: typeof __VLS_export;
 export default _default;

package/dist/package/declarations/src/components/ProForm/components/ProFormItem.vue.d.ts

@@ -4,23 +4,23 @@ interface ProFormItemProps {
     field: ProFormField;
     model: Record<string, any>;
 }
-declare var __VLS_10: string, __VLS_11: {
+declare var __VLS_16: string, __VLS_17: {
     field: ProFormField;
     model: Record<string, any>;
-}, __VLS_145: string, __VLS_146: {
+}, __VLS_157: string, __VLS_158: {
     option: import("element-plus").TransferDataItem;
     field: ProFormField;
     model: Record<string, any>;
-}, __VLS_191: string, __VLS_192: {
+}, __VLS_203: string, __VLS_204: {
     field: ProFormField;
     model: Record<string, any>;
 };
 type __VLS_Slots = {} & {
-    [K in NonNullable<typeof __VLS_10>]?: (props: typeof __VLS_11) => any;
+    [K in NonNullable<typeof __VLS_16>]?: (props: typeof __VLS_17) => any;
 } & {
-    [K in NonNullable<typeof __VLS_145>]?: (props: typeof __VLS_146) => any;
+    [K in NonNullable<typeof __VLS_157>]?: (props: typeof __VLS_158) => any;
 } & {
-    [K in NonNullable<typeof __VLS_191>]?: (props: typeof __VLS_192) => any;
+    [K in NonNullable<typeof __VLS_203>]?: (props: typeof __VLS_204) => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<ProFormItemProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<ProFormItemProps> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;

package/dist/package/declarations/src/components/ProForm/components/SecretInput.vue.d.ts

@@ -0,0 +1,23 @@
+import type { ProFormSecretConfig } from "../../../components/ProForm/interface";
+/** SecretInput 组件属性。 */
+interface SecretInputProps {
+    /** 字段值。 */
+    modelValue?: string;
+    /** 查看配置：声明后眼睛点击时按需拉取明文。 */
+    secret?: boolean | ProFormSecretConfig;
+    /** 查看的资源标识。 */
+    resource?: string;
+    /** 查看的字段名。 */
+    fieldName?: string;
+    /** 记录ID。 */
+    recordId?: number;
+    /** 是否已配置密钥。 */
+    configured?: boolean;
+}
+declare const __VLS_export: import("vue").DefineComponent<SecretInputProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
+    "update:modelValue": (value: string) => any;
+}, string, import("vue").PublicProps, Readonly<SecretInputProps> & Readonly<{
+    "onUpdate:modelValue"?: ((value: string) => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/package/declarations/src/components/ProForm/interface/index.d.ts

@@ -1,7 +1,7 @@
 import type { FormItemRule } from "element-plus";
 import type { Component } from "vue";
 /** ProForm 支持的字段组件类型。 */
-export type ProFormComponentType = "input" | "password" | "textarea" | "yaml-editor" | "input-number" | "color-picker" | "segmented" | "switch" | "checkbox" | "select" | "tenant-select" | "dict" | "radio-group" | "checkbox-group" | "tree-select" | "date-picker" | "cron-expression" | "transfer" | "image-upload" | "images-upload" | "file-upload" | "files-upload" | "rich-text" | "dynamic-list" | "kv-list" | "slot";
+export type ProFormComponentType = "input" | "password" | "textarea" | "yaml-editor" | "input-number" | "color-picker" | "segmented" | "switch" | "checkbox" | "select" | "cascader" | "tenant-select" | "dict" | "radio-group" | "checkbox-group" | "tree-select" | "date-picker" | "cron-expression" | "transfer" | "image-upload" | "images-upload" | "file-upload" | "files-upload" | "rich-text" | "dynamic-list" | "kv-list" | "slot";
 /** ProForm 标签布局方向。 */
 export type ProFormLabelPosition = "left" | "right" | "top";
 /** ProForm 选择型字段选项。 */
@@ -15,6 +15,17 @@ export interface ProFormOption {
     /** Element Plus 懒加载树节点是否为叶子节点。 */
     isLeaf?: boolean;
 }
+/** secret 字段的查看配置：声明后输入框眼睛点击时按需拉取明文。 */
+export interface ProFormSecretConfig {
+    /** 查看明文的资源标识。 */
+    resource: string;
+    /** 查看明文的字段名。 */
+    field: string;
+    /** 记录ID字段名，默认 "id"。 */
+    idProp?: string;
+    /** 已配置标记字段名，默认 `${field}_configured`。 */
+    configuredProp?: string;
+}
 /** ProForm 字段配置。 */
 export interface ProFormField {
     /** 字段绑定路径，支持点路径访问嵌套对象。 */
@@ -39,6 +50,8 @@ export interface ProFormField {
     suffixSlotName?: string;
     /** 标题提示文案。 */
     labelTooltip?: string;
+    /** 提交时是否加密为 SecretCrypto 结构；配置对象时输入框眼睛支持按需查看明文。 */
+    secret?: boolean | ProFormSecretConfig;
     /** 字段校验规则。 */
     rules?: FormItemRule[];
     /** 字段是否显示。 */

package/dist/package/declarations/src/locales/generated.d.ts

@@ -481,6 +481,14 @@ export declare const LOCALE_MESSAGES: {
         "core.demo.detail.timeline.updated": string;
         "core.demo.detail.timeline.enabled": string;
         "core.demo.detail.timeline.disabled": string;
+        "core.password.reveal_unsupported": string;
+        "core.password.reveal_failed": string;
+        "core.demo.table.tag_item": string;
+        "core.demo.table.money_unit": string;
+        "core.demo.form.tenant.main": string;
+        "core.demo.form.tenant.sub": string;
+        "core.demo.form.leader_title": string;
+        "core.demo.tree.new_dir": string;
     };
     readonly "en-US": {
         "common.action.back": string;
@@ -960,6 +968,14 @@ export declare const LOCALE_MESSAGES: {
         "core.demo.detail.timeline.updated": string;
         "core.demo.detail.timeline.enabled": string;
         "core.demo.detail.timeline.disabled": string;
+        "core.password.reveal_unsupported": string;
+        "core.password.reveal_failed": string;
+        "core.demo.table.tag_item": string;
+        "core.demo.table.money_unit": string;
+        "core.demo.form.tenant.main": string;
+        "core.demo.form.tenant.sub": string;
+        "core.demo.form.leader_title": string;
+        "core.demo.tree.new_dir": string;
     };
     readonly "ja-JP": {
         "common.action.back": string;
@@ -1439,6 +1455,14 @@ export declare const LOCALE_MESSAGES: {
         "core.demo.detail.timeline.updated": string;
         "core.demo.detail.timeline.enabled": string;
         "core.demo.detail.timeline.disabled": string;
+        "core.password.reveal_unsupported": string;
+        "core.password.reveal_failed": string;
+        "core.demo.table.tag_item": string;
+        "core.demo.table.money_unit": string;
+        "core.demo.form.tenant.main": string;
+        "core.demo.form.tenant.sub": string;
+        "core.demo.form.leader_title": string;
+        "core.demo.tree.new_dir": string;
     };
     readonly "zh-TW": {
         "common.action.back": string;
@@ -1918,6 +1942,14 @@ export declare const LOCALE_MESSAGES: {
         "core.demo.detail.timeline.updated": string;
         "core.demo.detail.timeline.enabled": string;
         "core.demo.detail.timeline.disabled": string;
+        "core.password.reveal_unsupported": string;
+        "core.password.reveal_failed": string;
+        "core.demo.table.tag_item": string;
+        "core.demo.table.money_unit": string;
+        "core.demo.form.tenant.main": string;
+        "core.demo.form.tenant.sub": string;
+        "core.demo.form.leader_title": string;
+        "core.demo.tree.new_dir": string;
     };
 };
 export type GeneratedLocale = keyof typeof LOCALE_MESSAGES;

package/dist/package/declarations/src/rpc/base/v1/login.d.ts

@@ -1,22 +1,5 @@
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
-/** 密码加密场景枚举。 */
-export declare enum PasswordCryptoScene {
-    /** PASSWORD_CRYPTO_SCENE_UNSPECIFIED - 未指定密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_UNSPECIFIED = 0,
-    /** PASSWORD_CRYPTO_SCENE_LOGIN - 登录密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_LOGIN = 1,
-    /** PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER - 新增后台用户密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_CREATE_BASE_USER = 2,
-    /** PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD - 重置后台用户密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD = 3,
-    /** PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD - 个人修改密码加密场景。 */
-    PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD = 4,
-    /** PASSWORD_CRYPTO_SCENE_MFA - 多因素认证敏感操作场景。 */
-    PASSWORD_CRYPTO_SCENE_MFA = 5,
-    /** PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY - 密码策略初始化密码配置场景。 */
-    PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY = 6
-}
 /**
  * LoginStatus 表示登录请求当前所处的认证阶段。
  * 只有 AUTHENTICATED 或 PASSWORD_CHANGE_REQUIRED 才会携带正式访问令牌，MFA 状态必须继续完成挑战。
@@ -38,11 +21,6 @@ export interface CaptchaRequest {
     /** 验证码类型，random 表示随机选择当前支持的验证码类型 */
     type: string;
 }
-/** 密码临时公钥获取条件 */
-export interface PasswordPublicKeyRequest {
-    /** 使用场景 */
-    scene: PasswordCryptoScene;
-}
 /** 登出请求条件 */
 export interface LogoutRequest {
 }
@@ -69,19 +47,6 @@ export interface VerifyCaptchaResponse {
     /** 有效时间，单位秒 */
     expires_in: number;
 }
-/** 密码临时公钥响应 */
-export interface PasswordPublicKeyResponse {
-    /** 临时密钥ID */
-    key_id: string;
-    /** 临时公钥 */
-    public_key: string;
-    /** 加密算法 */
-    algorithm: string;
-    /** 随机值 */
-    nonce: string;
-    /** 有效时间，单位秒 */
-    expires_in: number;
-}
 /** 刷新令牌请求参数 */
 export interface RefreshTokenRequest {
     /** 更新令牌；未填写时由服务端从HttpOnly Cookie读取。 */
@@ -105,7 +70,7 @@ export interface LoginRequest {
     /** 用户名，必选项。 */
     user_name: string;
     /** 用户的密码，必选项。 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** 验证码 */
     captcha_code: string;
     /** 验证码Id */
@@ -142,8 +107,6 @@ export interface LoginService {
     Captcha(request: CaptchaRequest): Promise<CaptchaResponse>;
     /** 验证码预校验 */
     VerifyCaptcha(request: VerifyCaptchaRequest): Promise<VerifyCaptchaResponse>;
-    /** 获取密码临时公钥 */
-    PasswordPublicKey(request: PasswordPublicKeyRequest): Promise<PasswordPublicKeyResponse>;
     /** 登出 */
     Logout(request: LogoutRequest): Promise<Empty>;
     /** 刷新认证令牌 */

package/dist/package/declarations/src/rpc/base/v1/mfa.d.ts

@@ -1,4 +1,4 @@
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
 import type { LoginResponse } from "./login";
 /** 多因素认证校验请求。 */
@@ -63,7 +63,7 @@ export interface MfaStatusResponse {
 /** 开始绑定多因素认证请求。 */
 export interface BeginMfaSetupRequest {
     /** 当前登录密码 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** 强制绑定场景下的临时票据 */
     setup_ticket: string;
 }
@@ -111,7 +111,7 @@ export interface BeginMfaDisableResponse {
 /** 禁用多因素认证请求。 */
 export interface DisableMfaRequest {
     /** 当前登录密码 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** TOTP 动态口令 */
     code: string;
     /** WebAuthn 禁用挑战 ID */

package/dist/package/declarations/src/rpc/base/v1/oauth.d.ts

@@ -1,4 +1,4 @@
-import type { PasswordCrypto } from "../../common/v1/types";
+import type { SecretCrypto } from "../../common/v1/types";
 import type { Empty } from "../../google/protobuf/empty";
 import type { LoginStatus } from "./login";
 /** 个人中心三方账号绑定列表查询条件 */
@@ -59,7 +59,7 @@ export interface BindOauthSessionRequest {
     /** 用户名 */
     user_name: string;
     /** 用户密码 */
-    password: PasswordCrypto | undefined;
+    password: SecretCrypto | undefined;
     /** 验证码 */
     captcha_code: string;
     /** 验证码Id */

package/dist/package/declarations/src/rpc/base/v1/secret_crypto.d.ts

@@ -0,0 +1,37 @@
+/** 敏感字段临时公钥获取条件 */
+export interface GetSecretPublicKeyRequest {
+}
+/** 敏感字段临时公钥响应 */
+export interface GetSecretPublicKeyResponse {
+    /** 临时密钥ID */
+    key_id: string;
+    /** 临时公钥 */
+    public_key: string;
+    /** 加密算法 */
+    algorithm: string;
+    /** 随机值 */
+    nonce: string;
+    /** 有效时间，单位秒 */
+    expires_in: number;
+}
+/** 密钥字段查看条件 */
+export interface RevealSecretFieldRequest {
+    /** 资源标识，如 ai_provider、base_oauth_provider、base_message_provider */
+    resource: string;
+    /** 记录ID */
+    id: number;
+    /** 字段名，如 api_key、client_secret */
+    field: string;
+}
+/** 密钥字段查看响应 */
+export interface RevealSecretFieldResponse {
+    /** 密钥明文 */
+    text: string;
+}
+/** 敏感字段加密公共服务 */
+export interface SecretCryptoService {
+    /** 获取敏感字段临时公钥，同一次提交的多个密文字段共用该公钥 */
+    GetSecretPublicKey(request: GetSecretPublicKeyRequest): Promise<GetSecretPublicKeyResponse>;
+    /** 查看密钥字段明文，仅允许查询注册过的密钥字段 */
+    RevealSecretField(request: RevealSecretFieldRequest): Promise<RevealSecretFieldResponse>;
+}

package/dist/package/declarations/src/rpc/common/v1/types.d.ts

@@ -43,8 +43,8 @@ export interface BytesValues {
     /** 值列表。 */
     value: Uint8Array[];
 }
-/** 密码密文。 */
-export interface PasswordCrypto {
+/** 敏感字段密文，密码与各类密钥字段统一使用。 */
+export interface SecretCrypto {
     /** 临时密钥ID */
     key_id: string;
     /** 随机值 */
@@ -55,6 +55,6 @@ export interface PasswordCrypto {
     encrypted_key: string;
     /** 初始化向量 */
     iv: string;
-    /** 密码加密数据 */
-    ciphertext: string;
+    /** 传输时为密文，服务端解密后回填明文 */
+    text: string;
 }

package/dist/package/declarations/src/rpc/system/admin/v1/auth.d.ts

@@ -1,4 +1,4 @@
-import type { PasswordCrypto, StringValues } from "../../../common/v1/types";
+import type { SecretCrypto, StringValues } from "../../../common/v1/types";
 import type { Empty } from "../../../google/protobuf/empty";
 import type { BaseUserIDType } from "../../common/v1/common";
 import type { BaseMenuType } from "./common";
@@ -151,9 +151,9 @@ export interface RouteParams {
 /** 用户密码表单 */
 export interface UserPasswordForm {
     /** 原密码 */
-    old_pwd: PasswordCrypto | undefined;
+    old_pwd: SecretCrypto | undefined;
     /** 新密码 */
-    new_pwd: PasswordCrypto | undefined;
+    new_pwd: SecretCrypto | undefined;
 }
 /** 用户手机号表单 */
 export interface UserPhoneForm {

package/dist/package/declarations/src/security.d.ts

@@ -1,5 +1,5 @@
 export * from "./utils/oauthProvider";
-export * from "./utils/passwordCrypto";
+export * from "./utils/secretCrypto";
 export * from "./utils/passwordStrength";
 export * from "./utils/webauthn";
 export * from "./utils/clipboard";

package/dist/package/declarations/src/utils/secretCrypto.d.ts

@@ -0,0 +1,19 @@
+import type { GetSecretPublicKeyResponse } from "../rpc/base/v1/secret_crypto";
+import type { SecretCrypto } from "../rpc/common/v1/types";
+import type { ProFormField } from "../components/ProForm/interface";
+/** 获取敏感字段一次性临时公钥，同一次提交的多个密文字段共用该公钥。 */
+export declare function fetchSecretPublicKey(): Promise<GetSecretPublicKeyResponse>;
+/** encodeSecretFields 在提交前把声明 secret 的字段统一加密为 SecretCrypto，返回模型浅克隆且不改动原表单。 */
+export declare function encodeSecretFields(fields: ProFormField[], model: Record<string, any>): Promise<Record<string, any>>;
+/** 使用已获取的临时公钥加密单个敏感值，供一次取钥加密多个字段的场景复用。 */
+export declare function encryptWithPublicKey(publicKey: GetSecretPublicKeyResponse, value: string): Promise<SecretCrypto>;
+/** 加密单个敏感字段值，自动获取一次性临时公钥。 */
+export declare function encryptSecret(value: string): Promise<SecretCrypto>;
+/** SecretRevealHandler 按资源标识与字段名查看密钥明文的实现。 */
+export type SecretRevealHandler = (resource: string, id: number, field: string) => Promise<string>;
+/** registerSecretRevealHandler 注册密钥明文查看实现，由业务模块在启动时注入。 */
+export declare function registerSecretRevealHandler(handler: SecretRevealHandler): void;
+/** revealSecret 查看注册过的密钥字段明文。 */
+export declare function revealSecret(resource: string, id: number, field: string): Promise<string>;
+/** 加密密码字段：去除首尾空白且不允许为空。 */
+export declare function encryptPassword(value: string): Promise<SecretCrypto>;

package/dist/package/src/api/base/v1/login.ts

@@ -5,8 +5,6 @@ import type {
   LogoutRequest,
   LoginRequest,
   LoginResponse,
-  PasswordPublicKeyRequest,
-  PasswordPublicKeyResponse,
   RefreshTokenRequest,
   RefreshTokenResponse,
   VerifyCaptchaRequest,
@@ -17,7 +15,6 @@ import type { Empty } from "../../../rpc/google/protobuf/empty";
 
 const CAPTCHA_URL = "/v1/base/captcha";
 const CAPTCHA_VERIFY_URL = "/v1/base/captcha/verify";
-const PASSWORD_PUBLIC_KEY_URL = "/v1/base/password-public-key";
 const SESSION_URL = "/v1/base/session";
 const TOKEN_URL = "/v1/base/token";
 
@@ -41,15 +38,6 @@ export class LoginServiceImpl implements LoginService {
       headers: { Authorization: "no-auth" }
     });
   }
-  /** 获取密码临时公钥 */
-  PasswordPublicKey(request: PasswordPublicKeyRequest): Promise<PasswordPublicKeyResponse> {
-    return service<PasswordPublicKeyRequest, PasswordPublicKeyResponse>({
-      url: `${PASSWORD_PUBLIC_KEY_URL}`,
-      method: "get",
-      params: request,
-      headers: { Authorization: "no-auth" }
-    });
-  }
   /** 登录 */
   Login(request: LoginRequest): Promise<LoginResponse> {
     return service<LoginRequest, LoginResponse>({

package/dist/package/src/api/base/v1/secret_crypto.ts

@@ -0,0 +1,35 @@
+import service from "../../../utils/request";
+import type {
+  GetSecretPublicKeyRequest,
+  GetSecretPublicKeyResponse,
+  RevealSecretFieldRequest,
+  RevealSecretFieldResponse,
+  SecretCryptoService
+} from "../../../rpc/base/v1/secret_crypto";
+
+const SECRET_PUBLIC_KEY_URL = "/v1/base/secret-public-key";
+const SECRET_FIELD_REVEAL_URL = "/v1/base/secret-field/reveal";
+
+/** 敏感字段加密公共服务 */
+export class SecretCryptoServiceImpl implements SecretCryptoService {
+  /** 获取敏感字段临时公钥 */
+  GetSecretPublicKey(request: GetSecretPublicKeyRequest): Promise<GetSecretPublicKeyResponse> {
+    return service<GetSecretPublicKeyRequest, GetSecretPublicKeyResponse>({
+      url: `${SECRET_PUBLIC_KEY_URL}`,
+      method: "get",
+      params: request,
+      headers: { Authorization: "no-auth" }
+    });
+  }
+
+  /** 查看密钥字段明文 */
+  RevealSecretField(request: RevealSecretFieldRequest): Promise<RevealSecretFieldResponse> {
+    return service<RevealSecretFieldRequest, RevealSecretFieldResponse>({
+      url: `${SECRET_FIELD_REVEAL_URL}`,
+      method: "post",
+      data: request
+    });
+  }
+}
+
+export const defSecretCryptoService = new SecretCryptoServiceImpl();

package/dist/package/src/components/Dialog/PasswordVerifyDialog.vue

@@ -36,9 +36,8 @@ import ProDialog from "../../components/Dialog/ProDialog.vue";
 import ProForm from "../../components/ProForm/index.vue";
 import type { ProFormField, ProFormInstance, ProFormLabelPosition } from "../../components/ProForm/interface";
 import { useLocaleStore } from "../../locales";
-import { PASSWORD_CRYPTO_SCENE, encryptPassword } from "../../utils/passwordCrypto";
-import type { PasswordCryptoScene } from "../../utils/passwordCrypto";
-import type { PasswordCrypto } from "../../rpc/common/v1/types";
+import { encryptPassword } from "../../utils/secretCrypto";
+import type { SecretCrypto } from "../../rpc/common/v1/types";
 
 const { t } = useLocaleStore();
 
@@ -64,8 +63,6 @@ interface PasswordVerifyDialogProps {
   cancelText?: string;
   /** 外部业务提交状态。 */
   confirmLoading?: boolean;
-  /** 密码加密场景。 */
-  scene?: PasswordCryptoScene;
   /** 是否关闭时销毁内容。 */
   destroyOnClose?: boolean;
   /** 是否允许点击遮罩关闭。 */
@@ -88,7 +85,6 @@ const props = withDefaults(defineProps<PasswordVerifyDialogProps>(), {
   confirmText: "",
   cancelText: "",
   confirmLoading: false,
-  scene: PASSWORD_CRYPTO_SCENE.PASSWORD_CRYPTO_SCENE_MFA,
   destroyOnClose: false,
   closeOnClickModal: false,
   closeOnPressEscape: true,
@@ -98,7 +94,7 @@ const props = withDefaults(defineProps<PasswordVerifyDialogProps>(), {
 
 const emit = defineEmits<{
   "update:modelValue": [value: boolean];
-  confirm: [password: PasswordCrypto];
+  confirm: [password: SecretCrypto];
   cancel: [];
   close: [];
   closed: [];
@@ -142,7 +138,7 @@ async function handleConfirm() {
   if (!(await formRef.value?.validate())) return;
   encrypting.value = true;
   try {
-    const password = await encryptPassword(form.password, props.scene);
+    const password = await encryptPassword(form.password);
     emit("confirm", password);
   } finally {
     encrypting.value = false;

package/dist/package/src/components/ProForm/components/ProFormItem.vue

@@ -1,5 +1,11 @@
 <template>
-  <el-input v-if="field.component === 'input'" v-model.trim="fieldValue" v-bind="fieldProps">
+  <SecretInput
+    v-if="field.component === 'input' && field.secret"
+    v-model="fieldValue"
+    v-bind="secretInputProps"
+  />
+
+  <el-input v-else-if="field.component === 'input'" v-model.trim="fieldValue" v-bind="fieldProps">
     <template v-if="field.suffixSlotName" #append>
       <slot :name="field.suffixSlotName" :field="field" :model="model" />
     </template>
@@ -45,6 +51,8 @@
     </el-option>
   </el-select>
 
+  <el-cascader v-else-if="field.component === 'cascader'" v-model="fieldValue" :options="fieldOptions" v-bind="fieldProps" />
+
   <TenantSelect v-else-if="field.component === 'tenant-select'" v-model="fieldValue" v-bind="fieldProps" />
 
   <el-radio-group v-else-if="field.component === 'radio-group'" v-model="fieldValue" v-bind="fieldProps">
@@ -102,6 +110,7 @@ import type { UploadUserFile } from "element-plus";
 import type { ProFormField, ProFormOption } from "../../../components/ProForm/interface";
 import Dict from "../../../components/Dict/index.vue";
 import TenantSelect from "../../../components/TenantSelect/index.vue";
+import SecretInput from "../../../components/ProForm/components/SecretInput.vue";
 
 // 非基础表单控件按需加载，避免 ProForm 基础包携带上传、富文本、Cron 等重组件。
 const CronExpression = defineAsyncComponent(() => import("../../../components/CronExpression/index.vue"));
@@ -128,6 +137,20 @@ const fieldProps = computed(() => {
   return typeof props.field.props === "function" ? props.field.props(props.model) : props.field.props;
 });
 
+/** 解析 secret 输入参数：透传输入参数并注入查看所需的资源信息。 */
+const secretInputProps = computed(() => {
+  const { showPassword: _ignored, ...rest } = (fieldProps.value ?? {}) as Record<string, any>;
+  const config = typeof props.field.secret === "object" ? props.field.secret : null;
+  return {
+    ...rest,
+    secret: props.field.secret,
+    resource: config?.resource ?? "",
+    fieldName: config?.field ?? "",
+    recordId: config ? Number(props.model[config.idProp ?? "id"] ?? 0) : 0,
+    configured: config ? Boolean(props.model[config.configuredProp ?? `${config.field}_configured`]) : false
+  };
+});
+
 /** 解析字段选项参数，支持静态数组和函数。 */
 const fieldOptions = computed<ProFormOption[]>(() => {
   if (!props.field.options) return [];