@liujitcn/kratos-uni-app-core 0.0.29 → 0.0.32

package/src/locales/zh-CN.json

@@ -28,6 +28,8 @@
   "core.crypto.public_key_invalid": "公钥格式无效",
   "core.crypto.random_failed": "随机数生成失败",
   "core.crypto.unsupported": "当前环境不支持密码加密",
+  "core.password.verify_title": "验证密码",
+  "core.password.verify_label": "当前密码",
   "core.file.upload_failed": "上传失败",
   "core.home.account_capability": "账户能力",
   "core.home.account_capability_description": "个人资料、应用设置与智能助手入口已保留",
@@ -58,6 +60,23 @@
   "core.login.captcha_write_failed": "验证码图片写入失败",
   "core.login.default_sub_title": "欢迎使用本应用",
   "core.login.login_success": "登录成功",
+  "core.login.mfa_title": "多因素认证",
+  "core.login.mfa_code": "请输入动态口令",
+  "core.login.mfa_recovery_code": "恢复码（可选）",
+  "core.login.mfa_setup_title": "绑定多因素认证",
+  "core.login.mfa_copy_uri": "复制绑定地址",
+  "core.login.mfa_copy_success": "绑定地址已复制",
+  "core.login.mfa_recovery_codes_copied": "恢复码已复制",
+  "core.login.mfa_recovery_codes_title": "保存 MFA 恢复码",
+  "core.login.mfa_recovery_codes_warning": "每个恢复码只能使用一次，此弹窗关闭后不会再次显示。",
+  "core.login.mfa_copy_recovery_codes": "复制恢复码",
+  "core.login.mfa_recovery_codes_confirm": "我已保存",
+  "core.login.mfa_setup_success": "多因素认证绑定成功，请重新登录。",
+  "core.login.mfa_webauthn_action": "使用 Passkey",
+  "core.login.mfa_webauthn_setup_unsupported": "当前平台不支持 WebAuthn，请使用 TOTP 或恢复码。",
+  "core.login.mfa_webauthn_setup_invalid": "WebAuthn 注册未返回有效凭据。",
+  "core.login.mfa_webauthn_login_unsupported": "当前平台不支持 WebAuthn，请使用恢复码。",
+  "core.login.mfa_webauthn_login_invalid": "WebAuthn 登录未返回有效凭据。",
   "core.login.password": "请输入密码",
   "core.login.privacy": "《隐私协议》",
   "core.login.protocol_missing": "服务条款和隐私协议未配置",
@@ -71,17 +90,15 @@
   "core.login.wechat_bind_tip": "该微信尚未绑定，请登录已有账号完成绑定",
   "core.login.wechat_failed": "微信登录失败，请稍后重试",
   "core.navigation.home": "首页",
+  "core.navigation.message": "消息",
   "core.navigation.error.access": "菜单访问模式无效：{access}",
   "core.navigation.error.child_tab": "只有移动端二级菜单可以作为 tab：{name}",
   "core.navigation.error.cycle": "移动端菜单存在循环父级：{name}",
   "core.navigation.error.identity": "菜单 id、name 或 app/ 路径无效",
-  "core.navigation.error.item_object": "菜单项不是对象",
-  "core.navigation.error.list_missing": "菜单响应缺少扁平列表",
   "core.navigation.error.name_prefix": "菜单名称必须使用 App 前缀：{name}",
   "core.navigation.error.parent_invalid": "移动端菜单父级编号无效：{name}",
   "core.navigation.error.parent_missing": "菜单缺少父级编号：{name}",
   "core.navigation.error.parent_not_found": "移动端菜单父级不存在：{name}",
-  "core.navigation.error.response_object": "菜单响应不是对象",
   "core.navigation.error.root_tab": "移动端二级菜单必须作为 tab：{name}",
   "core.navigation.error.tab_count": "tabBar 只能配置 0 或 2-5 项",
   "core.navigation.error.unique": "菜单 id、name、path 必须唯一",
@@ -92,6 +109,22 @@
   "core.protocol.not_configured": "{title}未配置，暂时无法查看",
   "core.protocol.privacy": "隐私协议",
   "core.protocol.service": "服务条款",
+  "core.settings.authorization": "授权管理",
+  "core.settings.contact": "联系我们",
+  "core.settings.feedback": "问题反馈",
+  "core.settings.logout_confirm": "是否退出登录？",
+  "core.settings.logout_failed": "退出登录失败",
+  "core.settings.mfa_bind_success": "多因素认证绑定成功",
+  "core.settings.mfa_disable_action": "禁用",
+  "core.settings.mfa_disable_factor_required": "请输入动态口令或恢复码。",
+  "core.settings.mfa_disable_success": "多因素认证已禁用",
+  "core.settings.mfa_disable_title": "禁用多因素认证",
+  "core.settings.mfa_disabled": "未启用",
+  "core.settings.mfa_enabled_method": "已启用（{method}）",
+  "core.settings.mfa_method_totp": "TOTP",
+  "core.settings.mfa_method_webauthn": "WebAuthn",
+  "core.settings.mfa_title": "多因素认证",
+  "core.settings.title": "设置",
   "core.status.CONFIG_ERROR": "导航配置无效",
   "core.status.forbidden": "暂无访问权限",
   "core.status.NOT_FOUND": "页面不存在",
@@ -100,5 +133,9 @@
   "core.status.loading": "正在加载",
   "core.webview.embed_blocked": "当前 H5 页面可能被目标站点限制嵌入",
   "core.webview.invalid_url": "缺少有效链接地址",
-  "core.webview.open_failed": "链接无法打开"
+  "core.webview.open_failed": "链接无法打开",
+  "common.value.top_level": "顶级节点",
+  "common.resource.default": "{resource}",
+  "common.action.delete_resource": "删除{resource}",
+  "common.action.set_field_status": "设置{field}"
 }

package/src/locales/zh-TW.json

@@ -28,6 +28,8 @@
   "core.crypto.public_key_invalid": "公鑰格式無效",
   "core.crypto.random_failed": "隨機數生成失敗",
   "core.crypto.unsupported": "當前環境不支援密碼加密",
+  "core.password.verify_title": "驗證密碼",
+  "core.password.verify_label": "當前密碼",
   "core.file.upload_failed": "上傳失敗",
   "core.home.account_capability": "賬戶能力",
   "core.home.account_capability_description": "個人資料、應用設定與智慧助手入口已保留",
@@ -58,6 +60,23 @@
   "core.login.captcha_write_failed": "驗證碼圖片寫入失敗",
   "core.login.default_sub_title": "歡迎使用本應用",
   "core.login.login_success": "登入成功",
+  "core.login.mfa_title": "多因素認證",
+  "core.login.mfa_code": "請輸入動態密碼",
+  "core.login.mfa_recovery_code": "恢復碼（可選）",
+  "core.login.mfa_setup_title": "綁定多因素認證",
+  "core.login.mfa_copy_uri": "複製綁定地址",
+  "core.login.mfa_copy_success": "綁定地址已複製",
+  "core.login.mfa_recovery_codes_copied": "恢復碼已複製",
+  "core.login.mfa_recovery_codes_title": "儲存 MFA 恢復碼",
+  "core.login.mfa_recovery_codes_warning": "每個恢復碼只能使用一次，關閉此視窗後不會再次顯示。",
+  "core.login.mfa_copy_recovery_codes": "複製恢復碼",
+  "core.login.mfa_recovery_codes_confirm": "我已儲存",
+  "core.login.mfa_setup_success": "多因素認證綁定成功，請重新登入。",
+  "core.login.mfa_webauthn_action": "使用 Passkey",
+  "core.login.mfa_webauthn_setup_unsupported": "目前平台不支援 WebAuthn，請使用 TOTP 或恢復碼。",
+  "core.login.mfa_webauthn_setup_invalid": "WebAuthn 註冊未回傳有效憑證。",
+  "core.login.mfa_webauthn_login_unsupported": "目前平台不支援 WebAuthn，請使用恢復碼。",
+  "core.login.mfa_webauthn_login_invalid": "WebAuthn 登入未回傳有效憑證。",
   "core.login.password": "請輸入密碼",
   "core.login.privacy": "《隱私協議》",
   "core.login.protocol_missing": "服務條款和隱私協議未配置",
@@ -71,17 +90,15 @@
   "core.login.wechat_bind_tip": "該微信尚未繫結，請登入已有賬號完成繫結",
   "core.login.wechat_failed": "微信登入失敗，請稍後重試",
   "core.navigation.home": "首頁",
+  "core.navigation.message": "消息",
   "core.navigation.error.access": "選單訪問模式無效：{access}",
   "core.navigation.error.child_tab": "只有移動端二級選單可以作為 tab：{name}",
   "core.navigation.error.cycle": "移動端選單存在迴圈父級：{name}",
   "core.navigation.error.identity": "選單 id、name 或 app/ 路徑無效",
-  "core.navigation.error.item_object": "選單項不是物件",
-  "core.navigation.error.list_missing": "選單響應缺少扁平列表",
   "core.navigation.error.name_prefix": "選單名稱必須使用 App 字首：{name}",
   "core.navigation.error.parent_invalid": "移動端選單父級編號無效：{name}",
   "core.navigation.error.parent_missing": "選單缺少父級編號：{name}",
   "core.navigation.error.parent_not_found": "移動端選單父級不存在：{name}",
-  "core.navigation.error.response_object": "選單響應不是物件",
   "core.navigation.error.root_tab": "移動端二級選單必須作為 tab：{name}",
   "core.navigation.error.tab_count": "tabBar 只能配置 0 或 2-5 項",
   "core.navigation.error.unique": "選單 id、name、path 必須唯一",
@@ -92,6 +109,22 @@
   "core.protocol.not_configured": "{title}未配置，暫時無法檢視",
   "core.protocol.privacy": "隱私協議",
   "core.protocol.service": "服務條款",
+  "core.settings.authorization": "授權管理",
+  "core.settings.contact": "聯絡我們",
+  "core.settings.feedback": "問題反饋",
+  "core.settings.logout_confirm": "是否退出登入？",
+  "core.settings.logout_failed": "退出登入失敗",
+  "core.settings.mfa_bind_success": "多因素認證綁定成功",
+  "core.settings.mfa_disable_action": "停用",
+  "core.settings.mfa_disable_factor_required": "請輸入動態密碼或恢復碼。",
+  "core.settings.mfa_disable_success": "多因素認證已停用",
+  "core.settings.mfa_disable_title": "停用多因素認證",
+  "core.settings.mfa_disabled": "未啟用",
+  "core.settings.mfa_enabled_method": "已啟用（{method}）",
+  "core.settings.mfa_method_totp": "TOTP",
+  "core.settings.mfa_method_webauthn": "WebAuthn",
+  "core.settings.mfa_title": "多因素認證",
+  "core.settings.title": "設定",
   "core.status.CONFIG_ERROR": "導航配置無效",
   "core.status.forbidden": "暫無訪問許可權",
   "core.status.NOT_FOUND": "頁面不存在",
@@ -100,5 +133,9 @@
   "core.status.loading": "正在載入",
   "core.webview.embed_blocked": "當前 H5 頁面可能被目標站點限制嵌入",
   "core.webview.invalid_url": "缺少有效連結地址",
-  "core.webview.open_failed": "連結無法開啟"
+  "core.webview.open_failed": "連結無法開啟",
+  "common.value.top_level": "頂級節點",
+  "common.resource.default": "{resource}",
+  "common.action.delete_resource": "刪除{resource}",
+  "common.action.set_field_status": "設定{field}"
 }

package/src/navigation.ts

@@ -1,5 +1,6 @@
 import { computed, readonly, ref } from 'vue'
-import { defBaseMenuService } from './api/base/menu'
+import { defBaseMenuService } from './api/system/app/v1/base_menu'
+import type { BaseMenu, ListBaseMenuResponse } from './rpc/system/app/v1/base_menu'
 import { hasValidToken } from './utils/auth'
 import { navigateToLogin } from './utils/navigation'
 import { resolveStaticView } from './module'
@@ -32,7 +33,7 @@ export interface AppMenuNode extends AppMenu {
 /** 菜单获取适配器。 */
 export interface AppNavigationAdapter {
   /** 获取扁平移动菜单配置。 */
-  list(): Promise<unknown>
+  list(): Promise<ListBaseMenuResponse>
 }
 
 /** 逻辑路由解析结果。 */
@@ -45,10 +46,10 @@ export interface ResolvedAppRoute {
 const ANONYMOUS_CACHE_KEY = 'kratos-uni-app:navigation:anonymous'
 const AUTHENTICATED_CACHE_KEY = 'kratos-uni-app:navigation:authenticated'
 /** 固定移动端菜单根目录编号。 */
-export const APP_MENU_ROOT_ID = 999
+export const APP_MENU_ROOT_ID = 99000000
 const createDefaultMenus = (): AppMenu[] => [
   {
-    id: 99901,
+    id: 99010000,
     parentId: APP_MENU_ROOT_ID,
     name: 'AppHome',
     path: 'app/home',
@@ -60,7 +61,19 @@ const createDefaultMenus = (): AppMenu[] => [
     selectedIcon: 'HOME_SELECTED',
   },
   {
-    id: 99909,
+    id: 99040000,
+    parentId: APP_MENU_ROOT_ID,
+    name: 'AppMessage',
+    path: 'app/message',
+    viewKey: 'MESSAGE_INBOX',
+    title: t('core.navigation.message'),
+    access: 'AUTHENTICATED',
+    inTabBar: true,
+    icon: 'MESSAGE_DEFAULT',
+    selectedIcon: 'MESSAGE_SELECTED',
+  },
+  {
+    id: 99090000,
     parentId: APP_MENU_ROOT_ID,
     name: 'AppMy',
     path: 'app/my',
@@ -72,8 +85,8 @@ const createDefaultMenus = (): AppMenu[] => [
     selectedIcon: 'USER_SELECTED',
   },
   {
-    id: 9990101,
-    parentId: 99901,
+    id: 99010100,
+    parentId: 99010000,
     name: 'AppLogin',
     path: 'app/login',
     viewKey: 'LOGIN',
@@ -82,8 +95,8 @@ const createDefaultMenus = (): AppMenu[] => [
     inTabBar: false,
   },
   {
-    id: 999010101,
-    parentId: 9990101,
+    id: 99010101,
+    parentId: 99010100,
     name: 'AppProtocol',
     path: 'app/protocol/:type',
     viewKey: 'PROTOCOL',
@@ -92,8 +105,8 @@ const createDefaultMenus = (): AppMenu[] => [
     inTabBar: false,
   },
   {
-    id: 9990901,
-    parentId: 99909,
+    id: 99090100,
+    parentId: 99090000,
     name: 'AppProfile',
     path: 'app/profile',
     viewKey: 'PROFILE',
@@ -102,18 +115,18 @@ const createDefaultMenus = (): AppMenu[] => [
     inTabBar: false,
   },
   {
-    id: 9990902,
-    parentId: 99909,
+    id: 99090200,
+    parentId: 99090000,
     name: 'AppSettings',
     path: 'app/settings',
     viewKey: 'SETTINGS',
-    title: t('system.settings.title'),
+    title: t('core.settings.title'),
     access: 'AUTHENTICATED',
     inTabBar: false,
   },
   {
-    id: 9990903,
-    parentId: 99909,
+    id: 99090300,
+    parentId: 99090000,
     name: 'AppAi',
     path: 'app/ai',
     viewKey: 'AI',
@@ -122,8 +135,8 @@ const createDefaultMenus = (): AppMenu[] => [
     inTabBar: false,
   },
   {
-    id: 9990102,
-    parentId: 99901,
+    id: 99010200,
+    parentId: 99010000,
     name: 'AppWebView',
     path: 'app/webview',
     viewKey: 'WEBVIEW',
@@ -135,12 +148,26 @@ const createDefaultMenus = (): AppMenu[] => [
 
 const menus = ref<AppMenu[]>([])
 const ready = ref(false)
+const appMenuBadges = ref<Record<string, number>>({})
+const isH5Runtime = typeof window !== 'undefined'
 let tabNavigationTarget: string | undefined
 let adapter: AppNavigationAdapter = {
   list: () => defBaseMenuService.ListBaseMenu(),
 }
 
 const nativeTabViewKeys = ['HOME', 'PROFILE_HOME']
+const pageTitleKeys: Record<string, string> = {
+  'pages/index/index': 'core.home.main_title',
+  'pages/login/login': 'common.action.login',
+  'pages/login/protocal': 'core.navigation.protocol',
+  'pages/my/my': 'core.navigation.my',
+  'pagesMember/ai/index': 'system.ai.chat_title',
+  'pagesMember/message/detail': 'system.notification.title',
+  'pagesMember/message/index': 'system.notification.title',
+  'pagesMember/profile/profile': 'system.profile.title',
+  'pagesMember/settings/settings': 'core.settings.title',
+}
+const resetTabViewKeys = ['MESSAGE_INBOX']
 
 /** 替换导航远端适配器，供宿主接入自定义契约。 */
 export function setAppNavigationAdapter(nextAdapter: AppNavigationAdapter): void {
@@ -228,20 +255,29 @@ function navigateTabRoute(url: string): void {
   const pages = getCurrentPages()
   const currentIndex = pages.length - 1
   const currentRoute = pages[currentIndex]?.route?.replace(/^\/+/, '')
-  if (currentRoute === targetRoute || tabNavigationTarget) return
+  if (currentRoute === targetRoute || tabNavigationTarget === targetRoute) return
 
   tabNavigationTarget = targetRoute
   const release = () => {
     if (tabNavigationTarget === targetRoute) tabNavigationTarget = undefined
   }
+  if (isH5Runtime) {
+    uni.reLaunch({ url, success: release, fail: release, complete: release })
+    return
+  }
   if (nativeTabViewKeys.some((viewKey) => resolveStaticView(viewKey) === targetRoute)) {
     uni.switchTab({
       url,
       success: release,
       fail: () => navigateTabRouteInStack(url, targetRoute, pages, currentIndex, release),
+      complete: release,
     })
     return
   }
+  if (resetTabViewKeys.some((viewKey) => resolveStaticView(viewKey) === targetRoute)) {
+    uni.reLaunch({ url, success: release, fail: release, complete: release })
+    return
+  }
   navigateTabRouteInStack(url, targetRoute, pages, currentIndex, release)
 }
 
@@ -272,6 +308,48 @@ function navigateTabRouteInStack(
   })
 }
 
+/** 按稳定 viewKey 跳转，并将动作参数作为查询参数传递。 */
+export function navigateAppView(viewKey: string, params: Record<string, string> = {}): void {
+  const menu = menus.value.find((item) => item.viewKey === viewKey)
+  if (!menu) {
+    launchAppStatus('NOT_FOUND')
+    return
+  }
+  const remaining = { ...params }
+  const path = menu.path.replace(/:([A-Za-z0-9_]+)/g, (placeholder, key: string) => {
+    if (!(key in remaining)) return placeholder
+    const value = remaining[key]
+    delete remaining[key]
+    return encodeURIComponent(value)
+  })
+  const query = Object.entries(remaining)
+    .map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`)
+    .join('&')
+  navigateAppRoute(`${path}${query ? `?${query}` : ''}`)
+}
+
+/** 设置移动端菜单 badge 数量，供业务模块注册未读状态。 */
+export function setAppMenuBadge(viewKey: string, count: number): void {
+  const next = { ...appMenuBadges.value }
+  if (count > 0) next[viewKey] = Math.min(Math.floor(count), 99)
+  else delete next[viewKey]
+  appMenuBadges.value = next
+}
+
+/** 读取移动端菜单 badge 数量。 */
+export function useAppMenuBadge(viewKey: string) {
+  return computed(() => appMenuBadges.value[viewKey] ?? 0)
+}
+
+/** 根据物理页面路由更新 H5 和原生导航栏标题。 */
+export function setAppPageTitle(route: string): void {
+  const titleKey = pageTitleKeys[route]
+  const menuTitle = menus.value.find((menu) => resolveStaticView(menu.viewKey) === route)?.title
+  const title = titleKey ? t(titleKey) : menuTitle
+  if (!title) return
+  void uni.setNavigationBarTitle({ title })
+}
+
 /** 获取导航响应式状态。 */
 export function useAppNavigation() {
   const menuTree = computed<AppMenuNode[]>(() => buildMenuTree(menus.value, APP_MENU_ROOT_ID))
@@ -301,48 +379,32 @@ function readCachedMenus(cacheKey: string): AppMenu[] | undefined {
   const cached = uni.getStorageSync(cacheKey) as unknown
   if (!Array.isArray(cached)) return
   try {
-    const normalized = cached.map(normalizeMenu)
-    validateMenus(normalized)
-    return normalized
+    const cachedMenus = cached as AppMenu[]
+    validateMenus(cachedMenus)
+    return cachedMenus
   } catch {
     uni.removeStorageSync(cacheKey)
   }
 }
 
-function normalizeMenuResponse(response: unknown): AppMenu[] {
-  if (Array.isArray(response)) return response.map(normalizeMenu)
-  if (!response || typeof response !== 'object')
-    throw new Error(t('core.navigation.error.response_object'))
-  const record = response as Record<string, unknown>
-  const list = record.items ?? record.list ?? record.data
-  if (!Array.isArray(list)) throw new Error(t('core.navigation.error.list_missing'))
-  return list.map(normalizeMenu)
+function normalizeMenuResponse(response: ListBaseMenuResponse): AppMenu[] {
+  return response.items.map(normalizeMenu)
 }
 
-function normalizeMenu(value: unknown): AppMenu {
-  if (!value || typeof value !== 'object') throw new Error(t('core.navigation.error.item_object'))
-  const item = value as Record<string, unknown>
-  const meta = (item.meta ?? {}) as Record<string, unknown>
-  const app = (meta.app ?? item.app ?? {}) as Record<string, unknown>
+function normalizeMenu(item: BaseMenu): AppMenu {
+  const meta = item.meta
+  const app = meta?.app
   return {
-    id: Number(item.id),
-    parentId:
-      item.parent_id === undefined && item.parentId === undefined
-        ? undefined
-        : Number(item.parent_id ?? item.parentId),
-    name: String(item.name ?? ''),
-    path: String(item.path ?? ''),
-    viewKey: String(app.view_key ?? app.viewKey ?? item.view_key ?? item.viewKey ?? ''),
-    title: String(meta.title ?? item.title ?? ''),
-    access: String(app.access ?? 'AUTHENTICATED') as AppMenuAccess,
-    inTabBar: Boolean(app.in_tab_bar ?? app.inTabBar),
-    icon: typeof meta.icon === 'string' ? meta.icon : undefined,
-    selectedIcon:
-      typeof app.selected_icon === 'string'
-        ? app.selected_icon
-        : typeof app.selectedIcon === 'string'
-          ? app.selectedIcon
-          : undefined,
+    id: item.id,
+    parentId: item.parent_id,
+    name: item.name,
+    path: item.path,
+    viewKey: app?.view_key ?? '',
+    title: meta?.title ?? '',
+    access: (app?.access ?? 'AUTHENTICATED') as AppMenuAccess,
+    inTabBar: app?.in_tab_bar ?? false,
+    icon: meta?.icon,
+    selectedIcon: app?.selected_icon,
   }
 }
 

package/src/rpc/base/v1/login.ts

@@ -20,6 +20,27 @@ export enum PasswordCryptoScene {
   PASSWORD_CRYPTO_SCENE_RESET_BASE_USER_PASSWORD = 3,
   /** PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD - 个人修改密码加密场景。 */
   PASSWORD_CRYPTO_SCENE_UPDATE_USER_PASSWORD = 4,
+  /** PASSWORD_CRYPTO_SCENE_MFA - 多因素认证敏感操作场景。 */
+  PASSWORD_CRYPTO_SCENE_MFA = 5,
+  /** PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY - 密码策略初始化密码配置场景。 */
+  PASSWORD_CRYPTO_SCENE_CONFIGURE_PASSWORD_POLICY = 6,
+}
+
+/**
+ * LoginStatus 表示登录请求当前所处的认证阶段。
+ * 只有 AUTHENTICATED 或 PASSWORD_CHANGE_REQUIRED 才会携带正式访问令牌，MFA 状态必须继续完成挑战。
+ */
+export enum LoginStatus {
+  /** LOGIN_STATUS_UNSPECIFIED - 未指定登录状态。 */
+  LOGIN_STATUS_UNSPECIFIED = 0,
+  /** LOGIN_STATUS_AUTHENTICATED - 已完成认证并签发令牌。 */
+  LOGIN_STATUS_AUTHENTICATED = 1,
+  /** LOGIN_STATUS_MFA_REQUIRED - 需要继续校验多因素认证。 */
+  LOGIN_STATUS_MFA_REQUIRED = 2,
+  /** LOGIN_STATUS_MFA_ENROLLMENT_REQUIRED - 必须先完成多因素认证绑定。 */
+  LOGIN_STATUS_MFA_ENROLLMENT_REQUIRED = 3,
+  /** LOGIN_STATUS_PASSWORD_CHANGE_REQUIRED - 下次操作前必须修改临时密码。 */
+  LOGIN_STATUS_PASSWORD_CHANGE_REQUIRED = 4,
 }
 
 /** 验证码获取条件 */
@@ -80,15 +101,15 @@ export interface PasswordPublicKeyResponse {
 
 /** 刷新令牌请求参数 */
 export interface RefreshTokenRequest {
-  /** 更新令牌，用来获取下一次的访问令牌，必选项。 */
-  refresh_token: string;
+  /** 更新令牌；未填写时由服务端从HttpOnly Cookie读取。 */
+  refresh_token?: string | undefined;
 }
 
 /** 刷新令牌响应 */
 export interface RefreshTokenResponse {
   /** 访问令牌，必选项。 */
   access_token: string;
-  /** 更新令牌，用来获取下一次的访问令牌，可选项。 */
+  /** 更新令牌；管理端 Cookie-only 请求不在响应体返回，应用端请求可返回。 */
   refresh_token: string;
   /** 令牌类型，该值大小写不敏感，必选项，可以是bearer类型或mac类型。 */
   token_type: string;
@@ -116,12 +137,24 @@ export interface LoginRequest {
 export interface LoginResponse {
   /** 访问令牌，必选项。 */
   access_token: string;
-  /** 更新令牌，用来获取下一次的访问令牌，可选项。 */
+  /** 更新令牌；管理端 Cookie-only 请求不在响应体返回，应用端请求可返回。 */
   refresh_token: string;
   /** 令牌类型，该值大小写不敏感，必选项，可以是bearer类型或mac类型。 */
   token_type: string;
   /** 令牌有效时间，单位为秒。如果访问令牌过期，服务器应回复授予访问令牌的持续时间。如果省略该参数，必须其他方式设置过期时间。 */
   expires_in: number;
+  /** 登录认证状态 */
+  status: LoginStatus;
+  /** 多因素认证挑战ID */
+  mfa_challenge_id: string;
+  /** 多因素认证绑定临时票据 */
+  mfa_setup_ticket: string;
+  /** 多因素认证挑战或绑定票据有效时间，单位秒 */
+  mfa_expires_in: number;
+  /** 多因素认证方式：totp、webauthn */
+  mfa_method: string;
+  /** WebAuthn认证选项JSON */
+  mfa_webauthn_options_json: string;
 }
 
 /** Base登录公共服务 */