待核准低風險

修改已通過檢查,等待你的決定

程式碼修改已產生,必要檢查全部通過。

已有 Diff必要檢查通過1 次嘗試$0.0229

已驗證的程式碼修改

這是 Worker 實際檢查過的 Diff,不是模型的文字建議。

diff --git a/apps/web/app/api/auth/login/route.ts b/apps/web/app/api/auth/login/route.ts
index 60460e1..6c5cfa4 100644
--- a/apps/web/app/api/auth/login/route.ts
+++ b/apps/web/app/api/auth/login/route.ts
@@ -6,7 +6,7 @@ export async function POST(request: Request) {
const sessionSecret = process.env.DASHBOARD_SESSION_SECRET;
if (!expectedPassword || !sessionSecret) return failure("Dashboard login is not configured", 503);
const body = await request.json().catch(() => null) as { password?: string; next?: string } | null;
− if (!body?.password || !equal(body.password, expectedPassword)) return failure("密碼錯誤", 401);
+ if (!body?.password || !equal(body.password, expectedPassword)) return failure("登入失敗,請確認密碼後再試。", 401);
const next = body.next?.startsWith("/") && !body.next.startsWith("//") ? body.next : "/";
const response = ok({ authenticated: true, next });
response.cookies.set("dashboard_session", sessionSecret, { httpOnly: true, secure: process.env.NODE_ENV === "production", sameSite: "lax", path: "/", maxAge: 60 * 60 * 12 });