消除LOGIN_MFA_ENABLED=false的潜在风险

maxkey-authentications/maxkey-authentication-provider/src/main/java/org/dromara/maxkey/authn/provider/impl/MfaAuthenticationProvider.java

@@ -143,6 +143,10 @@ public class MfaAuthenticationProvider extends AbstractAuthenticationProvider {
                 _logger.debug("login captcha valid error.");
                 throw new BadCredentialsException(message);
             }
+        }else {
+        	String message = WebContext.getI18nValue("login.mfa.enabled.false");
+            _logger.debug(" error {} .",message);
+        	throw new BadCredentialsException(message);
         }
     }
 

maxkey-authentications/maxkey-authentication-provider/src/main/java/org/dromara/maxkey/authn/provider/impl/MobileAuthenticationProvider.java

@@ -144,6 +144,10 @@ public class MobileAuthenticationProvider extends AbstractAuthenticationProvider
                 _logger.debug("login captcha valid error.");
                 throw new BadCredentialsException(message);
             }
+        }else {
+        	String message = WebContext.getI18nValue("login.mfa.enabled.false");
+            _logger.debug(" error {} .",message);
+        	throw new BadCredentialsException(message);
         }
     }
 

maxkey-webs/maxkey-web-maxkey/src/main/resources/messages/message.properties

@@ -71,6 +71,7 @@ login.text.otherlogins=\u5176\u4ED6\u767B\u5F55\u65B9\u5F0F
 login.text.register=\u7528\u6237\u6CE8\u518C
 login.text.register.success=\u6CE8\u518C\u6210\u529F
 login.text.register.error=\u6CE8\u518C\u5931\u8D25
+login.mfa.enabled.false=\u53CC\u56E0\u7D20\u8BA4\u8BC1\u672A\u542F\u52A8
 
 register.user.error=\u767B\u9646\u8D26\u53F7\u5DF2\u5B58\u5728
 register.emailMobile.error=\u90AE\u7BB1\u6216\u624B\u673A\u683C\u5F0F\u9519\u8BEF

maxkey-webs/maxkey-web-maxkey/src/main/resources/messages/message_en.properties

@@ -71,6 +71,7 @@ login.text.otherlogins=OtherLogins
 login.text.register=Register
 login.text.register.success=Register successful 
 login.text.register.error=Register error
+login.mfa.enabled.false=Two-Factor Authentication is not enabled
 register.user.error=username exist
 register.emailMobile.error=email or mobile error
 register.emailMobile.exist=email or mobile exist

maxkey-webs/maxkey-web-maxkey/src/main/resources/messages/message_zh_CN.properties

@@ -71,6 +71,7 @@ login.text.otherlogins=\u5176\u4ED6\u767B\u5F55\u65B9\u5F0F
 login.text.register=\u7528\u6237\u6CE8\u518C
 login.text.register.success=\u6CE8\u518C\u6210\u529F
 login.text.register.error=\u6CE8\u518C\u5931\u8D25
+login.mfa.enabled.false=\u53CC\u56E0\u7D20\u8BA4\u8BC1\u672A\u542F\u52A8
 
 register.user.error=\u767B\u9646\u8D26\u53F7\u5DF2\u5B58\u5728
 register.emailMobile.error=\u90AE\u7BB1\u6216\u624B\u673A\u683C\u5F0F\u9519\u8BEF