From 70174393562761e69ceeced6dfbb5ce3f3664c5e Mon Sep 17 00:00:00 2001
From: argszero <argszero@argszerodeMac-mini.local>
Date: Fri, 21 Aug 2026 13:05:51 +0800
Subject: [PATCH] =?UTF-8?q?fix(ui):=20login=20403=20(unverified=20email)?=
 =?UTF-8?q?=20=E2=86=92=20redirect=20to=20verify=20form=20+=20auto=20resen?=
 =?UTF-8?q?d=20code?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Rant 2026-08-21T12:31:48: logging in with an unverified account returned
403 with only a toast — no way to reach the verification code form.

Add a 403 branch to the login submit catch:
- prefill #verify-email with the attempted email
- showAuthForm("verify") to reveal the code form + resend button
- auto-trigger #resend-btn click to send the code immediately
- bump cache-busting version to 20260821-1
---
 ui/index.html | 10 +++++-----
 ui/js/app.js  |  6 ++++++
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/ui/index.html b/ui/index.html
index b61c83d..b5f2156 100644
--- a/ui/index.html
+++ b/ui/index.html
@@ -5,7 +5,7 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>AITokenPool</title>
 <link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 64 64'%3E%3Cdefs%3E%3ClinearGradient id='g' x1='0' y1='0' x2='1' y2='1'%3E%3Cstop offset='0' stop-color='%234ecdc4'/%3E%3Cstop offset='1' stop-color='%232a9d8f'/%3E%3C/linearGradient%3E%3C/defs%3E%3Crect width='64' height='64' rx='14' fill='url(%23g)'/%3E%3Ctext x='32' y='43' font-family='-apple-system,Segoe UI,Arial,sans-serif' font-size='30' font-weight='800' text-anchor='middle' fill='%23062021'%3EAT%3C/text%3E%3C/svg%3E">
-<link rel="stylesheet" href="css/style.css?v=20260820-5">
+<link rel="stylesheet" href="css/style.css?v=20260821-1">
 </head>
 <body>
 
@@ -673,9 +673,9 @@ <h3 id="chat-title">使用模型</h3>
   </div>
 </div>
 
-<script src="js/api.js?v=20260820-5"></script>
-<script src="js/data.js?v=20260820-5"></script>
-<script src="js/i18n.js?v=20260820-5"></script>
-<script src="js/app.js?v=20260820-5"></script>
+<script src="js/api.js?v=20260821-1"></script>
+<script src="js/data.js?v=20260821-1"></script>
+<script src="js/i18n.js?v=20260821-1"></script>
+<script src="js/app.js?v=20260821-1"></script>
 </body>
 </html>
diff --git a/ui/js/app.js b/ui/js/app.js
index 93043e0..709f9d1 100644
--- a/ui/js/app.js
+++ b/ui/js/app.js
@@ -2497,6 +2497,12 @@
           setFieldError($("#login-pass"), T("login.err.bad"));
           clearFieldError($("#login-email"));
           $("#login-pass").focus();
+        } else if (err && err.status === 403) {
+          // 邮箱未验证 → 切验证码界面 + 预填邮箱 + 自动发码（rant 2026-08-21T12:31:48）
+          $("#verify-email").value = email;
+          showAuthForm("verify");
+          const rb = $("#resend-btn");
+          if (rb) rb.click(); // 立即发验证码（60s 限频由后端 429 兜底提示）
         } else {
           toast((err && err.message) ? I18n.mapErr(err.message) : T("login.err.fail"), "error");
         }