Require temporary credentials for authorized accounts without stored secrets

Prompt for one-time passwords or SSH private keys when an authorized account has no stored secret. Route quick-connect and reconnect entry points through setup before requesting a token, while keeping entered secrets out of saved preferences.

Constraint: Existing admin session setup cannot preserve admin authority; require an explicit error for that URL path.
Constraint: The repository hook formats unrelated worktree changes and runs local-listen Web Proxy tests, so this scoped commit uses manual verification.
Confidence: high
Scope-risk: moderate
Tested: 995 Web tests, lint, Web and Electron typechecks, staged format and diff checks.
Not-tested: Web Proxy tests were not rerun after the user excluded them.
Related: jumpserver/jumpserver#17614
Co-authored-by: OmX <omx@oh-my-codex.dev>

Author: ZhaoJiSen

i18n/locales/en.json

@@ -1160,6 +1160,12 @@
     "Manual": "Manual accounts",
     "Username": "Username",
     "Password": "Password",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Dynamic user",
     "ManualInput": "Manual input",
     "Anonymous": "Anonymous",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Update saved password",
     "CancelPersonalCredentialUpdate": "Cancel password update",
     "UseSavedPassword": "The saved password will be used",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "Saved credentials could not be loaded. You can still enter one manually.",
     "ShowPassword": "Show password",
     "HidePassword": "Hide password"

i18n/locales/es.json

@@ -1160,6 +1160,12 @@
     "Manual": "Cuentas manuales",
     "Username": "Nombre de usuario",
     "Password": "Contraseña",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Usuario dinámico",
     "ManualInput": "Entrada manual",
     "Anonymous": "Anónimo",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Actualizar la contraseña guardada",
     "CancelPersonalCredentialUpdate": "Cancelar la actualización de contraseña",
     "UseSavedPassword": "Se utilizará la contraseña guardada",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "No se pudieron cargar las credenciales guardadas. Aún puede introducir una manualmente.",
     "ShowPassword": "Mostrar contraseña",
     "HidePassword": "Ocultar contraseña"

i18n/locales/fr.json

@@ -1160,6 +1160,12 @@
     "Manual": "Comptes manuels",
     "Username": "Nom d'utilisateur",
     "Password": "Mot de passe",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Utilisateur dynamique",
     "ManualInput": "Saisie manuelle",
     "Anonymous": "Anonyme",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Modifier le mot de passe enregistré",
     "CancelPersonalCredentialUpdate": "Annuler la modification du mot de passe",
     "UseSavedPassword": "Le mot de passe enregistré sera utilisé",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "Impossible de charger les identifiants enregistrés. Vous pouvez toujours en saisir un manuellement.",
     "ShowPassword": "Afficher le mot de passe",
     "HidePassword": "Masquer le mot de passe"

i18n/locales/ja.json

@@ -1160,6 +1160,12 @@
     "Manual": "手動アカウント",
     "Username": "ユーザー名",
     "Password": "パスワード",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "動的ユーザー",
     "ManualInput": "手動入力",
     "Anonymous": "匿名",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "保存済みパスワードを更新",
     "CancelPersonalCredentialUpdate": "パスワード更新をキャンセル",
     "UseSavedPassword": "保存済みのパスワードを使用します",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "保存済みの認証情報を読み込めませんでした。手動入力は引き続き利用できます。",
     "ShowPassword": "パスワードを表示",
     "HidePassword": "パスワードを非表示"

i18n/locales/ko.json

@@ -1160,6 +1160,12 @@
     "Manual": "수동 계정",
     "Username": "사용자 이름",
     "Password": "비밀번호",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "동적 사용자",
     "ManualInput": "직접 입력",
     "Anonymous": "익명",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "저장된 비밀번호 업데이트",
     "CancelPersonalCredentialUpdate": "비밀번호 업데이트 취소",
     "UseSavedPassword": "저장된 비밀번호를 사용합니다",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "저장된 자격 증명을 불러오지 못했습니다. 계속 직접 입력할 수 있습니다.",
     "ShowPassword": "비밀번호 표시",
     "HidePassword": "비밀번호 숨기기"

i18n/locales/pt_br.json

@@ -1160,6 +1160,12 @@
     "Manual": "Contas manuais",
     "Username": "Nome de usuário",
     "Password": "Senha",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Usuário dinâmico",
     "ManualInput": "Entrada manual",
     "Anonymous": "Anônimo",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Atualizar a senha salva",
     "CancelPersonalCredentialUpdate": "Cancelar atualização de senha",
     "UseSavedPassword": "A senha salva será usada",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "Não foi possível carregar as credenciais salvas. Você ainda pode inserir uma manualmente.",
     "ShowPassword": "Mostrar senha",
     "HidePassword": "Ocultar senha"

i18n/locales/ru.json

@@ -1160,6 +1160,12 @@
     "Manual": "Ручные учетные записи",
     "Username": "Имя пользователя",
     "Password": "Пароль",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Динамический пользователь",
     "ManualInput": "Ручной ввод",
     "Anonymous": "Анонимно",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Обновить сохраненный пароль",
     "CancelPersonalCredentialUpdate": "Отменить обновление пароля",
     "UseSavedPassword": "Будет использован сохраненный пароль",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "Не удалось загрузить сохраненные учетные данные. Вы по-прежнему можете ввести их вручную.",
     "ShowPassword": "Показать пароль",
     "HidePassword": "Скрыть пароль"

i18n/locales/vi.json

@@ -1160,6 +1160,12 @@
     "Manual": "Tài khoản thủ công",
     "Username": "Tên người dùng",
     "Password": "Mật khẩu",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "Người dùng động",
     "ManualInput": "Nhập thủ công",
     "Anonymous": "Ẩn danh",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "Cập nhật mật khẩu đã lưu",
     "CancelPersonalCredentialUpdate": "Hủy cập nhật mật khẩu",
     "UseSavedPassword": "Mật khẩu đã lưu sẽ được sử dụng",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "Không thể tải thông tin xác thực đã lưu. Bạn vẫn có thể nhập thủ công.",
     "ShowPassword": "Hiện mật khẩu",
     "HidePassword": "Ẩn mật khẩu"

i18n/locales/zh.json

@@ -1160,6 +1160,12 @@
     "Manual": "手动账号",
     "Username": "用户名",
     "Password": "密码",
+    "Token": "令牌",
+    "CredentialType": "凭据类型",
+    "SshKey": "SSH 私钥",
+    "PasteSshKey": "粘贴 SSH 私钥",
+    "ChooseSshKeyFile": "选择密钥文件",
+    "ReadSshKeyFailed": "无法读取所选密钥文件",
     "DynamicUser": "同名账号",
     "ManualInput": "手动输入",
     "Anonymous": "匿名账号",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "更新已保存密码",
     "CancelPersonalCredentialUpdate": "取消更新密码",
     "UseSavedPassword": "将使用已保存的密码",
+    "UseSavedSecret": "将使用已保存的凭据",
     "LoadPersonalCredentialsFailed": "无法加载已保存凭据，仍可手动输入。",
     "ShowPassword": "显示密码",
     "HidePassword": "隐藏密码"

i18n/locales/zh_hant.json

@@ -1160,6 +1160,12 @@
     "Manual": "手動帳號",
     "Username": "使用者名稱",
     "Password": "密碼",
+    "Token": "Token",
+    "CredentialType": "Credential type",
+    "SshKey": "SSH private key",
+    "PasteSshKey": "Paste an SSH private key",
+    "ChooseSshKeyFile": "Choose key file",
+    "ReadSshKeyFailed": "Could not read the selected key file",
     "DynamicUser": "同名帳號",
     "ManualInput": "手動輸入",
     "Anonymous": "匿名帳號",
@@ -1171,6 +1177,7 @@
     "UpdatePersonalCredential": "更新已儲存密碼",
     "CancelPersonalCredentialUpdate": "取消更新密碼",
     "UseSavedPassword": "將使用已儲存的密碼",
+    "UseSavedSecret": "The saved credential will be used",
     "LoadPersonalCredentialsFailed": "無法載入已儲存憑據，仍可手動輸入。",
     "ShowPassword": "顯示密碼",
     "HidePassword": "隱藏密碼"