fix: polish authentication and responsive controls

templates/login.html

@@ -143,6 +143,16 @@
                 </button>
               </div>
             </div>
+            <div>
+              <label class="block text-[11px] tracking-[0.18em] uppercase text-slate-500 mb-2">确认密码</label>
+              <div class="relative">
+                <span class="material-symbols-outlined absolute left-4 top-1/2 -translate-y-1/2 text-slate-400 text-lg">lock</span>
+                <input id="registerPasswordConfirm" name="password_confirm" type="password" minlength="12" required data-field-label="确认密码" autocomplete="new-password" {{ 'disabled' if not allow_registration }} class="w-full pl-11 pr-12 py-3.5 rounded-xl bg-[#eceff3] border border-transparent focus:border-primary focus:ring-0 disabled:cursor-not-allowed disabled:bg-slate-100 disabled:text-slate-400" placeholder="请再次输入密码" />
+                <button class="password-toggle" type="button" data-password-toggle="registerPasswordConfirm" aria-label="显示确认密码" aria-pressed="false" tabindex="-1" {{ 'disabled' if not allow_registration }}>
+                  <span class="material-symbols-outlined" aria-hidden="true">visibility</span>
+                </button>
+              </div>
+            </div>
             <div>
               <label class="block text-[11px] tracking-[0.18em] uppercase text-slate-500 mb-2">图形验证码</label>
               <div class="grid grid-cols-[1fr_92px_44px] gap-3 items-center">
@@ -327,6 +337,16 @@
             showAppNotification(`密码至少需要 ${minLength} 位`, 'error', undefined, shortPassword);
             markFieldError(shortPassword);
             shortPassword.focus();
+            return;
+          }
+
+          const password = form.querySelector('[name="password"]');
+          const confirmation = form.querySelector('[name="password_confirm"]');
+          if (password && confirmation && password.value !== confirmation.value) {
+            event.preventDefault();
+            showAppNotification('两次密码输入不一致', 'error', undefined, confirmation);
+            markFieldError(confirmation);
+            confirmation.focus();
           }
         });
       });