release: v1.0.4

Add PasswordInput with show/hide toggle, align legacy setup/register routing, merge duplicate i18n keys, and remove unused jose dependency.
docs: add Linux.do friend link and align README tables
2026-08-25 16:11:50 +08:00 · 2026-08-24 10:41:52 +08:00 · 2026-08-23 18:26:13 +08:00
21 changed files with 307 additions and 194 deletions
@@ -13,9 +13,19 @@ env:
  IMAGE_NAME: pichost

 jobs:
-  build-and-push:
+  build:
    if: ${{ !contains(github.event.head_commit.message, '[skip docker]') }}
-    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            runner: ubuntu-latest
+            suffix: amd64
+          - platform: linux/arm64
+            runner: ubuntu-24.04-arm
+            suffix: arm64
+    runs-on: ${{ matrix.runner }}
    env:
      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -23,9 +33,6 @@ jobs:
      - name: Checkout
        uses: actions/checkout@v7

-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

@@ -35,22 +42,58 @@ jobs:
          username: ${{ env.DOCKERHUB_USERNAME }}
          password: ${{ env.DOCKERHUB_TOKEN }}

-      - name: Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}
-          tags: |
-            type=raw,value=latest
-            type=semver,pattern={{version}}
+      - name: Resolve version
+        id: version
+        run: |
+          if [ "${{ github.ref_type }}" = "tag" ]; then
+            echo "value=${GITHUB_REF#refs/tags/v}" >> "$GITHUB_OUTPUT"
+          else
+            echo "value=dev" >> "$GITHUB_OUTPUT"
+          fi

-      - name: Build and push
+      - name: Build and push platform image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
-          platforms: linux/amd64,linux/arm64
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          platforms: ${{ matrix.platform }}
+          tags: |
+            ${{ env.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.value }}-${{ matrix.suffix }}
+          cache-from: type=gha,scope=${{ matrix.suffix }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.suffix }}
+
+  merge:
+    if: ${{ !contains(github.event.head_commit.message, '[skip docker]') }}
+    needs: build
+    runs-on: ubuntu-latest
+    env:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+    steps:
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ env.DOCKERHUB_USERNAME }}
+          password: ${{ env.DOCKERHUB_TOKEN }}
+
+      - name: Resolve version
+        id: version
+        run: |
+          if [ "${{ github.ref_type }}" = "tag" ]; then
+            echo "value=${GITHUB_REF#refs/tags/v}" >> "$GITHUB_OUTPUT"
+          else
+            echo "value=dev" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create multi-arch manifest
+        run: |
+          IMAGE="${DOCKERHUB_USERNAME}/${IMAGE_NAME}"
+          VERSION="${{ steps.version.outputs.value }}"
+          docker buildx imagetools create \
+            -t "${IMAGE}:${VERSION}" \
+            -t "${IMAGE}:latest" \
+            "${IMAGE}:${VERSION}-amd64" \
+            "${IMAGE}:${VERSION}-arm64"
@@ -23,6 +23,18 @@ jobs:
        with:
          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}

+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install npm 11
+        run: npm install -g npm@11.12.1
+
+      - name: Install dependencies
+        run: npm ci
+
      - name: Extract release notes from CHANGELOG
        id: notes
        run: |
@@ -36,3 +36,7 @@ data

 # 本地 Git hooks 模板（仅安装在 .git/hooks/，不进仓库）
 git-hooks/
+
+# 飞牛 fpk 工程与产物（仅本地维护，不进仓库）
+scripts/fpk/
+dist-fpk/
@@ -2,6 +2,29 @@

 本仓库自 **v1.0.0** 起作为正式版维护；此前历史提交已归档重置。

+## [1.0.4] - 2026-08-25
+
+### 新增
+
+- 密码输入框支持显示/隐藏切换（`PasswordInput` 组件，含无障碍文案）
+
+### 改进
+
+- 遗留 `ADMIN_SECRET` 部署：`/setup`、`/register` 路由与 `needsMigration` 检测对齐
+- 合并重复的密码不一致 i18n 文案；移除未使用的 `jose` 依赖
+
+### 修复
+
+- 修复 `PasswordInput` 导致 CI typecheck 失败
+
+## [1.0.3] - 2026-08-23
+
+### 修复
+
+- 修复 CI typecheck 失败（移动端菜单、i18n、统计页图库刷新）
+- Docker 构建：arm64 改用原生 ARM Runner，避免 QEMU 下 `npm ci` 极慢
+- Docker 构建：启用 npm 缓存挂载，加快依赖安装
+
 ## [1.0.2] - 2026-08-23

 ### 新增
@@ -47,6 +70,7 @@

 - **v1.1.0**（计划中）：S3、Cloudflare R2 及更多对象存储后端

+[1.0.3]: https://github.com/O96u/PicHost/releases/tag/v1.0.3
 [1.0.2]: https://github.com/O96u/PicHost/releases/tag/v1.0.2
 [1.0.1]: https://github.com/O96u/PicHost/releases/tag/v1.0.1
 [1.0.0]: https://github.com/O96u/PicHost/releases/tag/v1.0.0
@@ -1,3 +1,5 @@
+# syntax=docker/dockerfile:1
+
 FROM node:22-alpine AS build

 WORKDIR /app
@@ -6,7 +8,8 @@ WORKDIR /app
 RUN npm install -g npm@11.12.1

 COPY package.json package-lock.json ./
-RUN npm ci
+RUN --mount=type=cache,target=/root/.npm \
+    npm ci

 COPY . .
 RUN npm run build
@@ -29,17 +29,17 @@

 ## Screenshots

-| Login | Upload |
-|:---:|:---:|
+|                Login                 |                 Upload                 |
+| :----------------------------------: | :------------------------------------: |
 | ![Login](docs/screenshots/login.png) | ![Upload](docs/screenshots/upload.png) |

-| Upload preferences | Stats & gallery |
-|:---:|:---:|
+|                Upload preferences                |           Stats & gallery            |
+| :----------------------------------------------: | :----------------------------------: |
 | ![Preferences](docs/screenshots/preferences.png) | ![Stats](docs/screenshots/stats.png) |

-| Settings | |
-|:---:|:---:|
-| ![Settings](docs/screenshots/settings.png) | |
+|                  Settings                  |     |
+| :----------------------------------------: | :-: |
+| ![Settings](docs/screenshots/settings.png) |     |

 ## Features

@@ -95,41 +95,41 @@ If you only had `ADMIN_SECRET` and no user table, log in with the secret once an

 ## Tech Stack

-| Layer | Technology |
-|-------|------------|
-| Frontend | Nuxt 4, Vue 3, Nuxt UI 4, Tailwind CSS 4 |
-| Backend | Nitro (Node.js), SQLite |
-| Images | sharp (WebP transcoding & compression) |
-| Auth | Session cookie, scrypt password hashing, API tokens |
-| Storage | Local disk (`DATA_DIR`) |
-| Deploy | Docker (amd64 / arm64), docker compose |
-| Tests | Vitest |
+| Layer    | Technology                                          |
+| -------- | --------------------------------------------------- |
+| Frontend | Nuxt 4, Vue 3, Nuxt UI 4, Tailwind CSS 4            |
+| Backend  | Nitro (Node.js), SQLite                             |
+| Images   | sharp (WebP transcoding & compression)              |
+| Auth     | Session cookie, scrypt password hashing, API tokens |
+| Storage  | Local disk (`DATA_DIR`)                             |
+| Deploy   | Docker (amd64 / arm64), docker compose              |
+| Tests    | Vitest                                              |

 ## Environment variables

-| Variable | Description |
-|----------|-------------|
-| `API_UPLOAD_TOKEN` | Global upload token (`Auth-Token` header); can be generated in the API page |
-| `ALLOWED_REFERER_HOSTS` | Hotlink allowlist (comma-separated hostnames) |
-| `IMAGE_BASE_URL` | Public base URL for image links |
-| `WEBP_QUALITY` | Server WebP quality 1–100, default 80 |
-| `AUTO_DELETE_DAYS` | Global auto-delete days (0 = off); admin + orphan images only |
-| `DATA_DIR` | Data directory, default `/data` (container) or `./data` (local) |
-| `ADMIN_SECRET` | Legacy v1.0 migration only |
-| `DEV_BYPASS_ACCESS` | Dev only — bypass auth (never in production) |
+| Variable                | Description                                                                 |
+| ----------------------- | --------------------------------------------------------------------------- |
+| `API_UPLOAD_TOKEN`      | Global upload token (`Auth-Token` header); can be generated in the API page |
+| `ALLOWED_REFERER_HOSTS` | Hotlink allowlist (comma-separated hostnames)                               |
+| `IMAGE_BASE_URL`        | Public base URL for image links                                             |
+| `WEBP_QUALITY`          | Server WebP quality 1–100, default 80                                       |
+| `AUTO_DELETE_DAYS`      | Global auto-delete days (0 = off); admin + orphan images only               |
+| `DATA_DIR`              | Data directory, default `/data` (container) or `./data` (local)             |
+| `ADMIN_SECRET`          | Legacy v1.0 migration only                                                  |
+| `DEV_BYPASS_ACCESS`     | Dev only — bypass auth (never in production)                                |

 Environment variables override database settings. See [`.env.example`](.env.example).

 ## Users & permissions

-| Scenario | Auth | Ownership / visibility |
-|----------|------|------------------------|
-| Web upload | Session | Current user |
-| API upload + **user token** | `Auth-Token` | Token owner |
-| API upload + **global token** | `Auth-Token` | Admin (`userId` null) |
-| Twikoo `/api/index.php` | form `token` | Same as global token |
-| Gallery list / search / delete | Session or token | Users: own only; admin: all |
-| Direct link `GET /images/...` | None (Referer rules) | Public if URL is known |
+| Scenario                       | Auth                 | Ownership / visibility      |
+| ------------------------------ | -------------------- | --------------------------- |
+| Web upload                     | Session              | Current user                |
+| API upload + **user token**    | `Auth-Token`         | Token owner                 |
+| API upload + **global token**  | `Auth-Token`         | Admin (`userId` null)       |
+| Twikoo `/api/index.php`        | form `token`         | Same as global token        |
+| Gallery list / search / delete | Session or token     | Users: own only; admin: all |
+| Direct link `GET /images/...`  | None (Referer rules) | Public if URL is known      |

 Regular users are limited to the `images/` folder; custom `folder` requires admin or global token.

@@ -147,12 +147,12 @@ Pattern: `folder/YYYY/MM/randomId.webp` + `.meta.json`. Back up the entire `/dat

 ## API overview

-| Method | Path | Description |
-|--------|------|-------------|
-| POST | `/api/images/upload` | Upload image |
-| GET | `/api/images` | Paginated list |
-| DELETE | `/api/images` | Delete one (`key`) |
-| POST | `/api/index.php` | Twikoo / EasyImage 2.0 |
+| Method | Path                 | Description            |
+| ------ | -------------------- | ---------------------- |
+| POST   | `/api/images/upload` | Upload image           |
+| GET    | `/api/images`        | Paginated list         |
+| DELETE | `/api/images`        | Delete one (`key`)     |
+| POST   | `/api/index.php`     | Twikoo / EasyImage 2.0 |

 Upload example:

@@ -167,11 +167,11 @@ Full docs and copyable cURL snippets are on the **API** page after deployment.

 ## Twikoo

-| Setting | Value |
-|---------|-------|
-| `IMAGE_CDN` | `easyimage` |
-| `IMAGE_CDN_URL` | `https://your-domain/api/index.php` |
-| `IMAGE_CDN_TOKEN` | Same as `API_UPLOAD_TOKEN` |
+| Setting           | Value                               |
+| ----------------- | ----------------------------------- |
+| `IMAGE_CDN`       | `easyimage`                         |
+| `IMAGE_CDN_URL`   | `https://your-domain/api/index.php` |
+| `IMAGE_CDN_TOKEN` | Same as `API_UPLOAD_TOKEN`          |

 ## Reverse proxy

@@ -192,13 +192,18 @@ npm test             # Unit tests

 ## Roadmap

-| Version | Plan |
-|---------|------|
-| **v1.0.2** | i18n, mobile menus, stats/upload UI, Docker password reset (current) |
+| Version    | Plan                                                           |
+| ---------- | -------------------------------------------------------------- |
+| **v1.0.3** | CI and Docker multi-arch build fixes (current)                 |
+| **v1.0.2** | i18n, mobile menus, stats/upload UI, Docker password reset     |
 | **v1.0.1** | Settings version display, mobile upload preferences layout fix |
-| **v1.0.0** | Local storage, multi-user, API, Twikoo |
-| **v1.1.0** | S3, Cloudflare R2, and more object storage backends |
+| **v1.0.0** | Local storage, multi-user, API, Twikoo                         |
+| **v1.1.0** | S3, Cloudflare R2, and more object storage backends            |

 ## License

 [MIT](LICENSE)
+
+## Friend links
+
+[LINUX DO](https://linux.do/)
@@ -29,17 +29,17 @@

 ## 界面预览

-| 登录 | 上传 |
-|:---:|:---:|
+|                登录                 |                 上传                 |
+| :---------------------------------: | :----------------------------------: |
 | ![登录](docs/screenshots/login.png) | ![上传](docs/screenshots/upload.png) |

-| 上传偏好 | 统计与图库 |
-|:---:|:---:|
+|                   上传偏好                    |             统计与图库              |
+| :-------------------------------------------: | :---------------------------------: |
 | ![上传偏好](docs/screenshots/preferences.png) | ![统计](docs/screenshots/stats.png) |

-| 系统设置 | |
-|:---:|:---:|
-| ![设置](docs/screenshots/settings.png) | |
+|                系统设置                |     |
+| :------------------------------------: | :-: |
+| ![设置](docs/screenshots/settings.png) |     |

 ## 特性

@@ -100,41 +100,41 @@ npm run dev

 ## 技术栈

-| 层级 | 技术 |
-|------|------|
-| 前端 | Nuxt 4、Vue 3、Nuxt UI 4、Tailwind CSS 4 |
-| 后端 | Nitro（Node.js）、SQLite |
-| 图片处理 | sharp（WebP 转码与压缩） |
-| 鉴权 | Session Cookie、scrypt 密码哈希、API Token |
-| 存储 | 本地磁盘（`DATA_DIR`） |
-| 部署 | Docker（amd64 / arm64）、docker compose |
-| 测试 | Vitest |
+| 层级     | 技术                                       |
+| -------- | ------------------------------------------ |
+| 前端     | Nuxt 4、Vue 3、Nuxt UI 4、Tailwind CSS 4   |
+| 后端     | Nitro（Node.js）、SQLite                   |
+| 图片处理 | sharp（WebP 转码与压缩）                   |
+| 鉴权     | Session Cookie、scrypt 密码哈希、API Token |
+| 存储     | 本地磁盘（`DATA_DIR`）                     |
+| 部署     | Docker（amd64 / arm64）、docker compose    |
+| 测试     | Vitest                                     |

 ## 环境变量

-| 变量 | 说明 |
-|------|------|
-| `API_UPLOAD_TOKEN` | 全局上传 Token（`Auth-Token` 头）；未配置可在后台 API 页生成 |
-| `ALLOWED_REFERER_HOSTS` | 防盗链白名单（逗号分隔 hostname） |
-| `IMAGE_BASE_URL` | 图片直链公网域名（反代时建议填写） |
-| `WEBP_QUALITY` | 服务端 WebP 质量 1–100，默认 80 |
-| `AUTO_DELETE_DAYS` | 全局自动删除天数（0 关闭）；仅影响管理员及无归属历史图 |
-| `DATA_DIR` | 数据目录，默认 `/data`（容器）或 `./data`（本地） |
-| `ADMIN_SECRET` | 仅遗留 v1.0 迁移，新安装不需要 |
-| `DEV_BYPASS_ACCESS` | 开发用，跳过登录（生产勿开） |
+| 变量                    | 说明                                                         |
+| ----------------------- | ------------------------------------------------------------ |
+| `API_UPLOAD_TOKEN`      | 全局上传 Token（`Auth-Token` 头）；未配置可在后台 API 页生成 |
+| `ALLOWED_REFERER_HOSTS` | 防盗链白名单（逗号分隔 hostname）                            |
+| `IMAGE_BASE_URL`        | 图片直链公网域名（反代时建议填写）                           |
+| `WEBP_QUALITY`          | 服务端 WebP 质量 1–100，默认 80                              |
+| `AUTO_DELETE_DAYS`      | 全局自动删除天数（0 关闭）；仅影响管理员及无归属历史图       |
+| `DATA_DIR`              | 数据目录，默认 `/data`（容器）或 `./data`（本地）            |
+| `ADMIN_SECRET`          | 仅遗留 v1.0 迁移，新安装不需要                               |
+| `DEV_BYPASS_ACCESS`     | 开发用，跳过登录（生产勿开）                                 |

 环境变量优先级高于后台设置。详见 [`.env.example`](.env.example)。

 ## 用户与权限

-| 场景 | 鉴权 | 图片归属 / 可见范围 |
-|------|------|---------------------|
-| 网页上传 | Session | 当前登录用户 |
-| API 上传 + **个人 Token** | `Auth-Token` | 该 Token 所属用户 |
-| API 上传 + **全局 Token** | `Auth-Token` | 管理员（`userId` 为空） |
-| Twikoo `/api/index.php` | 表单 `token` | 与全局 Token 相同 |
-| 图库列表 / 搜索 / 删除 | Session 或 Token | 普通用户仅自己；管理员全部 |
-| 图片直链 `GET /images/...` | 无（Referer 防盗链） | 知道 URL 即可访问 |
+| 场景                       | 鉴权                 | 图片归属 / 可见范围        |
+| -------------------------- | -------------------- | -------------------------- |
+| 网页上传                   | Session              | 当前登录用户               |
+| API 上传 + **个人 Token**  | `Auth-Token`         | 该 Token 所属用户          |
+| API 上传 + **全局 Token**  | `Auth-Token`         | 管理员（`userId` 为空）    |
+| Twikoo `/api/index.php`    | 表单 `token`         | 与全局 Token 相同          |
+| 图库列表 / 搜索 / 删除     | Session 或 Token     | 普通用户仅自己；管理员全部 |
+| 图片直链 `GET /images/...` | 无（Referer 防盗链） | 知道 URL 即可访问          |

 普通用户上传目录固定为 `images/`；自定义 `folder` 仅管理员或全局 Token 可用。

@@ -152,12 +152,12 @@ npm run dev

 ## API 概览

-| 方法 | 路径 | 说明 |
-|------|------|------|
-| POST | `/api/images/upload` | 上传图片 |
-| GET | `/api/images` | 分页列表 |
-| DELETE | `/api/images` | 删除单张（`key`） |
-| POST | `/api/index.php` | Twikoo / EasyImage 2.0 |
+| 方法   | 路径                 | 说明                   |
+| ------ | -------------------- | ---------------------- |
+| POST   | `/api/images/upload` | 上传图片               |
+| GET    | `/api/images`        | 分页列表               |
+| DELETE | `/api/images`        | 删除单张（`key`）      |
+| POST   | `/api/index.php`     | Twikoo / EasyImage 2.0 |

 上传示例：

@@ -172,11 +172,11 @@ curl -X POST "https://pic.example.com/api/images/upload" \

 ## Twikoo

-| 配置项 | 值 |
-|--------|-----|
-| `IMAGE_CDN` | `easyimage` |
-| `IMAGE_CDN_URL` | `https://你的域名/api/index.php` |
-| `IMAGE_CDN_TOKEN` | 与 `API_UPLOAD_TOKEN` 相同 |
+| 配置项            | 值                               |
+| ----------------- | -------------------------------- |
+| `IMAGE_CDN`       | `easyimage`                      |
+| `IMAGE_CDN_URL`   | `https://你的域名/api/index.php` |
+| `IMAGE_CDN_TOKEN` | 与 `API_UPLOAD_TOKEN` 相同       |

 ## 反向代理

@@ -197,13 +197,18 @@ npm test             # 单元测试

 ## 路线图

-| 版本 | 计划 |
-|------|------|
-| **v1.0.2** | 中英文、移动端菜单、统计/上传 UI、Docker 重置密码（当前） |
-| **v1.0.1** | 设置页版本展示、移动端上传偏好布局修复 |
-| **v1.0.0** | 本地存储、多用户、API、Twikoo |
-| **v1.1.0** | S3、Cloudflare R2 等对象存储后端 |
+| 版本       | 计划                                              |
+| ---------- | ------------------------------------------------- |
+| **v1.0.3** | CI 与 Docker 多架构构建修复（当前）               |
+| **v1.0.2** | 中英文、移动端菜单、统计/上传 UI、Docker 重置密码 |
+| **v1.0.1** | 设置页版本展示、移动端上传偏好布局修复            |
+| **v1.0.0** | 本地存储、多用户、API、Twikoo                     |
+| **v1.1.0** | S3、Cloudflare R2 等对象存储后端                  |

 ## License

 [MIT](LICENSE)
+
+## 友链
+
+[LINUX DO](https://linux.do/)
@@ -2,10 +2,6 @@
 import logoLight from '~/assets/image/logo-light.png'
 import logoDark from '~/assets/image/logo-dark.png'

-const emit = defineEmits<{
-  success: []
-}>()
-
 const router = useRouter()
 const { login, fetchStatus, authStatus } = useAuth()
 const toast = useToast()
@@ -47,7 +43,6 @@ async function submit() {
      username.value = ''
      password.value = ''
      secret.value = ''
-      emit('success')
      toast.add({ title: t('auth.loginSuccess'), color: 'success' })
    } else {
      toast.add({
@@ -108,15 +103,11 @@ async function submit() {
            >
              {{ t('auth.adminSecret') }}
            </label>
-            <UInput
+            <PasswordInput
              id="admin-secret"
              v-model="secret"
-              type="password"
              :placeholder="t('auth.adminSecretPlaceholder')"
              autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
              @keyup.enter="submit"
            />
            <p class="text-xs leading-relaxed text-muted">
@@ -151,15 +142,11 @@ async function submit() {
            >
              {{ t('auth.password') }}
            </label>
-            <UInput
+            <PasswordInput
              id="login-password"
              v-model="password"
-              type="password"
              :placeholder="t('auth.password')"
              autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
              @keyup.enter="submit"
            />
          </div>
@@ -36,6 +36,10 @@ watch(open, (isOpen) => {
 onUnmounted(() => {
  document.removeEventListener('click', onDocumentClick, true)
 })
+
+function toggleOpen() {
+  open.value = !open.value
+}
 </script>

 <template>
@@ -50,7 +54,7 @@ onUnmounted(() => {
      icon="i-lucide-menu"
      :aria-label="t('nav.menu')"
      :aria-expanded="open"
-      @click.stop="open = !open"
+      @click.stop="toggleOpen"
    />

    <div
@@ -37,6 +37,10 @@ watch(open, (isOpen) => {
 onUnmounted(() => {
  document.removeEventListener('click', onDocumentClick, true)
 })
+
+function toggleOpen() {
+  open.value = !open.value
+}
 </script>

 <template>
@@ -51,7 +55,7 @@ onUnmounted(() => {
      icon="i-lucide-user"
      :aria-label="t('nav.account')"
      :aria-expanded="open"
-      @click.stop="open = !open"
+      @click.stop="toggleOpen"
    />

    <div
@@ -0,0 +1,50 @@
+<script setup lang="ts">
+defineOptions({
+  inheritAttrs: false
+})
+
+const model = defineModel<string>({ default: '' })
+
+defineProps<{
+  id?: string
+  placeholder?: string
+  autocomplete?: string
+}>()
+
+const show = ref(false)
+const { t } = useI18n()
+</script>
+
+<template>
+  <UInput
+    :id="id"
+    v-model="model"
+    :type="show ? 'text' : 'password'"
+    :placeholder="placeholder"
+    :autocomplete="autocomplete"
+    size="lg"
+    class="w-full"
+    :ui="{ root: 'w-full', trailing: 'pe-1' }"
+    v-bind="$attrs"
+  >
+    <template #trailing>
+      <UButton
+        color="neutral"
+        variant="link"
+        size="sm"
+        :icon="show ? 'i-lucide-eye-off' : 'i-lucide-eye'"
+        :aria-label="show ? t('auth.hidePassword') : t('auth.showPassword')"
+        :aria-pressed="show"
+        :aria-controls="id"
+        type="button"
+        @click="() => { show = !show }"
+      />
+    </template>
+  </UInput>
+</template>
+
+<style scoped>
+:deep(::-ms-reveal) {
+  display: none;
+}
+</style>
@@ -83,7 +83,9 @@ export function useAppearanceMenus() {
  }

  async function setLocalePreference(code: string) {
-    await setLocale(code)
+    if (code === 'zh-CN' || code === 'en') {
+      await setLocale(code)
+    }
  }

  return {
@@ -188,6 +188,7 @@ export function useImageList() {
    activeSearch,
    listSummary,
    fetchList,
+    fetchSearch,
    fetchTotal,
    refreshList,
    initializeList,
@@ -38,7 +38,7 @@ async function submit() {
  if (!canSubmit.value || loading.value) return

  if (newPassword.value !== confirmPassword.value) {
-    toast.add({ title: t('password.mismatch'), color: 'error' })
+    toast.add({ title: t('auth.passwordMismatch'), color: 'error' })
    return
  }

@@ -101,14 +101,10 @@ async function submit() {
            >
              {{ t('password.current') }}
            </label>
-            <UInput
+            <PasswordInput
              id="current-password"
              v-model="currentPassword"
-              type="password"
              autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
            />
          </div>

@@ -119,15 +115,11 @@ async function submit() {
            >
              {{ t('password.new') }}
            </label>
-            <UInput
+            <PasswordInput
              id="new-password"
              v-model="newPassword"
-              type="password"
              :placeholder="t('password.newPlaceholder')"
              autocomplete="new-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
            />
            <PasswordStrength :password="newPassword" />
          </div>
@@ -139,14 +131,10 @@ async function submit() {
            >
              {{ t('password.confirmNew') }}
            </label>
-            <UInput
+            <PasswordInput
              id="confirm-new-password"
              v-model="confirmPassword"
-              type="password"
              autocomplete="new-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
            />
          </div>

@@ -22,7 +22,7 @@ const canSubmit = computed(() =>

 onMounted(async () => {
  const status = await fetchStatus()
-  if (!status.initialized) {
+  if (!status.initialized && !status.legacyMode) {
    await router.replace('/setup')
    return
  }
@@ -118,15 +118,11 @@ async function submit() {
          >
            {{ t('auth.password') }}
          </label>
-          <UInput
+          <PasswordInput
            id="register-password"
            v-model="password"
-            type="password"
            :placeholder="t('setup.passwordPlaceholder')"
            autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
          />
          <PasswordStrength :password="password" />
        </div>
@@ -138,15 +134,11 @@ async function submit() {
          >
            {{ t('auth.confirmPassword') }}
          </label>
-          <UInput
+          <PasswordInput
            id="register-confirm"
            v-model="confirmPassword"
-            type="password"
            :placeholder="t('setup.confirmPlaceholder')"
            autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
          />
        </div>

@@ -9,7 +9,8 @@ const { setup, migrate, fetchStatus } = useAuth()
 const toast = useToast()
 const { t } = useI18n()

-const isMigrate = computed(() => route.query.migrate === '1')
+const needsMigration = ref(false)
+const isMigrate = computed(() => needsMigration.value || route.query.migrate === '1')

 const username = ref('')
 const password = ref('')
@@ -26,6 +27,11 @@ const canSubmit = computed(() =>

 onMounted(async () => {
  const status = await fetchStatus()
+  needsMigration.value = status.needsMigration
+  if (status.legacyMode && !status.needsMigration) {
+    await router.replace('/')
+    return
+  }
  if (status.initialized && !status.needsMigration) {
    await router.replace('/')
  }
@@ -129,15 +135,11 @@ async function submit() {
          >
            {{ t('auth.password') }}
          </label>
-          <UInput
+          <PasswordInput
            id="setup-password"
            v-model="password"
-            type="password"
            :placeholder="t('setup.passwordPlaceholder')"
            autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
          />
          <PasswordStrength :password="password" />
        </div>
@@ -149,15 +151,11 @@ async function submit() {
          >
            {{ t('auth.confirmPassword') }}
          </label>
-          <UInput
+          <PasswordInput
            id="setup-confirm"
            v-model="confirmPassword"
-            type="password"
            :placeholder="t('setup.confirmPlaceholder')"
            autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
          />
        </div>

@@ -64,6 +64,8 @@
    "setupFailed": "Setup failed. Check your input",
    "migrateFailed": "Migration failed. Check your input",
    "passwordMismatch": "Passwords do not match",
+    "showPassword": "Show password",
+    "hidePassword": "Hide password",
    "registerSuccess": "Registered successfully",
    "errors": {
      "invalidUsername": "Username must be 3–32 letters, numbers, or underscores",
@@ -93,7 +95,6 @@
    "new": "New password",
    "confirmNew": "Confirm new password",
    "newPlaceholder": "Set new password",
-    "mismatch": "New passwords do not match",
    "changed": "Password updated",
    "tooShort": "New password must be at least 8 characters",
    "changeFailed": "Failed to change password",
@@ -64,6 +64,8 @@
    "setupFailed": "初始化失败，请检查输入",
    "migrateFailed": "迁移失败，请检查输入",
    "passwordMismatch": "两次输入的密码不一致",
+    "showPassword": "显示密码",
+    "hidePassword": "隐藏密码",
    "registerSuccess": "注册成功",
    "errors": {
      "invalidUsername": "用户名需为 3–32 位字母、数字或下划线",
@@ -93,7 +95,6 @@
    "new": "新密码",
    "confirmNew": "确认新密码",
    "newPlaceholder": "设置新密码",
-    "mismatch": "两次输入的新密码不一致",
    "changed": "密码已修改",
    "tooShort": "新密码至少 8 位",
    "changeFailed": "修改密码失败",
@@ -1,19 +1,18 @@
 {
  "name": "pichost",
-  "version": "1.0.2",
+  "version": "1.0.4",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "pichost",
-      "version": "1.0.2",
+      "version": "1.0.4",
      "hasInstallScript": true,
      "license": "MIT",
      "dependencies": {
        "@iconify-json/lucide": "^1.2.114",
        "@nuxt/ui": "^4.9.0",
        "@nuxtjs/i18n": "^10.6.0",
-        "jose": "^6.0.11",
        "nuxt": "^4.4.8",
        "sharp": "^0.35.3",
        "tailwindcss": "^4.3.1"
@@ -12242,15 +12241,6 @@
        "jiti": "lib/jiti-cli.mjs"
      }
    },
-    "node_modules/jose": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmmirror.com/jose/-/jose-6.2.3.tgz",
-      "integrity": "sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/panva"
-      }
-    },
    "node_modules/js-tokens": {
      "version": "4.0.0",
      "resolved": "https://registry.npmmirror.com/js-tokens/-/js-tokens-4.0.0.tgz",
@@ -1,6 +1,6 @@
 {
  "name": "pichost",
-  "version": "1.0.2",
+  "version": "1.0.4",
  "description": "Self-hosted image hosting for your NAS / home server — Nuxt admin UI, local disk storage, server-side WebP compression, referer protection, Twikoo/EasyImage compatible.",
  "homepage": "https://github.com/O96u/PicHost#readme",
  "repository": {
@@ -39,7 +39,6 @@
    "@iconify-json/lucide": "^1.2.114",
    "@nuxt/ui": "^4.9.0",
    "@nuxtjs/i18n": "^10.6.0",
-    "jose": "^6.0.11",
    "nuxt": "^4.4.8",
    "sharp": "^0.35.3",
    "tailwindcss": "^4.3.1"
@@ -3,6 +3,6 @@ import { defineConfig } from 'vitest/config'
 export default defineConfig({
  test: {
    environment: 'node',
-    include: ['server/**/*.test.ts']
+    include: ['server/**/*.test.ts', 'scripts/**/*.test.ts']
  }
 })
Author	SHA1	Message	Date
O96u	7c45a78572	release: v1.0.4 Publish Docker image / build (linux/amd64, ubuntu-latest, amd64) (push) Canceled after 0s Publish Docker image / build (linux/arm64, ubuntu-24.04-arm, arm64) (push) Canceled after 0s Publish Docker image / merge (push) Canceled after 0s ci / ci (22, ubuntu-latest) (push) Canceled after 0s GitHub Release / release (push) Canceled after 0s Add PasswordInput with show/hide toggle, align legacy setup/register routing, merge duplicate i18n keys, and remove unused jose dependency.	2026-08-25 16:11:50 +08:00
O96u	661146ce20	docs: add Linux.do friend link and align README tables	2026-08-24 10:41:52 +08:00
O96u	9d2ee96af0	fix: CI typecheck and native ARM Docker builds for v1.0.3 Publish Docker image / build (linux/amd64, ubuntu-latest, amd64) (push) Canceled after 0s Publish Docker image / build (linux/arm64, ubuntu-24.04-arm, arm64) (push) Canceled after 0s Publish Docker image / merge (push) Canceled after 0s ci / ci (22, ubuntu-latest) (push) Canceled after 0s GitHub Release / release (push) Canceled after 0s Fix TypeScript errors blocking CI, split Docker publish into native amd64/arm64 jobs with manifest merge, and add npm cache mounts.	2026-08-23 18:26:13 +08:00