fix: app scan

app/citizen-frontend/src/pages/login.vue

@@ -21,6 +21,16 @@
             <v-card-text> 請輸入您的手機門號與登入密碼 </v-card-text>
             <!-- 表單 -->
             <v-form class="pa-4" @submit.prevent="handleLogin">
+              <v-alert
+                v-if="csrfRecoveryMessage"
+                class="mb-4"
+                density="compact"
+                type="warning"
+                variant="tonal"
+              >
+                {{ csrfRecoveryMessage }}
+              </v-alert>
+
               <v-alert
                 v-if="errorMessage"
                 class="mb-4"
@@ -134,7 +144,7 @@
 </template>
 
 <script setup lang="ts">
-import { ref } from "vue";
+import { computed, ref } from "vue";
 import { useRoute, useRouter } from "vue-router";
 import BrandAvatar from "@/components/BrandAvatar.vue";
 import { useAppStore } from "@/stores/app";
@@ -158,6 +168,11 @@ const errorMessage = ref(
     ? "此手機已完成註冊，請直接輸入密碼登入。"
     : "",
 );
+const csrfRecoveryMessage = computed(() =>
+  route.query.csrf === "refresh"
+    ? "安全驗證已失效，請重新整理頁面後再登入。"
+    : "",
+);
 
 /** 後端要求純數字、09 開頭、共 10 碼；允許使用者輸入時夾雜連字號或空白 */
 function normalizePhone(value: string) {