[shaohuzhang1]

【【门户访问设置】登录设置的登录失败N次锁定账号，N无法设置为 -1】
https://www.tapd.cn/tapd_fe/45245355/bug/detail/1145245355001079125

[shaohuzhang1]

Here is a concise review of the code change:

Issue: Logical/Security Flaw

• min="-1" allows negative values: failed_attempts represents a count of failures. Allowing -1 (or any negative number) is meaningless and logically incorrect for this field. It could lead to unexpected behavior in backend logic (e.g., if the system checks attempts >= threshold, a negative value might bypass lockouts incorrectly or cause calculation errors).

Recommendation:

• Revert to :min="0" (or 1 if zero failures shouldn't be stored). Negative values are not valid for a "failure counter."
• If the intent was to allow clearing/resetting via the UI, use value-on-clear appropriately, but keep min non-negative.

Additional Suggestion:

• Ensure the UI text ("Login failed... times") clearly indicates that this is a threshold for locking account, not the current attempt count. If it's the threshold, min="1" is safer because locking after 0 failures makes no sense.