【安全加密】异地登录提醒：新设备登录的实时通知

---login: 登录触发，新设备的实时通知
function login(actor)
    local player = class(actor)
    if not player then return end
    local devId = actor:GetDeviceId()
    local known = Login.knownDevices(actor:GetUserId())
    if not known[devId] then
        -- 新设备：记录并通知
        Login.rememberDevice(actor:GetUserId(), devId)
        local phone = Account.phoneOf(actor:GetUserId())
        if phone then
            Sms.send(phone, '您的账号在' ..
                Login.regionOf(devId) ..
                '的新设备上登录。若非本人操作，请立即修改密码。')
        end
        sendmail(actor, 8017, '新设备登录提醒',
            '登录地区：' .. Login.regionOf(devId) ..
            '，时间：' .. os.date('%m-%d %H:%M'), '')
    end
end

---通知与风控的联动：异常设备的加验
function Login.riskGate(actor, devId)
    local risk = Login.deviceRisk(devId)
    if risk == 'new' then
        -- 新设备：敏感操作要求二次验证
        setplayvar(actor, "HUMAN", "Need2FA", 1, 0)
        sendmsg(actor, 1, "新设备登录，交易前请完成安全验证")
    elseif risk == 'flagged' then
        -- 被标记的设备：拒绝登录
        QF_KickActor(actor, '设备风险受限')
    end
end