user/settings/security: add token description about 2FA

README.md

@@ -47,6 +47,7 @@ The goal of this project is to make the easiest, fastest, and most painless way
 - Migrate and mirror repository and its wiki
 - Web editor for repository files and wiki
 - Jupyter Notebook
+- Two-factor authentication
 - Gravatar and Federated avatar with custom source
 - Mail service
 - Administration panel

README_ZH.md

@@ -29,6 +29,7 @@ Gogs 的目标是打造一个最简单、最快速和最轻松的方式搭建自
 - 支持在线编辑仓库文件和 Wiki
 - 支持自定义源的 Gravatar 和 Federated Avatar
 - 支持 Jupyter Notebook
+- 支持两步验证登录
 - 支持邮件服务
 - 支持后台管理面板
 - 支持 MySQL、PostgreSQL、SQLite3、MSSQL 和 [TiDB](https://github.com/pingcap/tidb)（通过 MySQL 协议）数据库

conf/locale/locale_en-US.ini

@@ -340,6 +340,7 @@ two_factor_off = Off
 two_factor_enable = Enable
 two_factor_disable = Disable
 two_factor_view_recovery_codes = View and save <a href="%s%s">your recovery codes</a> in a safe place. You can use them as passcode if you lose access to your authentication application.
+two_factor_http = For HTTP/HTTPS operations, you are no longer able to use plain username and password. Please create and use <a href="%[1]s%[2]s">Personal Access Token</a> as your credential, e.g. <code>%[3]s</code>.
 two_factor_enable_title = Enable Two-factor Authentication
 two_factor_scan_qr = Please use your authentication application to scan the image:
 two_factor_or_enter_secret = Or enter the secret:

templates/user/settings/security.tmpl

@@ -23,6 +23,7 @@
 				{{if .TwoFactor}}
 					<br>
 					<p>{{.i18n.Tr "settings.two_factor_view_recovery_codes" AppSubUrl "/user/settings/security/two_factor_recovery_codes" | Safe}}</p>
+					<p>{{.i18n.Tr "settings.two_factor_http" AppSubUrl "/user/settings/applications" "https://{token}@try.gogs.io/user/repo.git" | Safe}}</p>
 				{{end}}
 			</div>
 		</div>