new funcionality

lang/en/messages.php

@@ -10,4 +10,17 @@ return [
     'cannot_delete_last_admin' => "You can't delete the last administrator.",
     'self_service_requires_user' => 'This resource is self-service: it needs a token with an associated user (does not work with client_credentials).',
     'user_not_trashed' => 'This user is not in the trash.',
+    'two_factor_already_enabled' => 'You already have 2FA enabled. Disable it before setting it up again.',
+    'two_factor_not_pending' => 'There is no pending 2FA setup to confirm.',
+    'invalid_two_factor_code' => 'Invalid code. Try again or use a recovery code.',
+    'invalid_password' => 'Incorrect password.',
+    'two_factor_not_enabled' => "You haven't enabled 2FA yet.",
+    'webhook_url_not_allowed' => "That URL can't be used for a webhook: it doesn't resolve to a public address (localhost, private IPs, and cloud metadata addresses are blocked).",
+    'client_not_confidential' => "This client doesn't have a secret (it's public) — there's nothing to rotate.",
+    'password_reset_link_sent' => "If an account exists with that email, we've sent a link to reset the password.",
+    'reset_password_subject' => 'Reset your password',
+    'reset_password_intro' => "You're receiving this email because we received a password reset request for your account.",
+    'reset_password_action' => 'Reset password',
+    'reset_password_expire' => 'This link expires in :count minutes.',
+    'reset_password_no_action' => "If you didn't request this, no further action is required.",
 ];