diff --git a/backend/app/dto/auth.go b/backend/app/dto/auth.go
index 9f46df000..ccaa2ec12 100644
--- a/backend/app/dto/auth.go
+++ b/backend/app/dto/auth.go
@@ -28,8 +28,8 @@ type Login struct {
 	IgnoreCaptcha bool   `json:"ignoreCaptcha"`
 	Captcha       string `json:"captcha"`
 	CaptchaID     string `json:"captchaID"`
-	AuthMethod    string `json:"authMethod"`
-	Language      string `json:"language"`
+	AuthMethod    string `json:"authMethod" validate:"required,oneof=jwt session"`
+	Language      string `json:"language" validate:"required,oneof=zh en tw"`
 }
 
 type MFALogin struct {
diff --git a/frontend/src/views/login/components/login-form.vue b/frontend/src/views/login/components/login-form.vue
index 563242bf1..71d849172 100644
--- a/frontend/src/views/login/components/login-form.vue
+++ b/frontend/src/views/login/components/login-form.vue
@@ -179,7 +179,7 @@ const loginForm = reactive({
     ignoreCaptcha: true,
     captcha: '',
     captchaID: '',
-    authMethod: '',
+    authMethod: 'session',
     agreeLicense: false,
     language: 'zh',
 });
@@ -195,7 +195,7 @@ const mfaLoginForm = reactive({
     password: '',
     secret: '',
     code: '',
-    authMethod: '',
+    authMethod: 'session',
 });
 
 const captcha = reactive({
@@ -232,7 +232,7 @@ const login = (formEl: FormInstance | undefined) => {
             ignoreCaptcha: globalStore.ignoreCaptcha,
             captcha: loginForm.captcha,
             captchaID: captcha.captchaID,
-            authMethod: '',
+            authMethod: 'session',
             language: loginForm.language,
         };
         if (!globalStore.ignoreCaptcha && requestLoginForm.captcha == '') {