diff --git a/web/index.html b/web/index.html
index 032203d..cf922b4 100644
--- a/web/index.html
+++ b/web/index.html
@@ -1741,7 +1741,9 @@
                 try { clientData = JSON.parse(clientJson); } catch { alert(t('local.clientInvalid')); return; }
                 if (!clientData.clientId || !clientData.clientSecret) { alert(t('local.clientSecretMissing')); return; }
             }
-            const payload = { refreshToken: tokenData.refreshToken, accessToken: tokenData.accessToken || '', clientId: clientData?.clientId || '', clientSecret: clientData?.clientSecret || '', authMethod: isSocial ? 'social' : 'idc', provider: provider };
+            // 根据是否有 clientData 判断认证方式
+            const authMethod = clientData ? 'idc' : 'social';
+            const payload = { refreshToken: tokenData.refreshToken, accessToken: tokenData.accessToken || '', clientId: clientData?.clientId || '', clientSecret: clientData?.clientSecret || '', authMethod: authMethod, provider: provider };
             const res = await fetch('/admin/api/auth/credentials', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-Admin-Password': password }, body: JSON.stringify(payload) });
             const d = await res.json();
             if (d.success) { closeModal(); loadAccounts(); loadStats(); alert(t('local.importSuccess') + ': ' + (d.account?.email || d.account?.id)); }
@@ -1754,9 +1756,10 @@
                 let success = 0, failed = 0, errors = [];
                 for (const item of items) {
                     if (!item.refreshToken) { failed++; errors.push('missing refreshToken'); continue; }
-                    const provider = (item.provider || 'BuilderId').toLowerCase();
-                    const isSocial = provider === 'google' || provider === 'github' || provider === 'builderid';
-                    const payload = { refreshToken: item.refreshToken, clientId: item.clientId || '', clientSecret: item.clientSecret || '', authMethod: isSocial ? 'social' : 'idc', provider: item.provider || 'BuilderId' };
+                    // 根据是否包含 clientId/clientSecret 判断认证方式
+                    const hasClientCredentials = !!(item.clientId && item.clientSecret);
+                    const authMethod = hasClientCredentials ? 'idc' : 'social';
+                    const payload = { refreshToken: item.refreshToken, clientId: item.clientId || '', clientSecret: item.clientSecret || '', authMethod: authMethod, provider: item.provider || 'BuilderId' };
                     try {
                         const res = await fetch('/admin/api/auth/credentials', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-Admin-Password': password }, body: JSON.stringify(payload) });
                         const d = await res.json();