From fa657940aff4474dc895de850789bf706d7edbbe Mon Sep 17 00:00:00 2001
From: Nixevol <guaotiantang@gmail.com>
Date: Wed, 22 Apr 2026 15:58:59 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20=E7=99=BB=E5=BD=95=E6=9C=BA=E5=88=B6?=
 =?UTF-8?q?=E6=94=B9=E4=B8=BA=E8=B4=A6=E5=8F=B7+=E5=AF=86=E7=A0=81?=
 =?UTF-8?q?=E6=A8=A1=E5=BC=8F=EF=BC=8C=E9=BB=98=E8=AE=A4=E8=B4=A6=E5=8F=B7?=
 =?UTF-8?q?root?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/main.py       | 8 ++++----
 static/index.html | 7 ++++++-
 static/js/app.js  | 4 +++-
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/app/main.py b/app/main.py
index c956bcb..6a2b31b 100644
--- a/app/main.py
+++ b/app/main.py
@@ -110,10 +110,10 @@ async def jwt_middleware(request: Request, call_next):
 
 
 @app.post("/api/login")
-async def login(password: str = Body(..., embed=True)):
-    if password != ADMIN_PASSWORD:
-        return JSONResponse(status_code=401, content={"detail": "密码错误"})
-    token = create_jwt_token({"user": "admin"})
+async def login(username: str = Body(..., embed=True), password: str = Body(..., embed=True)):
+    if username != "root" or password != ADMIN_PASSWORD:
+        return JSONResponse(status_code=401, content={"detail": "账号或密码错误"})
+    token = create_jwt_token({"user": username})
     return {"success": True, "token": token}
 
 
diff --git a/static/index.html b/static/index.html
index e75a667..e28c4ac 100644
--- a/static/index.html
+++ b/static/index.html
@@ -495,8 +495,13 @@
         <div class="modal-backdrop"></div>
         <div class="modal-content">
             <h3 id="loginTitle">系统登录</h3>
-            <p>由于安全原因，请先验证您的密码</p>
+            <p>由于安全原因，请先验证您的身份</p>
             <div class="form-group" style="margin-top: 16px;">
+                <label>账号</label>
+                <input type="text" id="loginUsername" class="form-input" value="root" readonly style="background-color: var(--td-bg-color-component); color: var(--td-text-color-secondary); cursor: not-allowed;">
+            </div>
+            <div class="form-group" style="margin-top: 16px;">
+                <label>密码</label>
                 <input type="password" id="loginPassword" class="form-input" placeholder="请输入密码以继续" onkeydown="if(event.key==='Enter') document.getElementById('loginBtn').click()">
             </div>
             <div class="modal-actions" style="margin-top: 24px;">
diff --git a/static/js/app.js b/static/js/app.js
index b58b52e..43261e8 100644
--- a/static/js/app.js
+++ b/static/js/app.js
@@ -156,6 +156,8 @@ function showLoginModal() {
         loginInput.focus();
         
         const handleLogin = async () => {
+            const usernameInput = $('#loginUsername');
+            const username = usernameInput ? usernameInput.value : 'root';
             const password = loginInput.value;
             if (!password) {
                 showToast('请输入密码', 'warning');
@@ -166,7 +168,7 @@ function showLoginModal() {
                 loginBtn.textContent = '登录中...';
                 const res = await api('/login', {
                     method: 'POST',
-                    body: JSON.stringify({ password })
+                    body: JSON.stringify({ username, password })
                 });
                 if (res.success && res.token) {
                     localStorage.setItem('token', res.token);