From b7a8a86e531c229130a8afbc79854ddd6d17206a Mon Sep 17 00:00:00 2001
From: jeremygan2021 <jeremygan2021@gmail.com>
Date: Sun, 16 Nov 2025 18:00:28 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0API=E9=89=B4=E6=9D=83?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env                                     |   6 +-
 __pycache__/admin_routes.cpython-312.pyc | Bin 28619 -> 30677 bytes
 __pycache__/auth.cpython-312.pyc         | Bin 0 -> 4810 bytes
 __pycache__/config.cpython-312.pyc       | Bin 1565 -> 1673 bytes
 __pycache__/database.cpython-312.pyc     | Bin 3935 -> 3935 bytes
 __pycache__/main.cpython-312.pyc         | Bin 4483 -> 5073 bytes
 __pycache__/models.cpython-312.pyc       | Bin 328 -> 328 bytes
 __pycache__/mqtt_manager.cpython-312.pyc | Bin 10828 -> 10828 bytes
 __pycache__/schemas.cpython-312.pyc      | Bin 6949 -> 6949 bytes
 admin_routes.py                          |  63 ++++++++++++
 api/__init__.py                          |   8 +-
 api/__pycache__/__init__.cpython-312.pyc | Bin 550 -> 616 bytes
 api/__pycache__/contents.cpython-312.pyc | Bin 13120 -> 13366 bytes
 api/__pycache__/devices.cpython-312.pyc  | Bin 8111 -> 7833 bytes
 api/__pycache__/todos.cpython-312.pyc    | Bin 7407 -> 7658 bytes
 api/contents.py                          |  14 +--
 api/devices.py                           |  43 ++++-----
 api/todos.py                             |  18 ++--
 auth.py                                  | 118 +++++++++++++++++++++++
 config.py                                |   4 +
 main.py                                  |  30 +++++-
 templates/admin/base.html                |  17 +++-
 templates/admin/login.html               |  74 ++++++++++++++
 23 files changed, 343 insertions(+), 52 deletions(-)
 create mode 100644 __pycache__/auth.cpython-312.pyc
 create mode 100644 auth.py
 create mode 100644 templates/admin/login.html

diff --git a/.env b/.env
index fdaeb34..c64ef1e 100644
--- a/.env
+++ b/.env
@@ -25,4 +25,8 @@ INK_HEIGHT=300
 # 安全配置
 SECRET_KEY=123tangledup-ai
 ALGORITHM=HS256
-ACCESS_TOKEN_EXPIRE_MINUTES=30
\ No newline at end of file
+ACCESS_TOKEN_EXPIRE_MINUTES=30
+
+# 管理员配置
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=123456
\ No newline at end of file
diff --git a/__pycache__/admin_routes.cpython-312.pyc b/__pycache__/admin_routes.cpython-312.pyc
index 703d6796a742ee5aa0d9496cb614a46559ec4d5b..aeaab725ca8a40e79a67038891219b88219fe7a9 100644
GIT binary patch
delta 6814
zcmbVQdvH|M8NYY;?%mDqCY#MW8_0t^H-v<TU_t^U5J;(nM_@$PVUlI<O|o$x;oQ4|
zG<HQ9fm$W$1w{)TY}J8+qO6WiwN|w4bZQ?7Vw2u!r#e$a`V7)PD&rshzH|5PBSxg|
z%zk^%cfRvIf9E^r?t6b>KlnGB^<HMCm4VL-CyM>i9b;KVhF_b<>Q3D2Vi|!Etbvl?
z9M9Zfsi!Ph?x~<WTVP(W(o-3%@>B(@J=MV)PYvbU1GT|gPc41U4AcedJasH%V8l!z
z>#XApi$)m6;|30UMjJ4mda-_JyYf*%?xJkbde(WypiKyCgdEWz<cdzQp%_^GoRGKQ
zlvuR@R_(x5;j~qt*(l`emS!0h=yL)O8qq?b*dP?aw-_unp`{d?R>75GbD{2ObxE41
zprzj+%-PQ+yj!G8w#-eH1b=wZrF+oNQv0Q%13W29v9ma_y8ISbSEQ_7qOV>t?<-eV
zLfmMd7phV;+@@=AR;OwJF3osH8uunK)g*N$GP6|Iy|y-0x4_TPW1zXI)T<x&vM#C7
zvrO02;ZD^wLywkYjI&<6oocZN^Ha1m>sp)*sao_{yVJP0=;eZ>{zTj@2|JCm+385*
z&KiS;lcrg8FV}UiU6`u-7QJ1R)aYr|H8~fjYD#1yjeCpwmn8KkveBm7S#evcomt~v
z8m}8KEK6$gtk8XGx&5XZ^wpfuoU(dl!hXw5S7U$BHSogn6b-9%`_UGCKZEx(dr#|4
z=J>R^L|>Yb1D@^!^q~zfyaK+6<&}wjvC1VjQCMdS?J4fH>+ZF5q?q|)^GOD`I%Rdo
z{k*$V`3L`MhD8!(*&iB^lpmOncI@Sw0^tFF$jz!*M3jcZAxZ4@1-z1^nu)k8B1*E#
zg~UCwFW$syE9Zee4BzWV7-eHusbR<neLHWV?iX>&CMpMHgx$kR1~@(pg7GY;9|c<(
z8FVOP+gwq>Gy*~bf83Cqe8ISzb(<q)u-;k@pDQmub7l0A%VWo`JoU!qpB}yX%&S*V
z{E*J5ncj#zD28Oe&nt_<4Re!M2>L@!SDWByI&Dym5fV^slI)cuQm-#8h&Qq|0UCAV
zpxhY@oHmdOuteqoahp`LBubJ$98!$~qD<^KQwl`Q-X;cz17M{mo+mON*b?SNc{!^i
zYNaZBhrI(LSqMx#c%*J1pD_P@keRkK7RQ0;zUZXcHDPugTXo4i|4)vxlbsi<mY!Pw
z_L57Eu5nA(Uu}7lw(1F6^>|J5RIY0(JMWsw*vemLjCS)hV>FpRlQ8!Wb?_Y)wsD<m
ziAW*|d4r;AX&;87?G6(`wGc5V26u|Ym#6})F~gVEtR6CR2g5Q?LfU0uYM&v4GG;5t
zCcY6v3X?;oiEI|w5#_>~{0za+2I3>yC{r-fk&$Ez9G$lbCgg-1arxV{v78Y%!i;cn
zH1LA?tR-1+nch}VYA6%00MQHp1t(Yq+i_!3io(L4gvI4&_X8|ufP=zf8>s?aWD$^c
zYN5Di*iXb>uiU$ngm**60O4WysYaO^B(+HDfkcXcTsaaw_3^>iE{{I;@xdo9pL^uW
z$$eLkJoU-Bb8cf2DXK{%Buw09k_$`JEDEdML_OkTy(pvsEhNB18e!-*Y1+_BvKYw{
zBnZQ(gr!61my;%VQtcYJq{z;oUnVWUs)Mg|9Eb)l7h}mj(ma`4KapF1(OiFO&zsGY
ztvwU1Jr|pLKAhil(0tf&$Z^auVX2#{X^fAo6PC(rJY&zBYFT-(>+q&So5trXy=Y(d
zVM}yHVmx7A_8*?fE}wx^<P}dk+!GG>czxScVd+#}(NuoZH8Z!$dY$32ZPN^wVT;3c
zwR3eYyVs1ZCLED{@mnMK&M+K&DJ<`Thd3;mA?5C_T<j_@XSg_)kxj}=xdqX!3<Ure
z!JYNRzHs0tl(*L&Zvix8$?`(&um-Bh7ZAOKmcq@_0!ZjjJkPx5B0(760bdD`p=Ef1
zoiW)DY}&VJk}ICziZ5{`kOTXilUc8?xnye}=h{D$Fqntx>RFX-ifyrcV!8(#hgR!M
zt=21%(TQX&l66SBkbDEldL-WjqUI3M2VJdK4hvza7y2-{pRC5&HAv7iWvnr`gkr;?
zK~L~XgFC}sB9I+0y**}elo;>cfa2JM$TlSRAh{C>rknOP&Am9Vse64eB^iMv(I<%a
z`F*0)8}Lgq@xoM88OhntdSYyDvB5;#z)@=R>!awMYVn0bGB_`}GfC3^CYT}~oHzCR
z38=xQK(-)3*HrU;BEhyht9$XCg3Af@k)~k)hG`q65cFhfzV-^D?DYr85XgKdb|wD}
zBkNIqRJ<TcmI3E#IS@Ce`NK=1k3g#r0*{1%?9GZpC?0kSh@2`P6y?FNkj$OR^@mB2
zEWp*Xgi8it0uL3mA*sq;t~u;nCE{wBPXi&ijK-BPuR6p%kY_lfAqdPn8CHJdDlMSJ
zwt59YXYYlz$Iq86G1+{mML;4dE6Xd&F*6h@s-@o_kVPU2Zi8x$7ly1+qUEk=9}0~C
zaXY@$@flSjeq1vPfGDz5-a9-jh6J}o1N$uHBGl-&QOm*yfJzo1fHV5hT3x0N9}R5}
zg22yF@-gN3+6}QI6}wm-z3_30b6Z}ltg_#b7XD~;D^Jn!fHF~?@BXriqy$D|dRTGP
z%uCs?=9CbqKoWN7H+dLcG6PBTJuB|Jj=lpR@OPB7u*yI4yJGLx{LRD$l(!nHiu!=9
zIwUb5`rzUcFX=|&QEoJBT#uzZ9p95ENI^^Rs&SeHyhTF3tJt*Q@S!=T4nB%<-$n8m
zlE;y3R>l_OM-xY!yO8Wc_Kc)#MqYYDAQYDr)6@b5u~pg?@CJN?V(@-425VGf(7Q+5
z!svm@OFnM^dTRvr-G^i@vX$z_ipC@s`f!4(pUq=hx-ms=Tv$Z$ZbQ85xP2Oy+Su5e
zjd$B1iv`O|=k@{zl7=d&3nqUM?_YE)99Fh0-^P#P-1n3-%U$!6Vpb{!cQtvCP%mf-
z6cp8xrA#j`YyP^qQo35J*f~m|wZ3^v!ZV{kB$E?3Ok{>UiNhmEFrDNmk|&Tvl;5?M
zms7~~;W*hPXp|gmY7usER$D_SMI&8)3?x-nlpOFIN2UG~zeGfa17WYwtL5k{h;;&r
zqzgvnLSwh`uNCIl#kNc4wB7V_XSI!%1p5T(P(JD`Oz9h0Gm%6yj9AgOR}Vhj^xz>;
z5c!gR@glD7LvjuY9)H*_$`iq9QCYP!k{(Sjfz0!<C)XZk*?qCvu9c?t0C2YL&DAdb
zDA@~uf_r~3Kn}rF96Jdlsum$4_6l&z*D>_mhW2P;T0`1-Sg7*Q&q2)1sRqBGfrxHC
zoJ`z7sB0<5$Jg6`97I2;40e~*(S**}UQP*GF1;wgJ_!cBA%VQ2oa-)GOp7rCLy1UK
zyB=sSoW<I;;=J;CcU3Xnb{5=r=skG@;`uGYWU2CY<Hp#5jYf|3DUbG)vZC_ip2}$A
zR^qm5XrMlBf>q=dBuO-M<B&R4ichIm;5U&$T}`M<JJ=!LHd?&+ss1yNcR)Lojw>g&
zua6zwT5c@&p^mqZh(I=~d}J8w2=_kf$5!QoJ1bIJq4O)e-HMuWfPf;|7Ygqt@8H0y
zX%*mYB4s1LhQc(o*YU{?1nj0qg;%O7#I6S0963BN5D>M(X)mbcm$0tF5PNF-j`*3T
zg`=>Z3N6olsQ8xhoZim$SB-R!=;oT4=PXh1Yxhp=RrXh4a)p6Wp7A`Mt1>fyPPWE6
z?|GGLOV7Qwb+Gr73+S*(t3U#K1osHR1j8BUQI__ti@uAT<T+LH6~#$HDXEm!Dzl%2
zgMKNDS2Czj!VtkL1g#+X1wLU9R?UN6$t%l5H7YmyY*Fektt2htb0}gOCfK)WLG9X=
zfaWl1mR3D!CmqCU=58<k?*M-sh;Yi2GoVvKWdMW3N5eygBawJ=2_)`_Dc(%eycwBA
zA5~s}TLW|`itG23clx{k4_s4!e-CQNIFbn@$;dHiauLZNkkF%w2G6GipNx?zgP^Jy
zi3fQtBrP7B=A_m{CSmfC*!cmG<=Bnx)k=~7@Q(e!Qw?E>NN9;xkB5W4-#?(eQCnd5
zdUtx^Jv|R4`5^pz6Oc$gO4Irm;L{c)g-CjUz&#tUCtgYU++P~i{<pDfuSW#lJmHO<
zUTL03`GqLY4Ttd`uASj<fWB4J7eD#}MPGC1>jT+~;twKu771SJ$kRy9BEd6<c1eO=
ziSA*7n}*b583~4dnz;^?(Gp{6gGeF)aV5C|Jm{>9G_9N)avT55lqgd}%c6Cs+QwPu
z`)u<ygN-#G8<>VWkNMPHFZoXI_!J+n8yQ2(G|o-WVGLQ5Y|aFmGunJ=!#JDsKHCCs
z^!dfda+URe%qyZlWtAt_e*arjuF`9^GS)VgnKx~O-w(5#(<b<x<{3xMv>Bf)jH7T=
z-h3!Doq<CuW6K>~a%jP)xD1UhpEe*LE)8haIl($d-Dnkj1%E7T2YamcQwD$I()c)C
O5aaHBm*YN$K>r7&=ri2_

delta 5007
zcmb7HTTC3+8Q$5;a9!5;!o}Pc%x$?XHej$#DBu{&#ldlbDy(WY19N~)cXpODLu^Rh
z?ZvSasjcIjheWAsxlJ!|?4(V%Nz^*2ob)lRT1V>3NKvXjwDMCQD)k``Rsa8--JMy2
zfg<tE%zw^*znrsw{g?FdXHwb6et)qG{^+aKv3F;$msPp%%h%g~6s^%}BXwGRq(O42
zF10uw)EXm=T2rJ+I}|yjHAk8`y(HeEwM1I@duhB?YmKx@F1L&LRsY?xI}!?Zxgu>q
zk?x2OSEQY^KQql9RP8$!AjNn0+;NKq*dvpwEYFgpmJ_$Smjsr)>b@(!9Ct^Kd;c!E
z4>-6xv)qqW?8se7y10H>t#U}{&PoVWJ0*~I_BZc=u{_!~9v!qL<~$2$C7-HsN>=4f
za@;&Jm86_>RYT}9HrCn_BfVKkV|7kRo8*WHqnGvMFqcxOHaMgl$w~<Xol=CSPvp^d
zX=9@;J?C{_PD|4lwT$J_wzOYV$e}GH_h%)aYIaKArL8Tt#K=HaQlQl-DHDl2+AgKH
z+0t{7IGWXRqTQ)wORqzjjLB+;Eh#c6EIQV?Eq|8Rt9ChfhjQAxx8=sJ%u0~e9*2Zu
zLVIU-wuixTj~dSV>dpHKv*Ci8^M@TY=LC>>oujTJP@{eDkG0yLtNQ_RoLB80^{B&&
z6JW*Da>dXigo>iK9T;-34zJ6hW9&Z#@38j@U-DQ|n4K@GP5&<NPhYAI8qL}>L$qXE
zG09hmk<=3g3HfOwEYK!|c7zZ@2SO)87eY5e4}i6ol0}j*qo%IvMs#(J&~@61t8EBj
z0K*RubpCxl9G*4UC&kAr0*b1|5>Zt#Ru*)Hs`Mo6tx9)P)OhB4QNUq@A%rg>97h;N
zK<nu!K*-}TcmfE92LRO3ad=v#DtR`xNQ`JaW|;IekVe_f>MPz6cw-+%D_$Eu==NJB
zhN+lqMs!hE2^*{JNTKys;i8@}!8rqhVq4P(OBC5H-%^Z%&>|!ZAfTaE!Lx)KF+H)R
zu|8oevWpP&FipXy;RE1N0>djoj$c?FRf(y@;`BT$Po|~1dmd?oeGu$USw2FkP9Fwg
zA><Vn$p%@Z#H2Goqq6`TWnmuTa3%~7!*GDzc3Yk`8mDKGv)qz3Vy@__9a77?q*KlE
zEQ6#i{HEuC&tgwEwn(+?YGYR?uayg^lKYiYZUx9Ch<Yrs3{GGc=u_;|#`+4Lm|{g$
zv*ab<y^t<%>hqPHK`~!Om}KYL8iN=bUQ1TtQY>x~O4N|sD#&Dpwy_u64yG{ebOj(3
zc%;Fb(nOy`o-OK$7n&t2$s|drp~6Szi*lvUpp@Pipiv0G^9LYm&!4RyQG9XO@I3DP
zK6~@*+4RraS0(AmbY(}%o#*wByG}gLs{*B3{<yNPubEJpiKW<bsBAa>ao2Pf>~5O1
z+oZtZ3E#l8mQzG^w5$Li<AZRaEaO793JutBH~n(=pe#+ZKle3PVHB)@LE>c5B-w;c
z(GgbCKb68f-p=$V57$?LK;1}{pvcw|ix2TW6)F&g!_B&gTP`82BWxh_1AHFHujDYD
z!=(s7sFHpS-+K}G#Na*Jk87Kz1?6Qrj|;q3c_|kgt8pd1xI(mbdKs21kEUD_9gQYg
zvazVd6-pIkTR^B~M+RDY>@MccanW0u&x3rKJwMP}#Y?{gOFvt|S3%w%UFkm!%#}b$
z+s5kaP5}iXh<dnsUrbY$iD-)F*uvP1{0&_DCVPMEV5hyUm~V?F6?27hD==y_g&-ou
zr16HKEdzyn@~7$-;>4aBZ<cD<<?)UoKI*t-o>;=9FCe#w3ch_8;adn8O8RYt?;t4b
zv+-cC3197S+2(tpy$SSl!^y4@tbD<K1>P))7y)=@3N!o2%=fiqTvybnh|w#s&6j@R
zWKUsUOMNui!Y4YP5wrz1O~Ax#MA=1naEbopR`DsaQ<ohD&h1Yn`gPdioF3zjasMi^
zb8SDww^o2Hrbn?jQu(=c1GX%uUq5?IlC<>D)QE3%8YnXx`^0ePK0s0Rte9GyuEA2K
zesa}l6{>3l&RH0se7HWx-klyz<(5UY-2_HUh64n)g}jzKriw!1-H3}DrI{Y&rtRE-
zz_MLkd13h+Tc2rY=K*!J7aCG-zyRj=3g{J0QxYn@#qQ749N{&ysg81<z=5A}Gzv$v
zxP{zg{@Ld0aTHpJt%ugrU%=-NB#8U~doVDSer49<mCmpmbM?|ByEk_zg<0Y3p<*#u
zxQ%?U+`=WC9O6vj6NejBhqO_EQ0AO}9SPjjoVdJm9xN*1$;%w_cyay<8g+xcHGd}k
z^GMJWJcBacK$rxWvgEZS<`M2aw~#o<{&Ar(WzWL$9jqNhro8|l$Xrb57wKF0Q7ojY
zQN?sL^J}=7yY^FjD+K_(`Cj3DOUCA;<LrC$Rr0T4)8D1^8}k?3seIcv_B+azs4<h*
zYxV-iBQ${;b`|jad9`)GJ9(FFj(8cW7KN3>!TKA}`Co~>tz0|MW4R_a)jS<cPcOXV
z9nN<}bWtsE(l^m$pGZco3@Nq?#aP4nH^LrYo=E)?DR!P}cF2=mRkl!`HvbaUwV0vf
z9SxF|Q$&A-3NV@UZG;5?t6)Vj6w{=ZhZU`qq`1L6sXU+8af>fWag6iamWoRPPq3|)
z7l5rNzn(4sMFlU;@H2wI4S>E3G7S`#ozwUfv$`mdi#)v#J4(|(S@HXtHboX~v}6@-
z6fmrA!3TYhJ<y)`KT4e2dk;C^NB982_8gt2zeo580mCGmmmSXAK5}8;RI|&FVXN>;
z_){W`6!YW{uy{KCVS-4~W2_^2Z8ix6%dHzUiW+$83ZZe81;rqAA1=xo{M?8ebU$w3
z`96Se{CuszHyk-ufq^#@#h{h&#VS_oQ&y??*+k)D2)_a5aqCHh(+DpioCmPHNgZb3
z5`N>|lfH;xAY4Vj!;;=Wz*$If_E2nI-Vl~|LD%CvO%z?b?fN&M3mvb3F**#Uuf@p-
c{RD_Guw2G|_UUSf715*VD&x0a?*pLy58#O~vH$=8

diff --git a/__pycache__/auth.cpython-312.pyc b/__pycache__/auth.cpython-312.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..e23d6cc6870a3a1a68eb199e0aae122911285291
GIT binary patch
literal 4810
zcmcIoeQX@n5r2ETcY9y<U3~s_KFkqgZ=B@7alix;bHSmB04KzWQk?|X<91`;`M!9&
z*WimI(j+R56g5Q(#4U<2lorz@O(@VfKuJMJt<-<+h|xLQAV7^ByMMHoI+bYpPiJ=T
z!*;AfEA`2qH~Ze3dAo0Belzd>SXO2w(4Ky!F7%gjLjH^og=Wk%vtI&pl88iPA|%TA
zn5e;Lh_XI5%K5mc(Pw0E&JZz0c^@A&`^-^`&!Ua75o^@uvuQjRu}8~%Wg2gclt&#t
zhsK*CPM_02Bxl%N*tpb76{i{f$>)MK7LgatXDp`;`LRkE<D|;Mn!Su@m8$j{MB5Rg
zui8MqLqz)#B9=+E(`;U%MjI`MQOBIo+5wZ`oWUi6Q7zlLYuAn~&jzK05{k!EldJ@k
zq^$BgrDu|otf=N5DVU@oWkBV-q=Xa`Wr0<#D70A$P>HHbk@qH*zBmn~0;uF+Dv44|
z2?ZjuYWMEg_NX+lRSJj_6&ST*b3m3*;_;9uMx=e90!Ga{B{>m~$r>+9iV}+T%H6jt
z-(3UZYe4=H!Ju-nKvYt#fus`mOO(c`$_El5f4?*k%%7U})h3{a;eYl#kVgpvwj3n#
za;3ON$)6`7VNR2nM?^+6h-`>C!xc{P5Hm;=)T*_xxxkhB{`&}_-+l+<VmtJZv+O=b
zFeN)cueA{xe0n2%`n3;FO~3on%&Qmw_QA31Cq}Qm_oL|x=dPc4>-u|dOb(sC{?j8f
zN8gz`byyQgmVxl~58j(R|3Y3m<=nGp&l)rjS|k`yB-P|igg`Ht(WV>QAB>AIEJ{is
z6jAv;%~o>K3A(0Ej!eBc1e@g52}X*(Me*R&Dzu}&{qB4GySu%+cWvFibDM8V7sYo_
zt+EuPl7iL|7`g<8WHdnIt#;3DS)#HhEKw;s&>M((x+J+@i6=aX0q~)iUzEP@i6moz
zw!7Qbd%)OzYZC*itrv9VtxfAe5pE)jK&Hvp2gwaHvAeF8H(ae<o~>=q)V5E!+!IyJ
zqqXVEwwpZXu;vJ7vF7Z=>^RYqt!T<rG=0i9%@=4|RKV^!*!@o#t$)Z{>8)mhz!h7;
zeP&m~&`BZ@A0rZ<L1cWaXplGvP4)=qGm4yK5{(kSmlI9!Y#!hRv+9Hs1uK-oAn64q
za}BTC_1f6knUn8ad;d4u)XXoBO`rS0^tlUDZykaeFbsqzoHII#wm{{n9=O3g252u^
zjENoK`-PYY7bBwhL1d5#7o(#zx>%f?&P!83vq8fkQ+PfM=(r#De#vl>{h`rFdQfLE
zdgkb~l=uQC7PTB;2U&TyqM<d;hSA;&nh3jw0mT=#mx;)J`|o&}oZ<@a&JYDXRcj)r
zR22AdWq~X8qVbHWfDrJFtWsT=3)dF7Qm-MzH+>KPfBhcwfAc-xWYhb|vA@E<Ny98l
zH$^if9YE%R&xS^oX-qc2@P4<BF76GD?s-ex2U5;JA`wAog4E#&%kdZ>6CaGn6hJJB
zC$Czgk{Am3m4SqmM58Q3r45bA<qI}hxWs)xC{vgC<-T|_BKqb2P{NPcqOwUEQMp7w
z>7!^sl?9+tO_6wSFQhge(o+mlk!p%cfK4K`!x9bqXbp1cloYKka4IKDk-c;oJgAmn
zAQJJ%q-PZ!_z)%#&}kjcn#GU|`vv<_bqgV2ZDFbz7RvtuqM_TDHb>TWN5*!?Nb?)5
zueN60Z5emlxNY5)I`_zZm+M-yuGX}@HD@BO`jeg)JUYIO^k1%M8{)4xs;}BBj&~pJ
z9`=v!Irr3?Po-BsIOZMez0`lPKf9?rv#C41aeKO9$GH88tFDHL+VxkLy0c3=GD|xq
z8rA@IR+a;HmX+tq0bx({WvhiuweYD;$SX}R^PJ}|l)qJ;_H>Rt^ShegH+<BP^*)jD
zK9PQCXS$(h+`dcG+OfFS8+KB?VtC)>s^+YtIc;vvwUWx!U*}d4XUi?w4c~w0p02x?
zx0x<C_s+utu%9erx>j<ZEH@&*k^xFr;-Q)V1CulsoC{uf><EIhA`mD7n8g6E1UZx$
zF!Ta+yv7_b3>vz~lU0NO3@s`($QB?&W{y=cWPszyfI%=O*TGg+v^BQLq1UHgIy*Id
zZt};!n7;7#^rh!@NC(u06h8Ukk>bh}=Yiz*2&4tZlj1#)fg?&^%IFc}K{;jeKs^-?
zrpi2VsJ~#{S`3m~CQm?&hGMtudhY?B4aGnhb9yMa3#uwBuvC%vg_J&lqXN8|eppt`
z{n6)T)l%Z;xhcidPq}aN(Ay#ivzEL8$Uy@6)$Tmrd9-u*-f^3I!d3fs&Qfh1vd-3$
z`jtc5CLFHg&mDbkc;GXKaHXapXN1w5nK-LvL7H?67S-(cV~ywct5&~18W)oh<n4a{
zGs!?CKg0X|a2S3+#d@8#0#R96p(^)uJRZ^B`b|RHaSo%6E-jEdfRXP4a)jJ4utsyv
zT5D_>>76Ce<=X3vRU^S1fo@d1iJh(jrT?dl57{5HK4g3&WPBb9ZeDeH(Oy`J%}M%Q
zu!H6X+T_fu@6MchZTeTQLy})C@k9MLHFQDusL2bzzW$T<Cx82*CaxjRyqu5bJPiM{
zn;=u?b3PM>frV|+j9<77%~?DrRO%os=FAk>#WabA{uZ#qH&+QH%op^O`chpXH;b&u
zMc@W@fMp2eCss6m`?pAeO3`$NFWjYiP{V($S|GbUR?KkbZt4LI^ll`GF%VtOosg8M
z6jTa#msG{vNbE%X-x%`1;R^<OCkkRN6HGe45(n-90!b+(Yq_XUpo{8~y#WYa2y~ji
z7Rj^|W%EIdNrtXMf}=7T8sSEFc#MeD(nVaYm|W1I<>!Iu$;DB9eE-q?S;vZuV@1}n
zD&tr++A;2EALB3CF50pkTQeP7|Iqzuhwrv*<E+d&nlg^2k=}8~+DZF{E3P}!Ef0?E
zyR`q}{%q&=4E(ihPe1v+aaSO14}4X%d@j&0(SY8m0eus^%OS6I^D^cmJF~ft`>4#z
z!^6jw%;pB}<0>Qa4Gd6<b@t*IzX@hEjE8<<Lp%?&3rE2r;Hp=02!Tzmfi*=;p8DCr
zsaJl!Ama4UEUr<@u!txc4sWTvEXgudG8Df`V0GBlEQX;j<7*Uc^$<LynijLwZ9b7e
zVJvb0X07=|Kg3Vy#vAS&-E!H{mNvI(u+=S?>3Ud7??nQ4Q$q1lSwc*TcugNd@&J+&
zTyDfiBu~Qse7Lmfa0y+m-eg=iT9YHto!@m6J6#0|3Uw-<ci+-gQQsPG0ThE=bru{P
zZi(8D3lwkF6t4snYksv3Q&$9j2$0rBi$4^seHwl{pf;R$mF7z^g4LO7g357ks8_#*
z@>s}W0cU}-?lG;X(@zEyfm)uwQ2O;7FTEcIwacZRHMFyse?F@DK|L*PqL0I3h;1TA
zfaF+)VZI<+J|kPcAUzq<^Ev7GoV0vS8vaDezqHg3)nqO88B6_e$7RdPgQgoMQn7sG
zfwA@DOS}imziL`D8oS)I@dl}2T*LA#b~jt@XR6XQ!c7AG&1ac9W?i~|^*;#o+EM=-
D?EaNg

literal 0
HcmV?d00001

diff --git a/__pycache__/config.cpython-312.pyc b/__pycache__/config.cpython-312.pyc
index ec3cb40c5f23ebd1cb791e16087bee1f872b3c49..2e2a64f6d9f5cdf95173bb03de5d0e1df7b154d9 100644
GIT binary patch
delta 351
zcmbQs)5*(wnwOW00SMO4mCXD<k#`!S%)}*cO;Y5d#8X*PSySX~fO07cQ4(ODB8bPt
z;Lebu)WVRWyqXE5lYt>hvXWg>W%EkLwT$|=SQArnGxKiofvNb?;?$zN#N5<dY=%b0
zCZ=XE@q)zS;`02Wl*wVtdvxT1W~cyhF*}fGVYneI*~w9)3S<|l0|`y3A_Wjz5kx3W
zwqq&Pl?E|oK?F!a5lAmYy&8zc1|wL2jN-GCud!@U`oP8@t<>N*!TB<a;teS%OX)ic
zBdgRW1|U(SI(ZVSgAb}nw>WHa^HWN5QtgWLfkrWcj03si12ZEd<6Q==yA0A_SQHth
WI%>W!0I82|j0`*?-Byhd#{&Rk?NaXm

delta 242
zcmeC=oy)^}nwOW00SL+_OJ>fW$UBXZVd9dv5=;#43@LIg3@P%fnLx4(3{m2h?3xOj
zk20=hoV<{EkB&4@OaX|C*?~k0!wq4{PL3i)AiGEzNN7qF$$;3hAVO|(Crha^NVrG=
zM1WN(fmm!Xf(6JZ-ac8Ibpy|L7DiU7PYgh!NOAICRtIkdkRrIATO2mI`6;D2sdh!$
sKnX^WMv#gR%#4hTcNw(qGDv@6k!6(XsQJPGq(0g)@Q8F<HA3750JF(4r~m)}

diff --git a/__pycache__/database.cpython-312.pyc b/__pycache__/database.cpython-312.pyc
index bf736e974a8a83269fc3c0db9bd8d6d9ee3d5768..634ab37752874c9d547be636529b39ae146025aa 100644
GIT binary patch
delta 19
ZcmcaFcVCX{G%qg~0}!m8yOArD9{@Xu1zi9D

delta 19
ZcmcaFcVCX{G%qg~0}zzV*vJ*i4*)tD1s?za

diff --git a/__pycache__/main.cpython-312.pyc b/__pycache__/main.cpython-312.pyc
index be9a38db799a85b4751baa8825bea4ad01f4bc70..64213cd39a5f575d8ab73cf3c04923638537903f 100644
GIT binary patch
delta 1915
zcmZ`(ZA=qq9DlC8Uf)Y87OFz2f<Vz$V7|mK-B`qE+!hy;#q<j)eICleU5`C?RqzWe
zzAT$Y-EMDL+#+sE*xI3sCYxsA<G$<*CMGtQ5SM5HzsxQ!S+Wmq|L58QMt4c?`M>=B
zZ@=e%J=Jojz2i5p*M;C2zOr6i_9FCvDb)vb^La9E{jg)-r0hz#ID`=vBzMAXo}PpU
zPP^oleF>lGb4WF^KjAlJr&KG~CTdODB?aWVM4c(SrFC*J5j16wR4+Fq8stzS#32hJ
z?vb8q`PCDwJCJ^r4@`RVzMQ4(sK9rv!m1K!%yDHo(L`LhhHyg`>_5%tDu6^73URm=
z2XGw;<8?TQ>v01P;q`dKWnSb&4hPdn<kDPzV@{}KY9`GieJ|=wz>R4RH<@pc^5LAV
z9Ks<M^5GwigJr2wea%5a)kgmp;UK<|*Vcqo#C-EA4N#?DpXTd!M_?=-@CROi-&C!H
zH|JY&)-uAZdPpyE!QR&VmS-{^dOimU;x^n46Lvfkf0)(Y7+uNVc^a({-3Gmt{aaW3
z+t&Eo!T%PE-x*u+$B6~5Yx|n(ijqd$HQIp?-C}NCXQC4(?HqZVMaH^u4}J-zKK6Xa
z`5igFI_ZQkAw+lTPc3^LwMU7nib_V0Thq~~#qjqXIdqszydh#NkrPQujJiH7i<!Qx
zHoR)Q@rku$-NU{X!`VNcB4Zk)Fl>ZUg&I~>qtwlO_LP#zkd$Uv6xDFZ$x(tus#2#u
zXAg4$eZl^wZ4=-cZge^NIj&j%)fJwMKm*x5U|srn=HcxNOS98Um(CWi&MaQPS^V+h
z^6XskoA(|}y<0qcrZ{`6_|f^|+?nDBUp>5i?$PwEr7uoH^gp)lcvrm3s8LBOOGRzs
zXlj_qL^V9+*$$E<Ce#p;V<Jpy2*aj+(s?Wf{>d2FvTV0OiGcj*{hNzlo_hSt`Q>Xr
z6)(>`{Q2DCr?-~p^x~Os7k~JAX?nI?ltH7s!D|y^#IT4NgU=*oVz@C;Q&cqhi3)~I
z6E%s@PLrJDgfiwSqreC#V<ZC|1qV`!Jf>twMgz*K6X<_C5BQ>-;Q|9C+Q2B8(D%9`
zJ82YRPx9L#5WK<|B}3x)Nnv}EU0K!x&I*5*E)*|bk6P$%FzIJq!`x>5u`3+k#!B;8
zNvVd75;(s@bRXEBzz@*~ybPWyibh`rk?6hdT#tFN&dS9SY{Ka);4Z^Gz^0@P4*=z<
zQOdqP<wnSJj1z(kQm-HPM!19eXWmVr2p9~Hq@)KZc_&L$O{GV`bV8r^UgKi=l<)P)
zCRIyPiD(*$%PR{RSIZl#Qaj7wf>ty#u1Vq`bufb+Ql`aBnr>v80PZ0%O`S|};G~uu
zOsa&k)h+L+6}Y2}DZ^v3Hb9lEMpO!a_&%6E342d{3|*sdso6GZj=^q>23U+QiSfW{
zZ*&JU+GHi0(P)zi5Hl$$i%B^xd>m;~X4B-xaIJ}D(;N2eaWSRPjA5l&_@Xcw%%<0H
z9E&iJ<7HXFS&8hU5~%F|U407gl9l7Q`>1sRZCyY;3#eEBw<cu0k9O$|{v&-`3;x3e
zPhG(q{N1s>;Mq_JMGE!dLa3$CeDqJJt;tui+8bRZt1~2&)**lRb2{(aJnwD!tJ!b2
zOj%29`jkJ`dk+Qfpul`x%U#r35)j8%4Q+Q(`!j~t>!Ewy`|ot`pGSeasJ|rW-}^fq
QSB6YArr-0=@N8}V1C`GOi2wiq

delta 1306
zcmY*ZPi)&%9JU=haU7?KlZ7VBmZe=o6Sj3*DF>iznzTPm8l`ACP+uZ9?=^L5$Klx-
zD+fTL0*Pts(7PZ6nl??MC=uIKPOU)V!iCci5|yQ?2S~$iLqj|4#CuNC6ia!(@4fH)
z{eJI#&(6c~PY&mQ4TmL$JXdf^pA0d~pLEiH0zL5bH|~r4sd+UB7$6vuDv{_nLZ+<B
zEJJX>2%AIdkcUMhVn)=6hl57cR8+;ok`XiGYMf;_1_rD7ev3gQt1sby_;@_jlABz2
zy{A5k*VqGDH3>x!hU@|dhF17yFH=pCf-ID)Q#AQP1Vmw~r8N02t)^kR`s$!bA3;Be
zRag-BMuJ-VnnIUj8Itijtu>b*m3dNmx}P<OtrwbXcLs)A$);~l?&*Q5kD$_5d(}_l
zI+sYKz<$y<{lDBZv~T)AUkwhfFuUg*A^Ym`nO*+S9)6VY7ij(~*<F4Fa>T9CJ#LM`
zVQ_ef*pG7FW#-fzIc2VTiDn)f13B;_Iq^(?=Y!Z9?|aHJ%fhly$m6@dH}Er`y1vXm
z@v%W%71Pu7U2+3ut5$<$$K@>B6-{jk0v*{%q?}|snxmIXWW|+$Zug`G4n^?K;*5|X
zqQv^X;5qiA%LKM>ZTz)yBYR%6oino+vq!RTy;Cfb@Mf_%dz=oJ$z-NDo9%qH^7oIM
zk3U=OY<%0kv$k{phxUWjoiBgt+}-G`Z+13s?R<T`{rT-q^WJme<iv@I69wKC9NjUX
z8v@WSBfakER?Q7ufygERW$2yaYoYUaJCrTBd`&aq2ma$4F!fqPCS2$H+nt-Awr}2O
zuih_kuD_1pf_@cG$&2hE{EeKM7$qW?2Ugj31q4a_jzN=T?J4;&=%B|U%W}{Zfp6o-
za&ywNFWB=00#A-!-j&OXP&1sxQh5=Um(XiueQy1i@Vl%(MkR4P7Rj>H_*`Tp=~b5v
zt5QPny#}-$8=WN@4SyK9$L8@w^wOL}+Bop4W9ajUe&}w1$SZoSf|7LRC-j0|>E4<M
zG)J4)Y>0xilebNuR@V{v$6#F9Go^&Ah68OR<A8GXq_-n_nXahS>m}+QiqPqh20+Qw
z0WjeE8iKB1T8)~6_T!S08m3No=W?Zi1f9jJN@|K)x5o={+O$B!fTvK25cFfTual9y
zi7dO#j6GtGJYpvCwvxopmDyD64=MdnN^eEsmK@&-C;klz0q$eplPJCxJBFXd#(lpt
M8Jvr+@zm}A0PAK;6aWAK

diff --git a/__pycache__/models.cpython-312.pyc b/__pycache__/models.cpython-312.pyc
index 3ed9b869791dd4d450973eb1b76e017f966ce4a8..12cfa21643911e52a5e95379248a2664565cc2ca 100644
GIT binary patch
delta 19
ZcmX@Xbb^WNG%qg~0}!m8yOGO|5dbt;1kwNi

delta 19
ZcmX@Xbb^WNG%qg~0}#~A*vMta2mmt~1e^c>

diff --git a/__pycache__/mqtt_manager.cpython-312.pyc b/__pycache__/mqtt_manager.cpython-312.pyc
index 0da7ebbef179ed87b7c4a4c67cc5e174182ced2c..6257174bdb3659e233a14b9328b68287d6e1a387 100644
GIT binary patch
delta 19
ZcmX>Tawdf9G%qg~0}!m8yOGOD3jja;1*-r6

delta 19
ZcmX>Tawdf9G%qg~0}x!Bv60J33jjdc1<wEg

diff --git a/__pycache__/schemas.cpython-312.pyc b/__pycache__/schemas.cpython-312.pyc
index f4433b5fde23ee2475deaf5574c9f5ee3f51a21e..c5510fbf98c465e5127c546f9b50c908c92c70fb 100644
GIT binary patch
delta 19
ZcmZ2#w$zO4G%qg~0}!m8yOB#;8UQvZ1nU3*

delta 19
ZcmZ2#w$zO4G%qg~0}#xav5`w!8UQt^1l0fl

diff --git a/admin_routes.py b/admin_routes.py
index 8f324cd..68b0a9a 100644
--- a/admin_routes.py
+++ b/admin_routes.py
@@ -7,6 +7,7 @@ import json
 import os
 import secrets
 from datetime import datetime
+from config import settings
 
 from database import get_db
 from models import Device as DeviceModel, Content as ContentModel, Todo as TodoModel
@@ -20,6 +21,68 @@ templates = Jinja2Templates(directory="templates")
 # 创建管理后台路由
 admin_router = APIRouter()
 
+# 登录页面
+@admin_router.get("/login", response_class=HTMLResponse)
+async def login_page(request: Request, next: Optional[str] = None):
+    """
+    管理员登录页面
+    """
+    # 如果已经登录，重定向到首页
+    if request.session.get("authenticated"):
+        return RedirectResponse(url=next or "/admin/", status_code=303)
+    
+    return templates.TemplateResponse("admin/login.html", {
+        "request": request,
+        "next": next
+    })
+
+# 登录处理
+@admin_router.post("/login", response_class=HTMLResponse)
+async def login_submit(
+    request: Request, 
+    username: str = Form(...), 
+    password: str = Form(...),
+    remember: Optional[bool] = Form(False),
+    next: Optional[str] = None
+):
+    """
+    处理管理员登录
+    """
+    # 验证用户名和密码
+    # 这里使用配置文件中的设置，实际项目中应该使用数据库存储用户信息
+    if username == settings.admin_username and password == settings.admin_password:
+        # 设置会话
+        request.session["authenticated"] = True
+        request.session["username"] = username
+        
+        # 设置会话过期时间
+        if remember:
+            request.session["expire_at_browser_close"] = False
+        else:
+            request.session["expire_at_browser_close"] = True
+        
+        # 重定向到原始请求的页面或首页
+        return RedirectResponse(url=next or "/admin/", status_code=303)
+    else:
+        # 登录失败，返回错误信息
+        return templates.TemplateResponse("admin/login.html", {
+            "request": request,
+            "next": next,
+            "error": "用户名或密码错误"
+        })
+
+# 登出
+@admin_router.get("/logout", response_class=HTMLResponse)
+async def logout(request: Request):
+    """
+    管理员登出
+    """
+    # 清除会话
+    request.session.clear()
+    
+    # 重定向到登录页面
+    return RedirectResponse(url="/admin/login", status_code=303)
+
 # 管理后台路由
 @admin_router.get("/", response_class=HTMLResponse)
 async def admin_dashboard(request: Request, db: Session = Depends(get_db)):
diff --git a/api/__init__.py b/api/__init__.py
index abb40a1..ed9a309 100644
--- a/api/__init__.py
+++ b/api/__init__.py
@@ -3,7 +3,7 @@ from api import devices, contents, todos
 
 api_router = APIRouter()
 
-# 注册所有路由
-api_router.include_router(devices.router)
-api_router.include_router(contents.router)
-api_router.include_router(todos.router)
\ No newline at end of file
+# 注册所有路由，并添加全局安全要求
+api_router.include_router(devices.router, prefix="/devices")
+api_router.include_router(contents.router, prefix="/contents")
+api_router.include_router(todos.router, prefix="/todos")
\ No newline at end of file
diff --git a/api/__pycache__/__init__.cpython-312.pyc b/api/__pycache__/__init__.cpython-312.pyc
index 6178234fd96ec5ee7da34693def2423bd58c2aac..4cf179d59d1c1ffb996f6a6c0bf5b1d6205642ab 100644
GIT binary patch
delta 206
zcmZ3+@`6SEG%qg~0}v!Hkj(UCWMFs<;=lk4l=1n&MD=*K6y`N7tC=S5lb^U;lr4o7
z!Z8s_VFR%sDj69n*)=&PG3qH*ap<R{mSrZV7HcxzVk;<0P0OsP;?z&h&nrpID=DsG
z)1R!#IFCyJs1Il>LvhUHi;SAq8>B8UNM2#Exxv77ok8*<gX9d2`T8^UH)w-}?GVDM
U^L1wGtf&AAUuCc;;scrh04mis;s5{u

delta 145
zcmaFCvW!LjG%qg~0}!m9A({CZNIwQ~V1OCQ_<UuedOXu=#)&;9U{ZeKQ&GOvj1XBy
zhDv5lmdQMfdXp0wXL9iaML{yfzLQy)G<B{pXx?Dpy3QbZkwJ2X#(e#m`d1jV5F)Dc
Pb!O^ZWl%5T1!@5R1#Tg>

diff --git a/api/__pycache__/contents.cpython-312.pyc b/api/__pycache__/contents.cpython-312.pyc
index cc16a335563477e9226fe1e73b87560a0b5aad4b..29425778e788a1e8811425a28bc83b73882d5340 100644
GIT binary patch
delta 2949
zcmbVNOKcNI7~WYwvUY6e;XLfvNgNWA*fEfVK+7wThBqVu5<uD(%*H!O47+xiwIQJr
z2B{KNd#KQ;y>hEmg-TUjm7Wk)Z|%iVR6$p&D2E<6HPEV3Pwo7(abg}-p_cOP{Qu1V
z{r~)r$-SwsXM8_+y>5a1e!Ue;jYV(z0_efbuCBZ;$r2J&K@~NZ?v~wrZPO}skL=-V
zyXMt>vQMv)tGMjYs^w~S-l5gVHSFuuYIVQt=X(`eon9|D=#6rt9*_fiP!4jvq%|>p
zNDs@+Ty|+KdW+n`);k2%t+nc{ax34c)FOJD+{V`)ZJpjOw<AFmFjBqK=(cYG!3_jK
z?!X=AkI*)cKUswvu>Jf|OJ9!6O2q9Y3uaxtV7K=9j=!`sh143{rPks`)sNj%PPOhm
z$HEGc+|B%qgP-Xt?86N~rhkFAe!*rPXUS+#9nZ1bIeR0HsR8yE#8tQlShz2@+EnH%
zUh*{(!oh#{@*KYveVB1u(KnYdZeWaOAo}AW-0(jbTX2B0N@{Bv>n6sk0IL#WnV(!q
zRoUkSPmxlF{v-CbGB5q5Y;0SHgSXokM9aZT8Q|u2wWG{>GqdLXkzZe`GqZH4ood(Z
z?lLZi>QJN4Xq;+inT3eg`oyYam{l;wD;UESE7|EO^E@!`h{hj7uu;i$4bd-bLvB+V
z$H^Q?W#{P=n~th!!oIydip<JsoJ}aRsl)|5Z%WBbI*Zd;gKgNe%CvDMOz(!nV$?=|
zvbT6WDxSq@6{nLaY!v>qpR%Da9gza4g-%Hq89tDryFJXUY15TC(=%+bjbv1;kxtM%
zjijO}gmf{1bOS^IVgNk=ak|IVgzD+ru25wQC|Us`^t$UR+V!P-5J@5lfvUMMRQZXR
zUkB@U2GMG=0oEG<HUV(+URXH*oB(|Qn*oLxm{NwQm?S3Wt?2A3Hj<_@Gc{%4EZGAm
zY>K8uC5vk}*nyTClL%Y&k!>Jz&rlFUVh~yRk)2F1JzC1hCRP$l4is+q8WHL&+^YK2
z=Cq=xNBryake;=)n68wrOyfk3XywTPK6jE}C5zRBl8pvl@6Ox@B-|7;hH0NwvNL7{
z!5UlGW=M=a^{><Y&&07(6wr+@C}n~ZML^51&uawFpD8i61n}~xUy=>pZlz?LEL^Yq
z&351r5J3$mSlfB=TvE%a?CNP&glLU*Lte7As&fC&mzLfMM0&RZ*Bby(U{Vk8CWB`p
zKLy$dKr5{X#v6E@e7RYb<#n}E33@2_lyzGe&NUYXn{<?4jdV0x`Rai&0@KMx0B13Q
z_@Z{JpVqPn2{hn819XnnHa^Q>H5_>3Xe@lEB8vC`6dr~DT5X_TBJKIZ>;O5!AR2nT
zuHcCp25TPBURd#|9EH^wz%c+mq{m@(0$?0qty>a&nyndz9o{Y#)<q+rc(zl>1n7X$
zs9*s1W<TrdweTcqtQKW+qZS^uJw&Lx@NN6BvotsE*h#dWo{NQ=_^k8rdF1?g;rBXB
zKaOp3LT{2z`hBdm<5eCB>h0N%8tB2E*jv2u)`)p~tu_^bw~q7!3;=8a;LTT-I{H=5
z*7~*hFr0}1Y@>ho#H;!2YzLWV<S5+{57t=^M{ZWjC~AVg1msd-CjO&{w$Q;%@jP)e
z1Jh?*)D$f_gZ2518KRR)P`cNYJUr8xou5smr->JQ_yBkfAwpAP9j{C(1}0S?Rv190
z7^E5`@5=K%&XuGFOltxBP)gIO!?SK!uW23VHv;hFH1Gp#%%@V*q!9$Wl4FlTfY$bQ
z<S)XxU7)qGN}IM+I&0b|GZ~E>fSr?kXEv852@n+!{Rbx|jwSkg2NI)WiQ%!)iG8CJ
z1V)0W0GAkiCj8D&uv$pk$)d|?c#wR^bcp>Kk3~UPwjqRE4~290g>y^7IeNFZW8`Nc
z{K!@Nz+Lx#_z#=t7Oy#%B|(&Kgsz8*-kxtpil@)qKb>AYoqi$+d9+_#7K8)h36VL=
zqj8X~q6zU@h{@tfkyiJ`;WOA5tXVvZi&Gbu&XVF8<66@a%F=iGMmlq7Sqz}M<pJ=~
zbiJwQ8Mv2NR4){@%S-B9F*y%Muh8%M;^<wv+*e<-IGHM*&n-<}Dk_&@Z;rbAx1xDE
r)E|m0W-hS+=Fl*NGmG{@I2p80yw(ii>=&uhABWFJ{h!-EU`hA~`Qml0

delta 2865
zcmb7GOKcle6!r5j{>0ADP8@$yr%jqn;x?a_0x2z|Re=KOH%-Jq<xV^=iK`jgeKUrZ
z1rEOk#0L5V8@2@r5)jCU&jRQMx?t0)LZFc<giu7gi+}|iB<_8a#BNoIb|fF)ci+3`
z-QQgMi}_2l;U7bxfCHZAcxV3Q{<p(1^1|DFeHG$R9ja6F>3-QSWS17ugK|*FZmm%d
z$ss)~hsD~XHOWnI-lH|k&G7BjTJ%=ARqQorZF)qG>g{s7-XVABF*zpmKCKh<aXld?
z#oDi>^pu<uazNYGrFY3)ViD9f>1jDl98L!%YNHyOBg^3>C;IGg$lbL2^Z`x=BFAWy
zx=%l9tLt&OdC6t3fxt;ymx#TZC29-pQCn%d+D84eUN!QnXKBq)?giQjq@AK68tnx2
za&-Mp2(VrC+(zaWWF53mjlrjrhG{=q3F?3vucMaMsN41=XspJ18=vi561Z&VQgsXi
zz%UKYwT&le^ez~>Xoq0&shjFpGQjc-vK&o7;+|cLyzXl`y&m!Z_|{#=I<y|$gPZ?1
zI*iP%ZmF{#25YQlTcu~cOmMeH?Nzrf_tkmhQ9Ww^EgG-dTW3*UX1g*;s7Rlvh(sIK
zvN2G1^T;`mG<XxEml`bpI1jtW`O|KlH1W&svG@z_A*GbJe7R!5qy^KEoR+u5=xqKh
zPkMU0oK~1oqf{&yG^-a?s#!t9RLruG&B3awd!}6R1W;REm6}RkW7xenu@5C5OY-Z!
zGbG6m`=v?{54m*Ztkt;RzG?#LSdTC^a*C!f)(Z=^6`>EIA3;JG0I*z&s#@M$QP=aP
z)c`(%XY(wATWtm{sM&H!RZI$=>AF%-B`-^&Z3=;O@qhd;lHJwk1AB>!uz2;G;JeOB
z8uz*Zq-HjVat2`=g0S6=k_W+yFoZCI@GyYoD>9X`?94ek3b#s)oaHUf&KlHYd+~%z
z(KJj1n(RS9tuSU?AdRs5aV>7{0LkzHq}Luc1`DfE%Nr(yB&x#>R9#ISg!EJs%^$eD
zX*j^T`Q^6W3Z}7^KFgoil{uO%Gwt>y26Bu-lGLnXO0j#3S=@nzv7AN2a+efy9?PJC
z;F@Rsyb#%3X}!gdTJhMEu(6&AL4@(!;fn%2fxJFo%ObDv`VQF$&e2*jj)RE|AL9)4
z+YQG*3y#%lQ}nv4@)%NMRVO84h3MIwR#qVy(8H$GV#h3sSgW(}=nloU0;1`&YFRH?
zp1etQ!)gE;#WWe)iPzkRfZZS(k?jI0c1xU-xF>>5@mD%CWQ>2>86hY6_nm)2A112b
z#dT8i_>dI5HwWRp)2K;>Gm_ixv|4^KwT2r2d&+L8ux+r>Qm0^-FD1Wp=A1m;9H~}P
zzi)KbeD{{h<FL;T0!WE_YZsA}akLix>_bVs)=!}{fp7>xyyb^cI)ZQ%q1Hx^igB<p
z1nfR)u;aW#3$bJCltu$c7&bg?j33z?BQw?f=3fcfT0Pja-|J1|$!>mO;KZ&iAeNf|
zR^I#ek2e-q&cC+u$=B&^=}E~`mr>!o7*Qg$$9ZaS=pgp32(XNUXwClOtAD(8e&yn4
zH$H!VEG>24Ro?hJgJUGhuM7_C6U`}-Cax5HhU}ud7*0|)j4+C@13`3QU0(S^nO#va
zbp%Zg&)C`Gi<!(G@y0!XN|7${?h$H)KqK<C4r?Q*T+)h)niVsJnbp<IPfjw*e;CSC
ztgvxLQ?%SX)z57&GMxp0!V1)s!duI0o-5@GbF2}s#9NrCH#%(jU}h^bia}WzmkkDz
zDF(xGSfRDwisM4bn$ffc0UN~fO5*J_?2+7t`V4}|RaBgS!8x0sW9|H-;hv!)Zth0C
z3+9OB$`?$_JyR@d>;UfIJh5D*vdK>3GRyxR?tJ7FiZci%z=w{%03CK-d=J6(WsUA-
zuY(R|ki&Qre*RWngpgkyQ$IVVt~#dp)JV_v-~6q=1Y3RyL|#w+?QsR13*Oa$!|7X0
zyp*^S8vJVF%Jj*frwdo73k!*Bq{uIiWYQ(F>g*@&tCR5W(6<<WDSoAK;H#aNLRWVm
zT8LjGhxw+_iTDvX6eE$<of~I%UdrP334UQTL#Ft5qfrm8kMot$U1X9ccO*OuscYmE
SpWcyiDulnb<74+Cc>W*ugl)_K

diff --git a/api/__pycache__/devices.cpython-312.pyc b/api/__pycache__/devices.cpython-312.pyc
index 32f8433de35497079b74c5cd8d431a44732a449b..f6f19fdce9aced26365ca271ad649fe27dae0c70 100644
GIT binary patch
delta 2853
zcmb7GTWlOx8J;sUd%s`o?9J=-E!Ng{E;Lw_I!RMEaZ)MkBz9stO|x3>oFr?{>~7EO
zHa2xx2YN{*XlRdUT7)1E6$)}lTN$ZEDJXfO2t?OfAtx&;;K3q!DVxg!hzB_Tj2$~M
zL}j%5&pH43{_nq>{~XQxJKx>z{+-KZ=h(CGlW^{f;G6DH<qd)3&T%p)BZX6ugj8PQ
zRY4L|Q4&>?WJ0jUD`wRqS@f}>SXG;3Q|*#npNon^bx00<Y*L((li|&ZOLa?bU1w1|
zs#o%<e#x%}q<|Wfg1X+SG%@}5W_@B~1{<W1KDH}iH7teou|tWdQ7MWzp2J9Xo<J8}
za|jaPI4Oo>w81x}-Pni4i2*~qRx%qNM_2I7)-xv>>-vg&W#u@Mz1T1Nu;sWY`(HNA
zEt5#CI5x41zS$HgxUmiU!c4!8Gcd;r2oFm;D4S%{1KcLL3Af43?7soqaXWCxAvWsJ
zN8r;ghu8S*T=BUtf_?wn+XG&Z9L4R+8N}AGbuqU6kiq`{pREN4bVjorU&GkV7!LyD
zvk_MHLwf4>iFGlzu2kqDF(=k|c*NM(eQh|nj_Y2vAHvnXhO1|#nyHR;T%B{g5%@#6
zy4G;@PMeY&Z-PnEM0W{2_PTWhXUim4nx=|SL@xTd5bsK&y5j^cr8C7`dJ<39Ei!%~
zm&F>>i>1s7t&TP)1==mfT}~MnabCvxYz}MlPl@Mv6rz7JA4Cbd$<l+`sAP$m+nGDk
zL1!!x<frE>?adKTM471D<ngpYPTJ^amS@mbnzS}rd9nc@&|WuXz=_&qu2?rIIW<=z
z9rKUc2&!}fqzlAG5FH@C%0%5<IDTBiC9(}BLPk-N7V;>pf?^e?M?iFzAY0HZOeBnl
zY+>WNQ^{$i<?uA}7*lNp+!PZxxPQ=2$61t^|AnIi#afsuX*IZ3BT6tW>85v_ok@KN
z8577|gX6|L8E))Q>g6Krn18~h@J~JtNFW_$C3oSetWuV7x}0ZOCB6UM4Oo~!m_ZEC
zFFXn4pdN21)(eV0CRiB~Fy0Bm2!;-Ndz$oQUFD*jDdCkso~GaN{@%)y5MaaehkP39
zzZX?1>HJbbfUTeY%ir6r$FQBv?@!$&V+F4|P0>`~GXD;upE-U@pBI~vm;T++<?u2)
z{h9F74{bp@6A9A4h%P$r54>fv`GgWQi~h`TGrSH8RD_Gd%9(vhoDoO3p9`l@QY=Fc
z*kPA%T>ACWd#^2h@`I)KKS}f@ZoKi)(%H8S<;_>V_qShNT6*idORv7Nbm^BmoZQPk
zDHvshhO1k%g?tI;OWFe^sj$=&3_!X;tl1baat<0s`wJ|8qanWrFi13MGVF}~0qp@W
zu@bBm3#<V&;DY#<yT?0TD3r7k$rM+%ZiE3&dzjGPV}f<+EZ1<-OkiK7;pDvjvs156
z{m5DKbS-*%7d*Wek1qD@T<F_*rT;erR|gjQhHIV!i=NR1&uGnaWOnaeGv{r)=8s-;
z2hS?6E7yGCyB5)Fp54p1oWa@Qe`?Tg-yXCM+R--yn_o2gIGvMU+N_l_r82uS^kbZ5
z_tgBW;qRl$Y8{u`(YPKMi*b4#N`{@fLSD(`aowIJn02L`&XmX=21&ZVbmQGmOAdpB
zBXERuBC@_2eXHj%ZNyH-n9&dEN70|6K6)(HQXz0h)ZN<iN=C_^#Om~>0#S(-l;+ZO
zF_%9<Y~TmJPly9V64tEjWM#%P8YWJdS~RfDXv76G=TrLSI-=`{8;oG{^k%4=RcH~-
zxaNFKpg#!0&qQ6!luIW`fc`tyS%I6WF0c&hLN3n)>xjC@T0_zAEwV#jE|yE=X)xap
z)4<-*(F5tPY}uAh4W|c(Q=_|6qa+2(&_R0cKjZGOA!poE)&UkwS;0HVB-6ncjCPFe
zYC}K>ng7fU{gE4@7h2+DpL4Ol+Wgn-fiuy&0&nMM%?&HZTVIQwj-DAgAN#m}@$o|o
z>^GjPPLyloFH|$9W}`JUb$wv)%AU)^x40N;I`3@2>x1sw@VX;#{518&L!PVMpZ3(A
zJW|~?HXEs-Z_rKgLmkhc1|L9y#v|Y)ayoJ*bz$J@sZU?54Lw`ka};pT(RbqUj$;gG
zNB&0WA-F%pdwT#EVz_O9YdPI==35u~7khRuu;1aM)#pyu4(F<)6SFNfG)Y6P@ruIm
z9^`GbFDF@bbyfR^7RHWM(-XC^$?6dW(o?TL_QaLu%dNM#W)wW1ZNTfosoU^^^zw{^
z4I5jQgR45*KHTtew6=A3b;};eVd(nTcU{?ddGjqUfXwH$2E0D7+~xxG$E{}PUUZAq
Kz)U9CuKWj|XQ)X4

delta 2952
zcma)8Yit|G5x(Uek0-t#BE^?T>J^KUBEfR)R<cw(acnDaEXS4+#6$p==AC3JcO<iS
z@(U^?6$UI9Y2$QTy8!}3L5sqv)cS{hG)S7p`B}6-#3+cQLyM$9mDmjeP_fabK!0@S
zNJ@$j#983xW@cx;ncbb8yH^HpA8`J~;jl7voF}0i_P^{5PB~eIxygu(h-5}VDWsTE
zCWTG03YX##=uNU&;ZwZ9v$91IQi4*KsxxFxwkp<?)!@ytEoGzjylht-DTkr6$WFzT
zax0#cNAae-iZA6e^nzSZ^?u6lX2d$`5J)u`6IMB>1XDr8m>3C(HqkzY798^?NSR?$
zAt^Mzmw0&J38&<ixbb}z{dT(Gnx_kbK@m)nV;)tcQ6#!0kLZ#3QBL$;G0#`jOe#t-
z_XB3yDG8E0MD+{4T12{>deJPJcVL-CzZ4S#^l6alq&WD9LCPfz4q{lv(6$&&wHSS2
z$-RZX0~Lu8DPGMmy3M<pdLM-h2OsX;D0vM8UW{!+Xr&0p0O5F;?%Gq;rEhyJ#A_@5
zhMW@H5O-~^s7dmDs}(hG^KP$s546<I=Nsa-Zu3lDGAG;aLFP%0yvKHuf3rnoCu3Z!
z>$1HkQ_S^<()nCgQgus}Nt$%Nh^5ioMV-?!W2%mNk|y$7F1Gj~cf*7lh+;X3V&q**
zCyJBLEKxo|!EqCD2w~(Q?Lu=P2nsk^y-qxvuE63r`GIf-^^muOav0$NoxLZ538y}v
zE9z!Br{px;wD{*bjHa3apan=PkR~8|DAD=C=%^}bxEBOABg;t(-VL*$*s?Q%V*|xY
zCsYe1iORs;l-KQYPSvWJsrb881t{u8O71dWlDBLx(G`B~2`y&rRuqj;byBF{ZDkds
zTHHpiIa-qj3k$}ubQSIsjaCU|9g}L2@WA4S4%zg0A6NqD=_Jw}(#5PiAxi0qJY8AR
z{q<qM!wiH6(oe3q6MLaA>HLJ2%@;1{)`_B+(IhdQ(QpUYbW%ch$4G4u6qWqQn!D3)
z?17`=Q9GX@67u|&MYv({bB~JlZRR+fw12CVAcTk9@OAAn!tbZ@S2w~TO0uL$wRlgF
zd%m~PAIX=TM3$UM@(b@7a>rHYGNp}vOWm1CG~PfqtYL(HW)7ktdC}QM=>c<$I&gLk
z_SzWZVR}{TozJ&3Ozl>VH<A~uzWA02?8A;R-UQ&J=xy_}8l0;!CYebV+b7xaR<dFC
z*^tOp<wroCLZW$ruXW5H!dx@8{TlR1E?vKg$&SOO>=@Jnu7NQoxe?}f>;;sxOu*q-
zp;+(!{!i<_zPf(>_WF-+-Tmnw)?d1@{>~IxzxI<)ug!k)>cT(Yef^V}+lD3HJgw80
z9gnHGOwY)<On&TKCU@D{cIMGG<<T}V(KgiIc09=%6`>1SPLVDb@{(=?E<IYnN=8dI
zJnX2aXmYq82%Hi=M2T*bGxRbQ@^UUO8MUX|4;Av7l-G_I=$Th;u28_Dgwtm)>6Y^n
zR&#~C&WVzm#V)`Z266(xT-l0ix@Kj~VyRl#^x9@2RJGKT=1O%}3LBiAGPR@zRSaFg
zl3Fa#d!@qNfjzBWN_V9xrOy@$nyTSU5vQoZ41Lr9A|E?WO+BzP;pW%kuf&%_9n(iX
z-~y{0fAz_kC$AhU^GqOk^Vyf5eN|recdqz*Oa9)!3H2*NtR%$dk|m*YOKL3%kK8x2
z0scQcV{y%#dvS8b)lzb`thm}suJ&bD$1>k}`|ulw=Z}^xjM?|V%D9_Wy^*!9ll|9Y
zE1vfEJ?(c~YrO}r53kgBzhB?IbmW-_7S7F24{g{PA+XxAd!?nX)Y3OAd>|xN6WuF`
zzEZ-F8b7xArceA=g?{m)!{NhG@=-%z@qZ0JM^l@{Qfm(hYO}3*J`LhCK%Sr^>3mpC
zfTd9q3E(!HHU26Nu62ZFIEYGb^lbIUw5nya2^Bv_F@8l3hJS-P$fx1PDcz~QAZO(4
zIZ3(HO^XymFV}hPQZbhw!vaLC17eipE|?Q&AIzN1s1mk;Xi>p8qhdQq_9u+5-H4&X
z4)AmWfhyE_1?p9;e0kiUK56t^5BX)Jm43S3iG=*{t-u3d%@!v#JOtt~@>wJ_2!9Di
z85wJMgSk&-rm{|9fFe)G()V$J>fi@Ub<kh5GK&!Uh#6dF2FYX5Sl2)5ysNg*s?|3e
zd0=L(rfI%xWlX}=$V_B*WG?#VzLou_O8ZYuN0!kDxfzYcPNT9Ziu~mPunNzFXAjMB
zbI+9$z0=`kw1@mXdTRJPWs?v2${jU};adYR`MtG0{crADJg~u7k#~+Q!|PVV7x22z
zGN!(=iE`!OPA@_lyHFo_uQ6zzZd^u3$iEt6PamaOxRATtT(w@Zw=V5H0#S~x^&Pwu
zcsstq#8LfRwhXUZ7ruZOL>Z!vlr29_|6Yy!m+Vc;sF@UEF<Z+9&6~%0x>x@P|I)Ht

diff --git a/api/__pycache__/todos.cpython-312.pyc b/api/__pycache__/todos.cpython-312.pyc
index dc425f47a11a215f6ae9daee21c70c2b08a7bd29..23c30f53875978d2d5daf4b90df674b84e9891de 100644
GIT binary patch
delta 2473
zcmbVOOKcNY6n$^}AII@8PW;V}(8l}%6j8pRBDARlI1w=kOe-13^PCLK#O|9h5UG-b
zREeyrqFJ=NW*L-LMe>GKRd%3m99b1*qzHA<1#B9iYPWrNCZtYMTFS_|bKm`(bMJlc
z+4=48)1$3F`g}ZsXCWr-Z@bkRtzNew^d%CJh-IW;0V|xqDK^2T*af@d5F8kMoa|Iw
zg3HuxvRm;89)%Zpb8VNsidXQOx<hVJe1gx^opP(<7XnI92r3~VWZGPEnAzG)-OXYn
z!uED^;gLI(s1U`7Lj;Tb6#mA$gv~;c5F;`D3mnO{kN~k?K4@8+CClMR^kqED^)1;g
zzv=P4^c1n!N`j)FxQcc$@R?(24Ma$i*yW>oH;z<2BoJfPEr`J-HYRx3FhXKj3~xeq
zh;5`(jIh6U!jmq*5IdOGZEC>Ci_s>=9$+*9H;AejBY{_wZz9EFoDo{>B$~i`8Tjx9
zTyyan*gKnN1>i{%G6|ews)?YF5uDcda2*q8w$f}Vzw_nn{-yk`CiJ(h{T}Xq!%_4!
zVf9;BqrGp4wXF#&JsVE<J%NVP4t=+6CvUjNNTEU{ZC1Zv8~@k`9&9*Ik*iXHFwHwf
zv|PR{<*txf!=aVLlFF=hEkC6icpz;vS}9S>r5Tmvl#)nf!>ej}t)k`%Y-O~Fq)cW+
zGE<O<TEq4zhuihI^E~d-%gzJd6l0^EAiDMMoJnUC)R?~PEaKhzA=mfa9F2gfgNY|1
z6B)y<UXjX%LzWatqg}P2dl^T1Am%L)+dy=I*r)&L=|8)dsfH~t%V`%K05cfY0ziY4
zP0jQW(^MA|-PS{QG2P&0N!4;@*Yr?L=AYt;1hc2zR?<4B!AT<RV;<@N;RLariQ6`M
z7<7{dx>Ml_G6oCY4Z{U=I#~O*<qs|e*NFl{mJQiQt{3ErNOBc6U5$10gFkX)Q?JJ$
z;U9<%-rS9xSW(J!9|U=If1p3v4{DkTHW0J26JW5))5iik!)DvwN?FWn#47D{?N*=-
zyE)npp&hlw;0T^vFEo?pH_d{+vL+`xA4DV6EaEsr+c*uc<+fNewToeatFH58)Be}x
zS?d?7Jq6+<2>33sh@pGBmEBh;DP<_n;vZ#EbEvkzJ>OKs2bup{g~{y&MzfUvtimtN
zY^>uPLV76nb#;f~D(2bMDoYfO5VeE&`>?^uHCokA<h)#%Cd%xd5>==hj81K~EX_<&
z4<x|vCWUegH{0O+WL_n-1(q%q(()>WF93tjvNJhmT4*bz_<O<ZG|!Z3U9|w%O|v~;
z(WYroKN;_<?uIxUJJyCxnqflKs9~Qhm1KGd;s;H4xuVh2usjRP@Q2y#Xm0=B1G&sd
zZfGQveLs_>8F0fMP&NQ`8@*r>tzDX9tc;3G25FJm;0IO}ID}Sh7~}EBX!s{Iyn=ck
zqn;I%`V}P}qrqh~xPtmt(2f<9{KXUcnGep#ez$QvH|Jb+BhGy@aU(H5wh+JD{_ybV
zGW%Sbs!ywpOIkfwnM*YARed1QiLdFIMAU!Jb>G`~FIzuxelFg?<NB4vIdKB7a$y`?
z-2qtf8}a!wi}8E!-apzHny8<=0C5)|4II34b*cIc@i_3+&?>wZCZ5CVg$;2617PZE
z^wj{mH@RyU#C5Z{Q|x~X_s!Ie)cmK5?GMvK%j`2I)ITaV#-{4$rsq-(Ea~IP&h3|3
zLJLbsu60@W_1-!1V4{BhQsZpCer6K7E9jpmJ4Zwo8Df$B>ydqTga_B^6O)aRLOmlw
jBzbi3_}yZy^bE1cg?CorwK)77UeHAmKLZF#*p~bSMvES}

delta 2108
zcmb7FU1%It6rMY?JG+_v&nEl7o1exeo78TVB$BjA6Kx8`CZ=iZ!yv>><|b~P$!_m%
z#0ZiU1p6YQ_d!9>^g*;FLSbKglD>)vhCEmXLR3&_UtG}_1;KM>vgtMz8wd8AbI<R0
z&b@c%{^?(b{NMO|iU801AI1wE;rINpwZB9`_(0GEjp%|wRAPv#Xh^DLI8+Bgy{J14
zS(PnW(p`pIbsJ4;leKo}ilL~AB|CMG;Z?nsEbBhQuLg{u8Z<&`$kMs=X3&K#*$uue
zYAX@MxIl^4q$x{e%d-ho@KGZ)ay7?q`ok}HX@EMep0f3gxaHfF?6oLRk$N|Yy;>xi
zp9Zx6l@}da@Ga-&evlf6oCBD1&P&}i5C{EMs9q7;Y}UeB_)spV)<Tn7EBqp~iKZ|{
zi-MH4B&?xmv4$F%dX1qt4LrzxC@awtkkMwCY=~}y=y7B?^7!Z!4OtmvE!~iz12Rlt
zhRHZg?fic04X>?Cz2pDj)Yg!(3o=?eG1Pv<jyf8mpQuNVbsjPLSVQ#j)o`}!9<t9m
z_@>mye~_*WdT~ii`5b+%ut48Xa`{prS1D@6vgx#5S<#eBj4l>lHyxGyQrRTAtjL!f
znJRZgMbgSQ<rhhs6IZ_{3AtDbA;ZU9DLH~-l+U{sNgw~(^_4_e3xC%gCF$yC?rqZA
zhW0Lm4umv9j=!VyOr8YMl=8Zsb+IQ=jf#B-l%fb$co3wr3!vS8STD$?q8G}QIg39V
ztcsrd<Yhc!S+^Z@P}39(8tViLb0WwH#{h0g>=~4;I@m@TF9%ex)4P|bot>Ql^*GwE
z@a@P<^<&>hqC5m^7UyS!k?9<Wrgx!elyq95+FZUel?@%@z=qNPUr3mWQPikDr>z(z
zhMAbcKMnSzj-%KO0K>6Zj-bM(%I^jH!qx~pD<v&oq1F)Cg=%-Gg~)`pf-Aq{iBw-|
z9we{YOhGl3RgTO`22RinvuK=#;D=}9vCVefi(tNnE)>QyTfNlsH(5I<I-3m~wdj8P
zkcmBuForOJa4-z^C>39Q@HUw#@Lw0I-$wG{0}|(_{x1uwHvZ|`R36JBP*{GL$24rg
z7x7O>H=j(T*Gzx;nx5AeUZKY7$s#it9%fUntd<JPOU#XRnh>y}>4q)M&*#gOd2s0}
zV_3e-@D`iOEL_{mmWKH-#E)9pIz(mro&`|dZmC&u1vb&-e<otNKGaBXs7<M`3{b8x
z(=lHx>TD1L@Q|BQX{Ew0;PQDsmW;3A)-oI^gMNft!ta2>{`EKmHCJ>x$`(L}ACj^H
zpQ4&X2-y=xc7%~#p>t2@*cH-03&}lUbXyqR6}onX-XEKq?|PzlmC%j&A5KXT*X5cb
zi0-$O*ONCcZzR5qd_Oe3Jv6<Z+!4to{!22GnISbXM#8mzbW2=M+<0!ov7v6apIT4s
zkf->G)J*K@niwXbT5sLs;^zr8_Vb&mOl+VgDkNBoJ!1SRb%G4=U^?zxPw$X(d^nv+
zOh7R&c&GL`edp`EJq%>XD1S4ZiJz^B&0y_0uy);6(K^QOq%+=e@*A4jJj~-CbE3b9

diff --git a/api/contents.py b/api/contents.py
index 1c6d97a..7b7af55 100644
--- a/api/contents.py
+++ b/api/contents.py
@@ -1,4 +1,4 @@
-from fastapi import APIRouter, Depends, HTTPException, status, Query, File, UploadFile
+from fastapi import APIRouter, Depends, HTTPException, status, Query, File, UploadFile, Security
 from sqlalchemy.orm import Session
 from sqlalchemy import func
 from typing import List, Optional
@@ -11,13 +11,13 @@ from models import Content as ContentModel, Device as DeviceModel
 from mqtt_manager import mqtt_manager
 from image_processor import image_processor
 from config import settings
+from auth import get_api_key
 
 router = APIRouter(
-    prefix="/api",
     tags=["contents"]
 )
 
-@router.post("/devices/{device_id}/content", response_model=ContentSchema, status_code=status.HTTP_201_CREATED)
+@router.post("/devices/{device_id}/content", response_model=ContentSchema, status_code=status.HTTP_201_CREATED, dependencies=[Depends(get_api_key)])
 async def create_content(
     device_id: str, 
     content: ContentCreate, 
@@ -60,7 +60,7 @@ async def create_content(
     
     return db_content
 
-@router.get("/devices/{device_id}/content", response_model=List[ContentSchema])
+@router.get("/devices/{device_id}/content", response_model=List[ContentSchema], dependencies=[Depends(get_api_key)])
 async def list_content(
     device_id: str,
     skip: int = 0,
@@ -87,7 +87,7 @@ async def list_content(
     contents = query.order_by(ContentModel.version.desc()).offset(skip).limit(limit).all()
     return contents
 
-@router.get("/devices/{device_id}/content/{version}", response_model=ContentResponse)
+@router.get("/devices/{device_id}/content/{version}", response_model=ContentResponse, dependencies=[Depends(get_api_key)])
 async def get_content(
     device_id: str,
     version: int,
@@ -141,7 +141,7 @@ async def get_content(
         created_at=content.created_at
     )
 
-@router.put("/devices/{device_id}/content/{version}", response_model=ContentSchema)
+@router.put("/devices/{device_id}/content/{version}", response_model=ContentSchema, dependencies=[Depends(get_api_key)])
 async def update_content(
     device_id: str,
     version: int,
@@ -176,7 +176,7 @@ async def update_content(
     
     return content
 
-@router.delete("/devices/{device_id}/content/{version}", status_code=status.HTTP_204_NO_CONTENT)
+@router.delete("/devices/{device_id}/content/{version}", status_code=status.HTTP_204_NO_CONTENT, dependencies=[Depends(get_api_key)])
 async def delete_content(
     device_id: str,
     version: int,
diff --git a/api/devices.py b/api/devices.py
index c05985a..adc339c 100644
--- a/api/devices.py
+++ b/api/devices.py
@@ -1,4 +1,4 @@
-from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi import APIRouter, Depends, HTTPException, status, Security
 from sqlalchemy.orm import Session
 from typing import List, Optional
 from datetime import datetime
@@ -9,13 +9,13 @@ from schemas import Device as DeviceSchema, DeviceCreate, DeviceUpdate, Bootstra
 from models import Device as DeviceModel
 from database import Content as ContentModel
 from mqtt_manager import mqtt_manager
+from auth import get_api_key
 
 router = APIRouter(
-    prefix="/api/devices",
     tags=["devices"]
 )
 
-@router.post("/", response_model=DeviceSchema, status_code=status.HTTP_201_CREATED)
+@router.post("/", response_model=DeviceSchema, status_code=status.HTTP_201_CREATED, dependencies=[Depends(get_api_key)])
 async def create_device(device: DeviceCreate, db: Session = Depends(get_db)):
     """
     注册新设备
@@ -46,7 +46,7 @@ async def create_device(device: DeviceCreate, db: Session = Depends(get_db)):
     
     return db_device
 
-@router.get("/", response_model=List[DeviceSchema])
+@router.get("/", response_model=List[DeviceSchema], dependencies=[Depends(get_api_key)])
 async def list_devices(
     skip: int = 0, 
     limit: int = 100, 
@@ -68,7 +68,7 @@ async def list_devices(
     devices = query.offset(skip).limit(limit).all()
     return devices
 
-@router.get("/{device_id}", response_model=DeviceSchema)
+@router.get("/{device_id}", response_model=DeviceSchema, dependencies=[Depends(get_api_key)])
 async def get_device(device_id: str, db: Session = Depends(get_db)):
     """
     获取设备详情
@@ -81,7 +81,7 @@ async def get_device(device_id: str, db: Session = Depends(get_db)):
         )
     return device
 
-@router.put("/{device_id}", response_model=DeviceSchema)
+@router.put("/{device_id}", response_model=DeviceSchema, dependencies=[Depends(get_api_key)])
 async def update_device(
     device_id: str, 
     device_update: DeviceUpdate, 
@@ -108,7 +108,7 @@ async def update_device(
     
     return device
 
-@router.delete("/{device_id}", status_code=status.HTTP_204_NO_CONTENT)
+@router.delete("/{device_id}", status_code=status.HTTP_204_NO_CONTENT, dependencies=[Depends(get_api_key)])
 async def delete_device(device_id: str, db: Session = Depends(get_db)):
     """
     删除设备
@@ -126,11 +126,12 @@ async def delete_device(device_id: str, db: Session = Depends(get_db)):
     db.delete(device)
     db.commit()
 
-@router.get("/{device_id}/bootstrap", response_model=BootstrapResponse)
-async def device_bootstrap(device_id: str, db: Session = Depends(get_db)):
+@router.post("/{device_id}/bootstrap", response_model=BootstrapResponse, dependencies=[Depends(get_api_key)])
+async def bootstrap_device(device_id: str, db: Session = Depends(get_db)):
     """
-    设备启动获取当前版本信息
+    设备引导 - 获取设备配置和内容
     """
+    # 验证设备是否存在
     device = db.query(DeviceModel).filter(DeviceModel.device_id == device_id).first()
     if not device:
         raise HTTPException(
@@ -138,29 +139,19 @@ async def device_bootstrap(device_id: str, db: Session = Depends(get_db)):
             detail="设备不存在"
         )
     
-    # 更新设备最后在线时间
-    device.last_online = datetime.utcnow()
-    db.commit()
-    
-    # 获取最新的活跃内容
-    latest_content = db.query(ContentModel).filter(
-        ContentModel.device_id == device_id,
-        ContentModel.is_active == True
-    ).order_by(ContentModel.version.desc()).first()
+    # 获取设备场景的内容
+    contents = db.query(ContentModel).filter(ContentModel.scene == device.scene).all()
     
+    # 构建响应
     response = BootstrapResponse(
         device_id=device_id,
-        timezone=latest_content.timezone if latest_content else "Asia/Shanghai",
-        time_format=latest_content.time_format if latest_content else "%Y-%m-%d %H:%M"
+        scene=device.scene,
+        contents=contents
     )
     
-    if latest_content:
-        response.content_version = latest_content.version
-        response.last_updated = latest_content.created_at
-    
     return response
 
-@router.get("/{device_id}/status")
+@router.get("/{device_id}/status", dependencies=[Depends(get_api_key)])
 async def get_device_status(device_id: str, db: Session = Depends(get_db)):
     """
     获取设备状态
diff --git a/api/todos.py b/api/todos.py
index fbeb654..f198a7e 100644
--- a/api/todos.py
+++ b/api/todos.py
@@ -1,4 +1,4 @@
-from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi import APIRouter, Depends, HTTPException, status, Security
 from sqlalchemy.orm import Session
 from typing import List, Optional
 from datetime import datetime
@@ -7,13 +7,13 @@ from database import get_db
 from schemas import Todo as TodoSchema, TodoCreate, TodoUpdate
 from models import Todo as TodoModel
 from database import Device as DeviceModel
+from auth import get_api_key
 
 router = APIRouter(
-    prefix="/api/todos",
     tags=["todos"]
 )
 
-@router.post("/", response_model=TodoSchema, status_code=status.HTTP_201_CREATED)
+@router.post("/", response_model=TodoSchema, status_code=status.HTTP_201_CREATED, dependencies=[Depends(get_api_key)])
 async def create_todo(todo: TodoCreate, db: Session = Depends(get_db)):
     """
     创建新的待办事项
@@ -40,7 +40,7 @@ async def create_todo(todo: TodoCreate, db: Session = Depends(get_db)):
     
     return db_todo
 
-@router.get("/", response_model=List[TodoSchema])
+@router.get("/", response_model=List[TodoSchema], dependencies=[Depends(get_api_key)])
 async def list_todos(
     skip: int = 0, 
     limit: int = 100, 
@@ -62,7 +62,7 @@ async def list_todos(
     todos = query.order_by(TodoModel.created_at.desc()).offset(skip).limit(limit).all()
     return todos
 
-@router.get("/{todo_id}", response_model=TodoSchema)
+@router.get("/{todo_id}", response_model=TodoSchema, dependencies=[Depends(get_api_key)])
 async def get_todo(todo_id: int, db: Session = Depends(get_db)):
     """
     获取待办事项详情
@@ -75,7 +75,7 @@ async def get_todo(todo_id: int, db: Session = Depends(get_db)):
         )
     return todo
 
-@router.put("/{todo_id}", response_model=TodoSchema)
+@router.put("/{todo_id}", response_model=TodoSchema, dependencies=[Depends(get_api_key)])
 async def update_todo(
     todo_id: int, 
     todo_update: TodoUpdate, 
@@ -110,7 +110,7 @@ async def update_todo(
     
     return todo
 
-@router.delete("/{todo_id}", status_code=status.HTTP_204_NO_CONTENT)
+@router.delete("/{todo_id}", status_code=status.HTTP_204_NO_CONTENT, dependencies=[Depends(get_api_key)])
 async def delete_todo(todo_id: int, db: Session = Depends(get_db)):
     """
     删除待办事项
@@ -125,7 +125,7 @@ async def delete_todo(todo_id: int, db: Session = Depends(get_db)):
     db.delete(todo)
     db.commit()
 
-@router.post("/{todo_id}/complete", response_model=TodoSchema)
+@router.post("/{todo_id}/complete", response_model=TodoSchema, dependencies=[Depends(get_api_key)])
 async def complete_todo(todo_id: int, db: Session = Depends(get_db)):
     """
     标记待办事项为完成
@@ -146,7 +146,7 @@ async def complete_todo(todo_id: int, db: Session = Depends(get_db)):
     
     return todo
 
-@router.post("/{todo_id}/incomplete", response_model=TodoSchema)
+@router.post("/{todo_id}/incomplete", response_model=TodoSchema, dependencies=[Depends(get_api_key)])
 async def incomplete_todo(todo_id: int, db: Session = Depends(get_db)):
     """
     标记待办事项为未完成
diff --git a/auth.py b/auth.py
new file mode 100644
index 0000000..fe8bf4d
--- /dev/null
+++ b/auth.py
@@ -0,0 +1,118 @@
+from fastapi import HTTPException, status, Request, Security, Depends
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials, APIKeyHeader
+from starlette.middleware.base import BaseHTTPMiddleware
+from starlette.responses import Response
+from config import settings
+import logging
+
+logger = logging.getLogger(__name__)
+
+# 创建API Key安全方案
+api_key_header = APIKeyHeader(name="X-API-Key", auto_error=False)
+
+async def get_api_key(api_key: str = Security(api_key_header)):
+    """
+    API Key依赖项，用于路由级别的鉴权
+    """
+    if not api_key:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="缺少API Key",
+            headers={"WWW-Authenticate": "ApiKey"},
+        )
+    
+    if api_key != settings.secret_key:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="无效的API Key",
+            headers={"WWW-Authenticate": "ApiKey"},
+        )
+    
+    return api_key
+
+class APIKeyMiddleware(BaseHTTPMiddleware):
+    """
+    API Key鉴权中间件
+    验证请求中的Secret Key
+    """
+    
+    async def dispatch(self, request: Request, call_next):
+        # 跳过不需要鉴权的路径
+        if self._should_skip_auth(request.url.path):
+            return await call_next(request)
+        
+        # 检查API Key
+        api_key = request.headers.get("X-API-Key")
+        if not api_key:
+            logger.warning(f"缺少API Key: {request.method} {request.url.path}")
+            return Response(
+                content='{"detail": "缺少API Key"}',
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                media_type="application/json"
+            )
+        
+        # 验证API Key
+        if api_key != settings.secret_key:
+            logger.warning(f"无效的API Key: {request.method} {request.url.path}")
+            return Response(
+                content='{"detail": "无效的API Key"}',
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                media_type="application/json"
+            )
+        
+        return await call_next(request)
+    
+    def _should_skip_auth(self, path: str) -> bool:
+        """
+        判断是否跳过鉴权的路径
+        """
+        # 所有API路径都需要鉴权，不跳过
+        # 如果路径以/api开头，则不跳过（需要鉴权）
+        if path.startswith("/api"):
+            return False
+            
+        skip_paths = [
+            "/",
+            "/health",
+            "/docs",
+            "/redoc",
+            "/openapi.json",
+            "/admin",
+            "/admin/login",
+            "/static",
+        ]
+        
+        # 检查是否以跳过路径开头
+        for skip_path in skip_paths:
+            if path.startswith(skip_path):
+                return True
+            
+        return False
+
+
+class AdminAuthMiddleware(BaseHTTPMiddleware):
+    """
+    Admin页面认证中间件
+    验证用户是否已登录
+    """
+    
+    async def dispatch(self, request: Request, call_next):
+        # 只对admin路径进行认证
+        if not request.url.path.startswith("/admin") or request.url.path == "/admin/login":
+            return await call_next(request)
+        
+        # 检查会话
+        if not self._is_authenticated(request):
+            # 重定向到登录页面
+            from fastapi.responses import RedirectResponse
+            return RedirectResponse(url="/admin/login?next=" + request.url.path, status_code=303)
+        
+        return await call_next(request)
+    
+    def _is_authenticated(self, request: Request) -> bool:
+        """
+        检查用户是否已认证
+        """
+        # 从session中获取认证信息
+        session = request.session
+        return session.get("authenticated", False)
\ No newline at end of file
diff --git a/config.py b/config.py
index b69c719..6241588 100644
--- a/config.py
+++ b/config.py
@@ -29,6 +29,10 @@ class Settings(BaseSettings):
     algorithm: str = "HS256"
     access_token_expire_minutes: int = 30
     
+    # 管理员配置
+    admin_username: str = "admin"
+    admin_password: str = "123456"
+    
     class Config:
         env_file = ".env"
 
diff --git a/main.py b/main.py
index ebfbc88..5689b40 100644
--- a/main.py
+++ b/main.py
@@ -1,6 +1,7 @@
 from fastapi import FastAPI, Request
 from fastapi.staticfiles import StaticFiles
 from fastapi.middleware.cors import CORSMiddleware
+from starlette.middleware.sessions import SessionMiddleware
 from contextlib import asynccontextmanager
 import logging
 import os
@@ -10,6 +11,7 @@ from database import init_db
 from mqtt_manager import mqtt_manager
 from api import api_router
 from admin_routes import admin_router
+from auth import APIKeyMiddleware, AdminAuthMiddleware
 
 # 配置日志
 logging.basicConfig(
@@ -51,10 +53,21 @@ async def lifespan(app: FastAPI):
 
 # 创建FastAPI应用
 app = FastAPI(
-    title=settings.app_name,
-    description="基于 FastAPI + MQTT + HTTP/HTTPS + NTP 的轻量级墨水屏显示系统服务端",
+    title="墨水屏桌面屏幕系统 API",
+    description="用于管理墨水屏设备、内容和待办事项的API",
     version="1.0.0",
-    lifespan=lifespan
+    lifespan=lifespan,
+    openapi_components={
+        "securitySchemes": {
+            "APIKeyHeader": {
+                "type": "apiKey",
+                "in": "header",
+                "name": "X-API-Key",
+                "description": "API Key鉴权，请在下方输入正确的API Key"
+            }
+        }
+    },
+    security=[{"APIKeyHeader": []}]
 )
 
 # 添加CORS中间件
@@ -66,11 +79,20 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
+# 添加API Key鉴权中间件
+app.add_middleware(APIKeyMiddleware)
+
+# 添加Admin认证中间件
+app.add_middleware(AdminAuthMiddleware)
+
+# 添加Session中间件
+app.add_middleware(SessionMiddleware, secret_key=settings.secret_key)
+
 # 挂载静态文件
 app.mount("/static", StaticFiles(directory=settings.static_dir), name="static")
 
 # 注册API路由
-app.include_router(api_router)
+app.include_router(api_router, prefix="/api")
 
 # 包含管理后台路由
 app.include_router(admin_router, prefix="/admin", tags=["管理后台"])
diff --git a/templates/admin/base.html b/templates/admin/base.html
index 06a0394..5b8e4f5 100644
--- a/templates/admin/base.html
+++ b/templates/admin/base.html
@@ -50,7 +50,22 @@
                     <button class="btn btn-outline-light me-2" id="themeToggle" title="切换主题">
                         <i class="fas fa-palette"></i>
                     </button>
-                    <span class="navbar-text text-light">
+                    <div class="dropdown">
+                        <button class="btn btn-outline-light dropdown-toggle" type="button" id="userDropdown" data-bs-toggle="dropdown" aria-expanded="false">
+                            <i class="fas fa-user-circle me-1"></i>
+                            {% if request.session.get('username') %}
+                                {{ request.session.get('username') }}
+                            {% else %}
+                                管理员
+                            {% endif %}
+                        </button>
+                        <ul class="dropdown-menu dropdown-menu-end" aria-labelledby="userDropdown">
+                            <li><a class="dropdown-item" href="/admin/logout">
+                                <i class="fas fa-sign-out-alt me-1"></i>登出
+                            </a></li>
+                        </ul>
+                    </div>
+                    <span class="navbar-text text-light ms-2">
                         <i class="far fa-clock me-1"></i>
                         <span id="currentTime"></span>
                     </span>
diff --git a/templates/admin/login.html b/templates/admin/login.html
new file mode 100644
index 0000000..174ab04
--- /dev/null
+++ b/templates/admin/login.html
@@ -0,0 +1,74 @@
+{% extends "admin/base.html" %}
+
+{% block title %}管理员登录{% endblock %}
+
+{% block content %}
+<div class="login-container">
+    <div class="login-card">
+        <div class="login-header">
+            <h2>管理员登录</h2>
+            <p class="text-muted">墨水屏桌面屏幕系统</p>
+        </div>
+        
+        {% if error %}
+        <div class="alert alert-danger" role="alert">
+            {{ error }}
+        </div>
+        {% endif %}
+        
+        <form method="post" action="/admin/login">
+            <div class="mb-3">
+                <label for="username" class="form-label">用户名</label>
+                <input type="text" class="form-control" id="username" name="username" required>
+            </div>
+            
+            <div class="mb-3">
+                <label for="password" class="form-label">密码</label>
+                <input type="password" class="form-control" id="password" name="password" required>
+            </div>
+            
+            <div class="mb-3 form-check">
+                <input type="checkbox" class="form-check-input" id="remember" name="remember">
+                <label class="form-check-label" for="remember">记住我</label>
+            </div>
+            
+            <button type="submit" class="btn btn-primary w-100">登录</button>
+        </form>
+    </div>
+</div>
+
+<style>
+.login-container {
+    display: flex;
+    justify-content: center;
+    align-items: center;
+    min-height: 100vh;
+    background-color: #f8f9fa;
+}
+
+.login-card {
+    background: white;
+    border-radius: 10px;
+    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.1);
+    padding: 2rem;
+    width: 100%;
+    max-width: 400px;
+}
+
+.login-header {
+    text-align: center;
+    margin-bottom: 2rem;
+}
+
+.login-header h2 {
+    margin-bottom: 0.5rem;
+    color: #333;
+}
+
+.login-header p {
+    margin-bottom: 0;
+    color: #6c757d;
+    font-size: 0.9rem;
+}
+</style>
+{% endblock %}
\ No newline at end of file