feat(auth): add password reset flow

Add admin-generated reset links, reset UI, timezone-aware expiry display, and registration captcha coverage.

templates/admin.html

@@ -8,7 +8,7 @@
 <div class="mb-6 flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between">
   <div>
     <h1 class="text-3xl font-extrabold tracking-tight sm:text-4xl">管理台</h1>
-    <p class="mt-2 text-sm text-textSub">管理系统注册状态，查看所有用户的上传文件和预测结果。</p>
+    <p class="mt-2 text-sm text-textSub">管理系统注册状态、密码重置链接，查看所有用户的上传文件和预测结果。</p>
   </div>
   <a href="{{ url_for('main.home') }}" class="ui-btn ui-btn-secondary">
     <span class="material-symbols-outlined text-lg">arrow_back</span>
@@ -38,7 +38,62 @@
   </div>
 </section>
 
-<section class="flex min-h-[760px] flex-col overflow-hidden rounded-lg border border-line bg-white shadow-panel">
+<section class="mb-6 rounded-lg border border-line bg-white p-5 shadow-panel">
+  <div class="mb-4 flex flex-col gap-1 sm:flex-row sm:items-center sm:justify-between">
+    <div>
+      <h2 class="text-lg font-extrabold tracking-tight">用户密码重置</h2>
+      <p class="mt-1 text-sm text-textSub">为普通用户生成一次性重置链接，旧链接会自动失效。</p>
+    </div>
+    <span class="text-sm text-textSub">共 {{ password_reset_users|length }} 位普通用户</span>
+  </div>
+  <div id="resetLinkPanel" class="mb-4 hidden rounded-lg border border-blue-200 bg-blue-50 p-4">
+    <div class="mb-2 flex flex-col gap-1 sm:flex-row sm:items-center sm:justify-between">
+      <div class="text-sm font-extrabold text-textMain">已生成重置链接</div>
+      <div id="resetLinkExpires" class="text-xs font-semibold text-textSub"></div>
+    </div>
+    <div class="flex flex-col gap-3 sm:flex-row">
+      <input id="resetLinkValue" class="min-w-0 flex-1 rounded-md border border-blue-200 bg-white px-3 py-2 text-sm text-textMain" readonly>
+      <button id="resetLinkCopy" type="button" class="ui-btn ui-btn-sm ui-btn-secondary">
+        <span class="material-symbols-outlined text-lg">content_copy</span>
+        复制
+      </button>
+    </div>
+  </div>
+  <div class="overflow-x-auto rounded-lg border border-line">
+    <table class="min-w-full text-sm">
+      <thead class="bg-slate-50 text-xs font-bold uppercase tracking-[0.12em] text-textSub">
+        <tr>
+          <th class="px-4 py-3 text-left">用户</th>
+          <th class="px-4 py-3 text-left">创建时间</th>
+          <th class="px-4 py-3 text-left">操作</th>
+        </tr>
+      </thead>
+      <tbody class="divide-y divide-line">
+        {% for user in password_reset_users %}
+        <tr class="hover:bg-slate-50">
+          <td class="px-4 py-3 font-semibold">{{ user.username }}</td>
+          <td class="px-4 py-3 text-textSub">{{ user.created_at.strftime('%Y-%m-%d %H:%M:%S') if user.created_at else '-' }}</td>
+          <td class="px-4 py-3">
+            <form method="post" action="{{ url_for('main.create_password_reset_link', user_id=user.id) }}" data-reset-link-form class="inline-flex">
+              <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+              <button type="submit" class="ui-btn ui-btn-sm ui-btn-secondary">
+                <span class="material-symbols-outlined text-lg">link</span>
+                生成重置链接
+              </button>
+            </form>
+          </td>
+        </tr>
+        {% else %}
+        <tr>
+          <td colspan="3" class="px-4 py-8 text-center text-textSub">暂无普通用户</td>
+        </tr>
+        {% endfor %}
+      </tbody>
+    </table>
+  </div>
+</section>
+
+<section class="flex h-[710px] flex-col overflow-hidden rounded-lg border border-line bg-white shadow-panel">
   <div class="border-b border-line px-5 py-4">
     <div class="flex flex-col gap-1 sm:flex-row sm:items-center sm:justify-between">
       <h2 class="text-lg font-extrabold">上传记录</h2>
@@ -47,7 +102,7 @@
       {% endif %}
     </div>
   </div>
-  <div class="flex-1 overflow-x-auto">
+  <div class="min-h-0 flex-1 overflow-auto">
     <table class="min-w-full text-sm">
       <thead class="bg-slate-50 text-xs font-bold uppercase tracking-[0.12em] text-textSub">
         <tr>
@@ -125,5 +180,59 @@
       }
     });
   })();
+
+  (() => {
+    const panel = document.getElementById('resetLinkPanel');
+    const value = document.getElementById('resetLinkValue');
+    const expires = document.getElementById('resetLinkExpires');
+    const copy = document.getElementById('resetLinkCopy');
+
+    if (!panel || !value || !expires || !copy) return;
+
+    document.querySelectorAll('[data-reset-link-form]').forEach((form) => {
+      const submit = form.querySelector('button[type="submit"]');
+      const submitText = submit?.lastChild;
+
+      form.addEventListener('submit', async (event) => {
+        event.preventDefault();
+        if (submit) submit.disabled = true;
+        if (submitText) submitText.textContent = '生成中';
+
+        try {
+          const response = await fetch(form.action, {
+            method: 'POST',
+            body: new FormData(form),
+            headers: { 'X-Requested-With': 'XMLHttpRequest' },
+          });
+          const data = await response.json();
+
+          if (!response.ok) {
+            window.showAppNotification?.(data.error || '生成失败，请刷新页面后重试。', 'error', '生成失败');
+            return;
+          }
+
+          value.value = data.reset_url;
+          expires.textContent = `有效期至 ${data.expires_at}`;
+          panel.classList.remove('hidden');
+          window.showAppNotification?.(data.message, 'info');
+        } catch (error) {
+          window.showAppNotification?.('请求失败，请检查后端服务是否正常。', 'error', '生成失败');
+        } finally {
+          if (submit) submit.disabled = false;
+          if (submitText) submitText.textContent = '生成重置链接';
+        }
+      });
+    });
+
+    copy.addEventListener('click', async () => {
+      value.select();
+      try {
+        await navigator.clipboard.writeText(value.value);
+      } catch (error) {
+        document.execCommand('copy');
+      }
+      window.showAppNotification?.('重置链接已复制', 'info');
+    });
+  })();
 </script>
 {% endblock %}