更新管理员登录和鉴权逻辑，优化用户体验；重构相关API以支持更安全的身份验证；调整数据库初始化以兼容新字段，确保用户信息安全；修复部分组件样式和功能，提升整体可用性。

app/api/admin/payment/route.ts

@@ -2,6 +2,7 @@
 // 付费模块管理API
 
 import { NextRequest, NextResponse } from 'next/server'
+import { requireAdminResponse } from '@/lib/admin-auth'
 
 // 模拟订单数据
 let orders = [
@@ -29,6 +30,8 @@ let orders = [
 
 // GET: 获取订单列表
 export async function GET(req: NextRequest) {
+  const authErr = requireAdminResponse(req)
+  if (authErr) return authErr
   const { searchParams } = new URL(req.url)
   const status = searchParams.get('status')
   const page = parseInt(searchParams.get('page') || '1')
@@ -71,6 +74,8 @@ export async function GET(req: NextRequest) {
 
 // POST: 创建订单（手动）
 export async function POST(req: NextRequest) {
+  const authErr = requireAdminResponse(req)
+  if (authErr) return authErr
   try {
     const body = await req.json()
     const { userId, userName, amount, note } = body
@@ -110,6 +115,8 @@ export async function POST(req: NextRequest) {
 
 // PUT: 更新订单状态
 export async function PUT(req: NextRequest) {
+  const authErr = requireAdminResponse(req)
+  if (authErr) return authErr
   try {
     const body = await req.json()
     const { orderId, status, note } = body
@@ -148,6 +155,8 @@ export async function PUT(req: NextRequest) {
 
 // DELETE: 删除订单
 export async function DELETE(req: NextRequest) {
+  const authErr = requireAdminResponse(req)
+  if (authErr) return authErr
   try {
     const { searchParams } = new URL(req.url)
     const orderId = searchParams.get('id')