使用环境变量管理模型名称[ci][0.2.5]

revert 修改一下进程管理相关问题

.dockerignore

@@ -0,0 +1,15 @@
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.log
+.DS_Store
+.env
+.venv/
+venv/
+node_modules/
+.git/
+.gitignore
+db.sqlite3
+media/
+staticfiles/

.gitea/workflows/ci.yml

@@ -0,0 +1,101 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - Django
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 版本号（如 0.2.2），为空则自动生成
+        required: false
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  docker-ci:
+    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && contains(github.event.head_commit.message, '[ci]'))
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    env:
+      DJANGO_SECRET_KEY: ${{ secrets.DJANGO_SECRET_KEY }}
+      DJANGO_DEBUG: "False"
+      DJANGO_ALLOWED_HOSTS: "127.0.0.1,localhost"
+      IMAGE_NAME: achievement_inputing_ci
+      ARTIFACT_DIR: artifacts
+      SERVER_DEST_DIR: /srv/ci
+      DOWNLOAD_BASE: http://139.224.69.213:8080
+      GITEA_SERVER: ${{ github.server_url }}
+      GITEA_REPO: ${{ github.repository }}
+      RELEASE_TOKEN: ${{ secrets.token }}
+    steps:
+      - name: Ensure source present
+        env:
+          SERVER: ${{ github.server_url }}
+          REPO: ${{ github.repository }}
+          REF: ${{ github.ref }}
+          SHA: ${{ github.sha }}
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if [ -f "$GITHUB_WORKSPACE/Dockerfile" ]; then exit 0; fi
+          mkdir -p "$GITHUB_WORKSPACE"
+          cd "$GITHUB_WORKSPACE"
+          git init .
+          if [ -z "$TOKEN" ]; then
+            git fetch --depth=1 "$SERVER/$REPO.git" "$REF"
+          else
+            git -c http.extraHeader="Authorization: Bearer $TOKEN" fetch --depth=1 "$SERVER/$REPO.git" "$REF"
+          fi
+          git checkout FETCH_HEAD
+      - name: Derive version
+        run: |
+          msg="${{ github.event.head_commit.message }}"
+          ver_input="${{ github.event.inputs.version }}"
+          ver=""
+          if [ -n "$ver_input" ]; then
+            ver="$ver_input"
+          else
+            ver=$(echo "$msg" | grep -Eo "\[[0-9]+(\.[0-9]+){1,}\]" | head -n1 | tr -d '[]')
+          fi
+          if [ -z "$ver" ]; then
+            ver="$(date +%Y%m%d%H%M)-${GITHUB_SHA:0:7}"
+          fi
+          echo "VERSION=$ver" >> $GITHUB_ENV
+      - name: Build application image
+        run: |
+          docker build -t "$IMAGE_NAME:$VERSION" -f "$GITHUB_WORKSPACE/Dockerfile" "$GITHUB_WORKSPACE"
+      - name: Output image info
+        run: |
+          docker image inspect "$IMAGE_NAME:$VERSION" --format '{{.Id}} {{.Size}}'
+      - name: Export image tar
+        run: |
+          ART="achievement_inputing_ci_${VERSION}.tar"
+          docker save -o "$GITHUB_WORKSPACE/$ART" "$IMAGE_NAME:$VERSION"
+          echo "$ART" > "$GITHUB_WORKSPACE/.artifact_name"
+      - name: Publish artifact locally
+        run: |
+          ART=$(cat "$GITHUB_WORKSPACE/.artifact_name")
+          mkdir -p "$GITHUB_WORKSPACE/$ARTIFACT_DIR"
+          mv "$GITHUB_WORKSPACE/$ART" "$GITHUB_WORKSPACE/$ARTIFACT_DIR/"
+          echo "artifact: $GITHUB_WORKSPACE/$ARTIFACT_DIR/$ART"
+      - name: Publish to /srv/ci
+        run: |
+          set -e
+          ART=$(cat "$GITHUB_WORKSPACE/.artifact_name")
+          cat "$GITHUB_WORKSPACE/$ARTIFACT_DIR/$ART" | docker run --rm -i -v "$SERVER_DEST_DIR:/srvci" "$IMAGE_NAME:$VERSION" sh -c "cat > /srvci/$ART && ls -l /srvci"
+          echo "published: $SERVER_DEST_DIR/$ART"
+      - name: Create release with download link
+        if: env.RELEASE_TOKEN != ''
+        run: |
+          ART=$(cat "$GITHUB_WORKSPACE/.artifact_name")
+          BRANCH=${GITHUB_REF#refs/heads/}
+          TAG="$VERSION"
+          NAME="$VERSION"
+          BASE="${DOWNLOAD_BASE%/}"
+          BASE="${BASE%/ci}"
+          DL="$BASE/$ART"
+          echo "download: $DL"
+          JSON=$(printf '{"tag_name":"%s","target_commitish":"%s","name":"%s","body":"%s"}' "$TAG" "$BRANCH" "$NAME" "$DL")
+          curl -sS -X POST "$GITEA_SERVER/api/v1/repos/$GITEA_REPO/releases" -H "Content-Type: application/json" -H "Authorization: token $RELEASE_TOKEN" -d "$JSON"

Achievement_Inputing/asgi.py

@@ -0,0 +1,16 @@
+"""
+ASGI config for Achievement_Inputing project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.2/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'Achievement_Inputing.settings')
+
+application = get_asgi_application()

Achievement_Inputing/settings.py

@@ -0,0 +1,169 @@
+"""
+Django settings for Achievement_Inputing project.
+
+Generated by 'django-admin startproject' using Django 5.2.8.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.2/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/5.2/ref/settings/
+"""
+
+from pathlib import Path
+import os
+from elastic.indexes import INDEX_NAME
+
+# Build paths inside the project like this: BASE_DIR / 'subdir'.
+BASE_DIR = Path(__file__).resolve().parent.parent
+
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/5.2/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = os.environ.get('DJANGO_SECRET_KEY', 'django-insecure-p^*6tak7wy1z#bw__#o^s5hsydearm=(-s(km!-61j2(#)*+-t')
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = os.environ.get('DJANGO_DEBUG', 'True').lower() == 'true'
+
+ALLOWED_HOSTS = os.environ.get('DJANGO_ALLOWED_HOSTS', '127.0.0.1,localhost').split(',')
+
+
+# Application definition
+
+INSTALLED_APPS = [
+    'django_browser_reload',
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'accounts',
+    'main',
+    'elastic',
+    'django_elasticsearch_dsl',
+]
+
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'whitenoise.middleware.WhiteNoiseMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django_browser_reload.middleware.BrowserReloadMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+ROOT_URLCONF = 'Achievement_Inputing.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'Achievement_Inputing.wsgi.application'
+
+
+# Database
+# https://docs.djangoproject.com/en/5.2/ref/settings/#databases
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': BASE_DIR / 'db.sqlite3',
+    }
+}
+
+
+# Password validation
+# https://docs.djangoproject.com/en/5.2/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/5.2/topics/i18n/
+
+LANGUAGE_CODE = 'en-us'
+
+TIME_ZONE = 'UTC'
+
+USE_I18N = True
+
+USE_TZ = True
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/5.2/howto/static-files/
+
+STATIC_URL = 'static/'
+STATIC_ROOT = BASE_DIR / 'staticfiles'
+
+# Media files (uploaded images)
+MEDIA_URL = '/media/'
+MEDIA_ROOT = BASE_DIR / 'media'
+
+# Security settings for cookies and headers (dev-friendly defaults)
+SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_SAMESITE = 'Lax'
+SESSION_COOKIE_SECURE = False if DEBUG else True
+
+CSRF_COOKIE_SECURE = False if DEBUG else True
+CSRF_COOKIE_SAMESITE = 'Lax'
+
+CSRF_TRUSTED_ORIGINS = os.environ.get('DJANGO_CSRF_TRUSTED_ORIGINS', '').split(',') if os.environ.get('DJANGO_CSRF_TRUSTED_ORIGINS') else []
+
+X_FRAME_OPTIONS = 'DENY'
+
+# Default primary key field type
+# https://docs.djangoproject.com/en/5.2/ref/settings/#default-auto-field
+
+DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
+
+# Elasticsearch configuration
+_ES_URL = os.environ.get('ELASTICSEARCH_URL', 'http://localhost:9200')
+if not (_ES_URL.startswith('http://') or _ES_URL.startswith('https://')):
+    _ES_URL = 'http://' + _ES_URL
+ELASTICSEARCH_DSL = {
+    'default': {
+        'hosts': _ES_URL
+    },
+}
+
+# Elasticsearch index settings
+ELASTICSEARCH_INDEX_NAMES = {
+    'elastic.documents.AchievementDocument': INDEX_NAME,
+    'elastic.documents.UserDocument': INDEX_NAME,
+}
+
+# AI Studio/OpenAI client settings
+AISTUDIO_API_KEY = os.environ.get('AISTUDIO_API_KEY', '')
+OPENAI_BASE_URL = os.environ.get('OPENAI_BASE_URL', 'https://aistudio.baidu.com/llm/lmapi/v3')
+OPENAI_MODEL_NAME = os.environ.get('OPENAI_MODEL_NAME', 'ernie-4.5-turbo-vl-32k')

Achievement_Inputing/urls.py

@@ -0,0 +1,33 @@
+"""
+URL configuration for Achievement_Inputing project.
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/5.2/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+from django.contrib import admin
+from django.urls import path, include
+from django.conf import settings
+from django.conf.urls.static import static
+from main.views import home as main_home
+
+urlpatterns = [
+    path("__reload__/", include("django_browser_reload.urls")),
+    path('admin/', admin.site.urls),
+    path('accounts/', include('accounts.urls', namespace='accounts')),
+    path('main/', include('main.urls', namespace='main')),
+    path('elastic/', include('elastic.urls', namespace='elastic')),
+    path('', main_home, name='root_home'),
+]
+
+if settings.DEBUG:
+    urlpatterns += static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)

Achievement_Inputing/wsgi.py

@@ -0,0 +1,16 @@
+"""
+WSGI config for Achievement_Inputing project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.2/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'Achievement_Inputing.settings')
+
+application = get_wsgi_application()

Dockerfile

@@ -0,0 +1,23 @@
+FROM python:3.11-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    libjpeg62-turbo-dev \
+    zlib1g-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt /app/
+RUN pip install --no-cache-dir -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple \
+    && apt-get purge -y --auto-remove build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY . /app
+
+EXPOSE 8000
+
+CMD ["sh","-c","python manage.py migrate && python manage.py collectstatic --noinput && gunicorn Achievement_Inputing.wsgi:application --bind 0.0.0.0:8000 --workers 3"]

ESConnect.py

@@ -1,223 +0,0 @@
-from elasticsearch import Elasticsearch
-import os
-import json
-import hashlib
-import requests
-import json
-
-# Elasticsearch连接配置
-ES_URL = "http://localhost:9200"
-AUTH = None  # 如需认证则改为("用户名","密码")
-
-# document=os.open('results/output.json', os.O_RDONLY)
-
-# 创建Elasticsearch客户端实例，连接到本地Elasticsearch服务
-es = Elasticsearch(["http://localhost:9200"])
-
-# 定义索引名称和类型名称
-index_name = "wordsearch2666"
-
-def create_index_with_mapping():
-    """修正后的索引映射配置"""
-    # 修正映射结构（移除keyword字段的非法参数）
-    mapping = {
-        "mappings": {
-            "properties": {
-                "data": {
-                    "type": "text",  # 存储转换后的字符串，支持分词搜索
-                    "analyzer": "ik_max_word",
-                    "search_analyzer": "ik_smart"
-                },
-                "image": {"type": "keyword"},  # 存储图片路径或标识
-            }
-        }
-    }
-
-    # 检查索引是否存在，不存在则创建
-    if not es.indices.exists(index=index_name):
-        es.indices.create(index=index_name, body=mapping)
-        print(f"创建索引 {index_name} 并设置映射")
-    else:
-        print(f"索引 {index_name} 已存在")
-
-def update_document(es, index_name, doc_id=None, updated_doc=None):
-    """更新指定ID的文档"""
-    es.update(index=index_name, id=doc_id, body={"doc": updated_doc})
-
-
-def get_doc_id(data):
-    """
-    根据数据内容生成唯一ID（用于去重）
-    
-    参数:
-        data (dict): 包含文档数据的字典
-        
-    返回:
-        str: 基于数据内容生成的MD5哈希值作为唯一ID
-    """
-    # 使用data字段的内容生成唯一字符串
-    data_str = data.get('data', '')
-    image_str = data.get('image', '')
-    unique_str = f"{data_str}{image_str}"
-    # 使用MD5哈希生成唯一ID
-    return hashlib.md5(unique_str.encode('utf-8')).hexdigest()
-
-
-def insert_data(data):
-    """
-    向Elasticsearch插入数据
-    
-    参数:
-        data (dict): 要插入的数据
-        
-    返回:
-        bool: 插入成功返回True，失败返回False
-    """
-    # 生成文档唯一ID
-    return  batch_write_data(data)
-
-
-def search_data(query):
-    """
-    在Elasticsearch中搜索数据
-    
-    参数:
-        query (str): 搜索关键词
-        
-    返回:
-        list: 包含搜索结果的列表，每个元素是一个文档的源数据
-    """
-    # 执行多字段匹配搜索
-    result = es.search(index=index_name, body={"query": {"multi_match": {"query": query, "fields": ["*"]}}})
-    # 返回搜索结果的源数据部分
-    return [hit["_source"] for hit in result['hits']['hits']]
-
-def search_all():
-    """
-    获取所有文档
-    
-    返回:
-        list: 包含所有文档的列表，每个元素包含文档ID和源数据
-    """
-    # 执行匹配所有文档的查询
-    result = es.search(index=index_name, body={"query": {"match_all": {}}})
-    # 返回包含文档ID和源数据的列表
-    return [{
-        "_id": hit["_id"],
-        **hit["_source"]
-    } for hit in result['hits']['hits']]
-
-def delete_by_id(doc_id):
-    """
-    根据 doc_id 删除文档
-    
-    参数:
-        doc_id (str): 要删除的文档ID
-        
-    返回:
-        bool: 删除成功返回True，失败返回False
-    """
-    try:
-        # 执行删除操作
-        es.delete(index=index_name, id=doc_id)
-        return True
-    except Exception as e:
-        print("删除失败:", str(e))
-        return False
-
-def update_by_id(doc_id, updated_data):
-    """
-    根据文档ID更新数据
-    
-    参数:
-        doc_id (str): 要更新的文档ID
-        updated_data (dict): 更新的数据内容
-        
-    返回:
-        bool: 更新成功返回True，失败返回False
-    """
-    try:
-        # 执行更新操作
-        es.update(index=index_name, id=doc_id, body={"doc": updated_data})
-        print(f"文档 {doc_id} 更新成功")
-        return True
-    except Exception as e:
-        print(f"更新失败: {str(e)}")
-        return False
-
-def get_by_id(doc_id):
-    """
-    根据文档ID获取单个文档
-    
-    参数:
-        doc_id (str): 要获取的文档ID
-        
-    返回:
-        dict or None: 成功返回文档数据，失败返回None
-    """
-    try:
-        # 执行获取操作
-        result = es.get(index=index_name, id=doc_id)
-        if result['found']:
-            return {
-                "_id": result['_id'],
-                **result['_source']
-            }
-        return None
-    except Exception as e:
-        print(f"获取文档失败: {str(e)}")
-        return None
-
-def search_by_any_field(keyword):
-    """全字段模糊搜索（支持拼写错误）"""
-    try:
-        # update_mapping()
-        response = requests.post(
-            f"{ES_URL}/{index_name}/_search",
-            auth=AUTH,
-            json={
-                "query": {
-                    "multi_match": {
-                        "query": keyword,
-                        "fields": ["*"],  # 匹配所有字段
-                        "fuzziness": "AUTO",  # 启用模糊匹配
-                    }
-                }
-            }
-        )
-        response.raise_for_status()
-        results = response.json()["hits"]["hits"]
-        print(f"\n模糊搜索 '{keyword}' 找到 {len(results)} 条结果:")
-
-        for doc in results:
-            print(f"\n文档ID: {doc['_id']}")
-            if '_source' in doc:
-                max_key_len = max(len(k) for k in doc['_source'].keys())
-                for key, value in doc['_source'].items():
-                    # 提取高亮部分
-                    highlight = doc.get('highlight', {}).get(key, [value])[0]
-                    print(f"{key:>{max_key_len + 2}} : {highlight}")
-            else:
-                print("无_source数据")
-
-        return results
-    except requests.exceptions.HTTPError as e:
-        print(f"搜索失败: {e.response.text}")
-        return []
-
-def batch_write_data(data):
-    """批量写入获奖数据"""
-    try:
-        response = requests.post(
-            f"{ES_URL}/{index_name}/_doc",
-            json=data,
-            auth=AUTH,
-            headers={"Content-Type": "application/json"}
-        )
-        response.raise_for_status()
-        doc_id = response.json()["_id"]
-        print(f"文档写入成功，ID: {doc_id}, 内容: {data}")
-        return True
-    except requests.exceptions.HTTPError as e:
-        print(f"文档写入失败: {e.response.text}, 数据: {data}")
-        return False

ESTest.py

@@ -1,10 +0,0 @@
-from elasticsearch import Elasticsearch
-
-# 连接本地的 Elasticsearch 实例
-es = Elasticsearch(["http://localhost:9200"])
-
-# 检查连接是否成功
-if es.ping():
-    print("连接成功！")
-else:
-    print("连接失败！")

README.md

@@ -0,0 +1 @@
+python manage.py shell -c "from elastic.es_connect import create_index_with_mapping; create_index_with_mapping()"

accounts/__init__.py

@@ -0,0 +1 @@
+"""Accounts app for secure login flow."""

accounts/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class AccountsConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'accounts'

accounts/crypto.py

@@ -0,0 +1,115 @@
+import hashlib
+import hmac
+import os
+import base64
+from typing import Tuple
+
+try:
+    from cryptography.hazmat.primitives.asymmetric import rsa, padding
+    from cryptography.hazmat.primitives import serialization, hashes
+    from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+    from cryptography.hazmat.backends import default_backend
+except Exception:
+    rsa = None
+    padding = None
+    serialization = None
+    hashes = None
+    Cipher = None
+    algorithms = None
+    modes = None
+    default_backend = None
+
+
+def salt_for_username(username: str) -> bytes:
+    """Derive a per-username salt using SHA-256(username).
+
+    The salt is deterministic for a given username and does not require storage.
+    """
+    return hashlib.sha256(username.encode('utf-8')).digest()
+
+
+def derive_password(password_plain: str, salt: bytes, iterations: int = 100_000, dklen: int = 32) -> bytes:
+    """PBKDF2-SHA256 derive a fixed-length secret from a plaintext password and salt."""
+    return hashlib.pbkdf2_hmac('sha256', password_plain.encode('utf-8'), salt, iterations, dklen=dklen)
+
+
+def hmac_sha256(key: bytes, message: bytes) -> bytes:
+    """Compute HMAC-SHA256 signature for the given message using key bytes."""
+    return hmac.new(key, message, hashlib.sha256).digest()
+
+
+_RSA_PRIVATE = None
+_RSA_PUBLIC = None
+
+def _ensure_rsa_keys():
+    global _RSA_PRIVATE, _RSA_PUBLIC
+    if _RSA_PRIVATE is None:
+        if rsa is None:
+            raise RuntimeError("cryptography library is required for RSA operations")
+        _RSA_PRIVATE = rsa.generate_private_key(public_exponent=65537, key_size=2048)
+        _RSA_PUBLIC = _RSA_PRIVATE.public_key()
+
+def get_public_key_spki_b64() -> str:
+    _ensure_rsa_keys()
+    spki = _RSA_PUBLIC.public_bytes(encoding=serialization.Encoding.DER, format=serialization.PublicFormat.SubjectPublicKeyInfo)
+    return base64.b64encode(spki).decode('ascii')
+
+def rsa_oaep_decrypt_b64(ciphertext_b64: str) -> bytes:
+    _ensure_rsa_keys()
+    ct = base64.b64decode(ciphertext_b64)
+    return _RSA_PRIVATE.decrypt(ct, padding.OAEP(mgf=padding.MGF1(algorithm=hashes.SHA256()), algorithm=hashes.SHA256(), label=None))
+
+def aes_gcm_decrypt_b64(key_bytes: bytes, iv_b64: str, ciphertext_b64: str) -> bytes:
+    if Cipher is None:
+        raise RuntimeError("cryptography library is required for AES operations")
+    iv = base64.b64decode(iv_b64)
+    data = base64.b64decode(ciphertext_b64)
+    if len(data) < 16:
+        raise ValueError("ciphertext too short")
+    ct = data[:-16]
+    tag = data[-16:]
+    decryptor = Cipher(algorithms.AES(key_bytes), modes.GCM(iv, tag), backend=default_backend()).decryptor()
+    pt = decryptor.update(ct) + decryptor.finalize()
+    return pt
+
+def gen_salt(length: int = 16) -> bytes:
+    return os.urandom(length)
+
+def hash_password_with_salt(password_plain: str, salt: bytes, iterations: int = 200_000, dklen: int = 32) -> bytes:
+    return hashlib.pbkdf2_hmac('sha256', password_plain.encode('utf-8'), salt, iterations, dklen=dklen)
+
+def hash_password_random_salt(password_plain: str) -> Tuple[str, str]:
+    salt = gen_salt(16)
+    h = hash_password_with_salt(password_plain, salt)
+    return base64.b64encode(salt).decode('ascii'), base64.b64encode(h).decode('ascii')
+
+def verify_password(password_plain: str, salt_b64: str, hash_b64: str) -> bool:
+    try:
+        salt = base64.b64decode(salt_b64)
+        expected = base64.b64decode(hash_b64)
+        actual = hash_password_with_salt(password_plain, salt)
+        return hmac.compare_digest(actual, expected)
+    except Exception:
+        return False
+
+def generate_rsa_private_pem_b64() -> str:
+    if rsa is None or serialization is None:
+        raise RuntimeError("cryptography library is required for RSA operations")
+    priv = rsa.generate_private_key(public_exponent=65537, key_size=2048)
+    pem = priv.private_bytes(encoding=serialization.Encoding.PEM, format=serialization.PrivateFormat.PKCS8, encryption_algorithm=serialization.NoEncryption())
+    return base64.b64encode(pem).decode('ascii')
+
+def public_spki_b64_from_private_pem_b64(private_pem_b64: str) -> str:
+    if serialization is None:
+        raise RuntimeError("cryptography library is required for RSA operations")
+    priv = serialization.load_pem_private_key(base64.b64decode(private_pem_b64), password=None)
+    pub = priv.public_key()
+    spki = pub.public_bytes(encoding=serialization.Encoding.DER, format=serialization.PublicFormat.SubjectPublicKeyInfo)
+    return base64.b64encode(spki).decode('ascii')
+
+def rsa_oaep_decrypt_b64_with_private_pem(private_pem_b64: str, ciphertext_b64: str) -> bytes:
+    if serialization is None or padding is None or hashes is None:
+        raise RuntimeError("cryptography library is required for RSA operations")
+    priv = serialization.load_pem_private_key(base64.b64decode(private_pem_b64), password=None)
+    ct = base64.b64decode(ciphertext_b64)
+    return priv.decrypt(ct, padding.OAEP(mgf=padding.MGF1(algorithm=hashes.SHA256()), algorithm=hashes.SHA256(), label=None))

accounts/es_client.py

@@ -0,0 +1,14 @@
+import base64
+from elastic.es_connect import get_user_by_username as es_get_user_by_username
+
+def get_user_by_username(username: str):
+    es_user = es_get_user_by_username(username)
+    if es_user:
+        return {
+            'user_id': es_user.get('user_id', 0),
+            'username': es_user.get('username', ''),
+            'password_hash': es_user.get('password_hash'),
+            'password_salt': es_user.get('password_salt'),
+            'permission': es_user.get('permission', 1),
+        }
+    return None

accounts/static/accounts/login.js

@@ -0,0 +1,136 @@
+function getCookie(name) {
+  const value = `; ${document.cookie}`;
+  const parts = value.split(`; ${name}=`);
+  if (parts.length === 2) return parts.pop().split(';').shift();
+}
+
+function base64ToArrayBuffer(b64) {
+  const binary = atob(b64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes.buffer;
+}
+
+function arrayBufferToBase64(buffer) {
+  const bytes = new Uint8Array(buffer);
+  let binary = '';
+  for (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+
+async function importRsaPublicKey(spkiBytes) {
+  return window.crypto.subtle.importKey('spki', spkiBytes, { name: 'RSA-OAEP', hash: 'SHA-256' }, false, ['encrypt']);
+}
+
+async function rsaOaepEncrypt(publicKey, dataBytes) {
+  const encrypted = await window.crypto.subtle.encrypt({ name: 'RSA-OAEP' }, publicKey, dataBytes);
+  return new Uint8Array(encrypted);
+}
+
+async function importAesKey(keyBytes) {
+  return window.crypto.subtle.importKey('raw', keyBytes, { name: 'AES-GCM' }, false, ['encrypt']);
+}
+
+async function aesGcmEncrypt(aesKey, ivBytes, dataBytes) {
+  const ct = await window.crypto.subtle.encrypt({ name: 'AES-GCM', iv: ivBytes }, aesKey, dataBytes);
+  return new Uint8Array(ct);
+}
+
+let needCaptcha = false;
+
+async function loadCaptcha() {
+  const csrftoken = getCookie('csrftoken');
+  const resp = await fetch('/accounts/captcha/', { method: 'GET', credentials: 'same-origin', headers: { 'X-CSRFToken': csrftoken || '' } });
+  const data = await resp.json();
+  if (resp.ok && data.ok) {
+    const img = document.getElementById('captchaImg');
+    const box = document.getElementById('captchaBox');
+    img.src = 'data:image/png;base64,' + data.image_b64;
+    box.style.display = 'block';
+  }
+}
+
+document.getElementById('loginForm').addEventListener('submit', async (e) => {
+  e.preventDefault();
+  const errorEl = document.getElementById('error');
+  errorEl.textContent = '';
+
+  const username = document.getElementById('username').value.trim();
+  const password = document.getElementById('password').value;
+  if (!username || !password) { errorEl.textContent = '请输入账户与密码'; return; }
+
+  const btn = document.getElementById('loginBtn');
+  btn.disabled = true;
+
+  try {
+    const csrftoken = getCookie('csrftoken');
+    const pkResp = await fetch('/accounts/pubkey/', { method: 'GET', credentials: 'same-origin', headers: { 'X-CSRFToken': csrftoken || '' } });
+    if (!pkResp.ok) throw new Error('获取公钥失败');
+    const pkJson = await pkResp.json();
+    const spkiBytes = new Uint8Array(base64ToArrayBuffer(pkJson.public_key_spki));
+    const pubKey = await importRsaPublicKey(spkiBytes);
+
+    const aesKeyRaw = new Uint8Array(32); window.crypto.getRandomValues(aesKeyRaw);
+    const encAesKey = await rsaOaepEncrypt(pubKey, aesKeyRaw);
+    const encAesKeyB64 = arrayBufferToBase64(encAesKey);
+
+    const setKeyResp = await fetch('/accounts/session-key/', {
+      method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json', 'X-CSRFToken': csrftoken || '' }, body: JSON.stringify({ encrypted_key: encAesKeyB64 })
+    });
+    const setKeySnapshot = await (async () => {
+      const clone = setKeyResp.clone();
+      const txt = await clone.text();
+      let parsed = null;
+      try { parsed = await setKeyResp.json(); } catch (_) {}
+      return { txt, parsed };
+    })();
+    if (!setKeySnapshot.parsed) {
+      const msg = (setKeySnapshot.txt || '').trim();
+      const mapped = msg.toLowerCase().includes('decrypt error') ? '会话密钥解密失败，请刷新页面后重试' : (msg || '设置会话密钥失败');
+      throw new Error(mapped);
+    }
+    const setKeyJson = setKeySnapshot.parsed;
+    if (!setKeyResp.ok || !setKeyJson.ok) throw new Error(setKeyJson.message || '设置会话密钥失败');
+
+    const aesKey = await importAesKey(aesKeyRaw);
+    const iv = new Uint8Array(12); window.crypto.getRandomValues(iv);
+    const obj = { username, password };
+    if (needCaptcha) obj.captcha = (document.getElementById('captcha').value || '').trim();
+    const payload = new TextEncoder().encode(JSON.stringify(obj));
+    const ct = await aesGcmEncrypt(aesKey, iv, payload);
+    const ctB64 = arrayBufferToBase64(ct);
+    const ivB64 = arrayBufferToBase64(iv);
+
+    const submitResp = await fetch('/accounts/login/secure-submit/', {
+      method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json', 'X-CSRFToken': csrftoken || '' }, body: JSON.stringify({ iv: ivB64, ciphertext: ctB64 })
+    });
+    const submitSnapshot = await (async () => {
+      const clone = submitResp.clone();
+      const txt = await clone.text();
+      let parsed = null;
+      try { parsed = await submitResp.json(); } catch (_) {}
+      return { txt, parsed };
+    })();
+    if (!submitSnapshot.parsed) {
+      const msg = (submitSnapshot.txt || '').trim();
+      const mapped = msg.toLowerCase().includes('decrypt error') ? '解密失败，请刷新页面后重试' : (msg || '服务器响应异常');
+      throw new Error(mapped);
+    }
+    const submitJson = submitSnapshot.parsed;
+    if (!submitResp.ok || !submitJson.ok) {
+      if (submitJson && submitJson.captcha_required) { needCaptcha = true; await loadCaptcha(); }
+      throw new Error(submitJson.message || '登录失败');
+    }
+    window.location.href = submitJson.redirect_url;
+  } catch (err) {
+    console.error(err);
+    errorEl.textContent = err.message || '发生错误';
+  } finally {
+    btn.disabled = false;
+  }
+});
+
+document.getElementById('refreshCaptcha').addEventListener('click', async () => {
+  needCaptcha = true;
+  await loadCaptcha();
+});

accounts/templates/accounts/login.html

@@ -0,0 +1,53 @@
+{% load static %}
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>安全登录</title>
+    <link rel="preload" href="{% static 'accounts/login.js' %}" as="script">
+    <style>
+        body { font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif; background: #f5f6fa; }
+        .container { max-width: 360px; margin: 12vh auto; padding: 24px; background: #fff; border-radius: 10px; box-shadow: 0 8px 24px rgba(0,0,0,0.08); }
+        h1 { font-size: 20px; margin: 0 0 16px; }
+        label { display: block; margin: 12px 0 6px; color: #333; }
+        input { width: 100%; padding: 10px 0px; border: 1px solid #dcdde1; border-radius: 6px; }
+        button { width: 100%; margin-top: 16px; padding: 10px 12px; background: #2d8cf0; color: #fff; border: none; border-radius: 6px; cursor: pointer; }
+        button:disabled { background: #9bbcf0; cursor: not-allowed; }
+        .error { color: #d93025; margin-top: 10px; min-height: 20px; }
+        .hint { color: #888; font-size: 12px; margin-top: 10px; }
+    </style>
+</head>
+<body>
+<div class="container">
+    <h1>登录到系统</h1>
+    <form id="loginForm">
+        {% csrf_token %}
+        <label for="username">账户</label>
+        <input id="username" name="username" type="text" autocomplete="username" required />
+
+        <label for="password">密码</label>
+        <input id="password" name="password" type="password" autocomplete="current-password" required />
+
+        <div id="captchaBox" style="display:none; margin-top:12px;">
+          <label for="captcha">验证码</label>
+          <div style="display:flex; gap:8px; align-items:center;">
+            <input id="captcha" name="captcha" type="text" autocomplete="off" style="flex:1;" />
+            <img id="captchaImg" alt="验证码" style="height:40px; border:1px solid #dcdde1; border-radius:6px;" />
+            <button id="refreshCaptcha" type="button" style="width:auto;">刷新</button>
+          </div>
+        </div>
+
+        <button id="loginBtn" type="submit">登录</button>
+        <div id="error" class="error"></div>
+    </form>
+    <div class="hint" style="text-align:center; margin-top:12px;">
+      还没有账号？
+      <a href="/accounts/register/" style="color:#2d8cf0; text-decoration:none;">去注册</a>
+    </div>
+</div>
+
+<script src="{% static 'accounts/login.js' %}"></script>
+</body>
+</html>

accounts/templates/accounts/register.html

@@ -0,0 +1,82 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8">
+  <title>用户注册</title>
+  <style>
+    body { font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif; background: #f5f6fa; }
+    .container { max-width: 400px; margin: 10vh auto; padding: 24px; background: #fff; border-radius: 10px; box-shadow: 0 8px 24px rgba(0,0,0,0.08); }
+    h1 { font-size: 20px; margin: 0 0 16px; }
+    label { display:block; margin: 12px 0 6px; color:#333; }
+    input { width:100%; padding:10px 0px; border:1px solid #dcdde1; border-radius:6px; }
+    button { width:100%; margin-top:16px; padding:10px 12px; background:#2d8cf0; color:#fff; border:none; border-radius:6px; cursor:pointer; }
+    button:disabled { background:#9bbcf0; cursor:not-allowed; }
+    .error { color:#d93025; margin-top:10px; min-height:20px; }
+    .hint { color:#888; font-size:12px; margin-top:10px; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>注册新用户</h1>
+    <form id="regForm">
+      {% csrf_token %}
+      <label for="code">注册码（选填）</label>
+      <input id="code" name="code" type="text" />
+      <label for="email">邮箱</label>
+      <input id="email" name="email" type="email" required />
+      <button id="sendCodeBtn" type="button">发送验证码</button>
+      <div id="sendMsg" class="hint"></div>
+      <label for="email_code">邮箱验证码</label>
+      <input id="email_code" name="email_code" type="text" required />
+      <label for="username">用户名</label>
+      <input id="username" name="username" type="text" required />
+      <label for="password">密码</label>
+      <input id="password" name="password" type="password" required />
+      <label for="confirm">确认密码</label>
+      <input id="confirm" name="confirm" type="password" required />
+      <button id="regBtn" type="submit">注册</button>
+      <div id="error" class="error"></div>
+    </form>
+    <div class="hint">有注册码请填写，否则可留空</div>
+  </div>
+  <script>
+    function getCookie(name){const v=`; ${document.cookie}`;const p=v.split(`; ${name}=`);if(p.length===2) return p.pop().split(';').shift();}
+    document.getElementById('regForm').addEventListener('submit',async(e)=>{
+      e.preventDefault();
+      const err=document.getElementById('error'); err.textContent='';
+      const code=(document.getElementById('code').value||'').trim();
+      const email=(document.getElementById('email').value||'').trim();
+      const username=(document.getElementById('username').value||'').trim();
+      const email_code=(document.getElementById('email_code').value||'').trim();
+      const password=document.getElementById('password').value||'';
+      const confirm=document.getElementById('confirm').value||'';
+      if(!email||!email_code||!username||!password){err.textContent='请填写所有必填字段';return;}
+      if(password!==confirm){err.textContent='两次密码不一致';return;}
+      const btn=document.getElementById('regBtn'); btn.disabled=true;
+      try{
+        const csrftoken=getCookie('csrftoken');
+        const resp=await fetch('/accounts/register/submit/',{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json','X-CSRFToken':csrftoken||''},body:JSON.stringify({code,email,email_code,username,password})});
+        const data=await resp.json();
+        if(!resp.ok||!data.ok){throw new Error(data.message||'注册失败');}
+        window.location.href=data.redirect_url;
+      }catch(e){err.textContent=e.message||'发生错误';}
+      finally{btn.disabled=false;}
+    });
+    document.getElementById('sendCodeBtn').addEventListener('click',async()=>{
+      const email=(document.getElementById('email').value||'').trim();
+      const msg=document.getElementById('sendMsg');
+      msg.textContent='';
+      if(!email){msg.textContent='请输入邮箱';return;}
+      const btn=document.getElementById('sendCodeBtn'); btn.disabled=true;
+      try{
+        const csrftoken=getCookie('csrftoken');
+        const resp=await fetch('/accounts/email/send-code/',{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json','X-CSRFToken':csrftoken||''},body:JSON.stringify({email})});
+        const data=await resp.json();
+        if(!resp.ok||!data.ok){throw new Error(data.message||'发送失败');}
+        msg.textContent='验证码已发送，请查收邮件';
+      }catch(e){msg.textContent=e.message||'发送失败';}
+      finally{btn.disabled=false;}
+    });
+  </script>
+</body>
+</html>

accounts/urls.py

@@ -0,0 +1,15 @@
+from django.urls import path
+from . import views
+app_name = "accounts"
+
+urlpatterns = [
+    path("login/", views.login_page, name="login"),
+    path("pubkey/", views.pubkey, name="pubkey"),
+    path("captcha/", views.captcha, name="captcha"),
+    path("session-key/", views.set_session_key, name="set_session_key"),
+    path("login/secure-submit/", views.secure_login_submit, name="secure_login_submit"),
+    path("logout/", views.logout, name="logout"),
+    path("register/", views.register_page, name="register"),
+    path("register/submit/", views.register_submit, name="register_submit"),
+    path("email/send-code/", views.send_email_code, name="send_email_code"),
+]

accounts/views.py

@@ -0,0 +1,301 @@
+import base64
+import json
+import os
+import io
+import random
+import string
+import time
+import smtplib
+
+from django.http import JsonResponse, HttpResponseBadRequest
+from django.shortcuts import render, redirect
+from django.views.decorators.http import require_http_methods
+from django.views.decorators.csrf import csrf_protect, ensure_csrf_cookie
+from django.conf import settings
+
+from .es_client import get_user_by_username
+from .crypto import get_public_key_spki_b64, rsa_oaep_decrypt_b64, aes_gcm_decrypt_b64, verify_password, generate_rsa_private_pem_b64, public_spki_b64_from_private_pem_b64, rsa_oaep_decrypt_b64_with_private_pem
+from elastic.es_connect import get_registration_code, get_user_by_username as es_get_user_by_username, get_all_users as es_get_all_users, write_user_data
+
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def login_page(request):
+    return render(request, "accounts/login.html")
+
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def pubkey(request):
+    pem_b64 = request.session.get("rsa_private_pem_b64")
+    if not pem_b64:
+        pem_b64 = generate_rsa_private_pem_b64()
+        request.session["rsa_private_pem_b64"] = pem_b64
+    pk_b64 = public_spki_b64_from_private_pem_b64(pem_b64)
+    return JsonResponse({"public_key_spki": pk_b64})
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def captcha(request):
+    try:
+        from captcha.image import ImageCaptcha
+    except Exception:
+        return JsonResponse({"ok": False, "message": "captcha unavailable"}, status=500)
+    code = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(5))
+    request.session["captcha_code"] = code
+    img = ImageCaptcha(width=160, height=60)
+    image = img.generate_image(code)
+    buf = io.BytesIO()
+    image.save(buf, format="PNG")
+    b64 = base64.b64encode(buf.getvalue()).decode("ascii")
+    return JsonResponse({"ok": True, "image_b64": b64})
+
+
+@require_http_methods(["POST"])
+@csrf_protect
+def set_session_key(request):
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except json.JSONDecodeError:
+        return HttpResponseBadRequest("Invalid JSON")
+    enc_key_b64 = payload.get("encrypted_key", "")
+    if not enc_key_b64:
+        return HttpResponseBadRequest("Missing fields")
+    try:
+        pem_b64 = request.session.get("rsa_private_pem_b64")
+        if not pem_b64:
+            return HttpResponseBadRequest("Decrypt error")
+        key_bytes = rsa_oaep_decrypt_b64_with_private_pem(pem_b64, enc_key_b64)
+    except Exception:
+        return HttpResponseBadRequest("Decrypt error")
+    request.session["session_enc_key_b64"] = base64.b64encode(key_bytes).decode("ascii")
+    return JsonResponse({"ok": True})
+
+@require_http_methods(["POST"])
+@csrf_protect
+def secure_login_submit(request):
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except json.JSONDecodeError:
+        return HttpResponseBadRequest("Invalid JSON")
+    iv_b64 = payload.get("iv", "")
+    ct_b64 = payload.get("ciphertext", "")
+    if not iv_b64 or not ct_b64:
+        return HttpResponseBadRequest("Missing fields")
+    key_b64 = request.session.get("session_enc_key_b64")
+    if not key_b64:
+        return HttpResponseBadRequest("Session key missing")
+    try:
+        key_bytes = base64.b64decode(key_b64)
+        pt = aes_gcm_decrypt_b64(key_bytes, iv_b64, ct_b64)
+        obj = json.loads(pt.decode("utf-8"))
+    except Exception:
+        return HttpResponseBadRequest("Decrypt error")
+    username = (obj.get("username") or "").strip()
+    password = (obj.get("password") or "")
+    if not username or not password:
+        return HttpResponseBadRequest("Missing credentials")
+    if bool(request.session.get("login_failed_once")):
+        ans = (obj.get("captcha") or "").strip()
+        code = request.session.get("captcha_code")
+        if not ans or not code or ans.lower() != str(code).lower():
+            return JsonResponse({"ok": False, "message": "验证码错误", "captcha_required": True}, status=401)
+    user = get_user_by_username(username)
+    if not user:
+        request.session["login_failed_once"] = True
+        return JsonResponse({"ok": False, "message": "用户不存在", "captcha_required": True}, status=401)
+    if not verify_password(password, user.get("password_salt") or "", user.get("password_hash") or ""):
+        request.session["login_failed_once"] = True
+        return JsonResponse({"ok": False, "message": "账户或密码错误", "captcha_required": True}, status=401)
+    try:
+        request.session.cycle_key()
+    except Exception:
+        pass
+    request.session["user_id"] = user["user_id"]
+    request.session["username"] = user["username"]
+    try:
+        request.session["permission"] = int(user["permission"]) if user.get("permission") is not None else 1
+    except Exception:
+        request.session["permission"] = 1
+    if "session_enc_key_b64" in request.session:
+        del request.session["session_enc_key_b64"]
+    if "rsa_private_pem_b64" in request.session:
+        del request.session["rsa_private_pem_b64"]
+    if "login_failed_once" in request.session:
+        del request.session["login_failed_once"]
+    if "captcha_code" in request.session:
+        del request.session["captcha_code"]
+    return JsonResponse({"ok": True, "redirect_url": f"/main/home/?user_id={user['user_id']}"})
+
+
+@require_http_methods(["GET"])
+def home(request):
+    # Minimal placeholder page per requirement
+    # Ensure user_id is passed via query and session contains id
+    user_id = request.GET.get("user_id")
+    session_user_id = request.session.get("user_id")
+    context = {
+        "user_id": user_id or session_user_id,
+    }
+    return render(request, "accounts/home.html", context)
+
+
+@require_http_methods(["POST"])
+@csrf_protect
+def logout(request):
+    # Flush the session to clear all data and rotate the key
+    try:
+        request.session.flush()
+    except Exception:
+        pass
+
+    # Return a response that also deletes cookies client-side
+    resp = JsonResponse({"ok": True, "redirect_url": "/accounts/login/"})
+    try:
+        # Delete session cookie
+        resp.delete_cookie(
+            settings.SESSION_COOKIE_NAME,
+            path='/',
+            samesite=settings.SESSION_COOKIE_SAMESITE,
+            secure=settings.SESSION_COOKIE_SECURE,
+        )
+        # Optionally delete CSRF cookie to satisfy "清除cookie" 的要求
+        resp.delete_cookie(
+            settings.CSRF_COOKIE_NAME,
+            path='/',
+            samesite=settings.CSRF_COOKIE_SAMESITE,
+            secure=settings.CSRF_COOKIE_SECURE,
+        )
+    except Exception:
+        pass
+
+    return resp
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def register_page(request):
+    return render(request, "accounts/register.html")
+
+@require_http_methods(["POST"])
+@csrf_protect
+def register_submit(request):
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except json.JSONDecodeError:
+        return HttpResponseBadRequest("Invalid JSON")
+    code = (payload.get("code") or "").strip()
+    email = (payload.get("email") or "").strip()
+    email_code = (payload.get("email_code") or "").strip()
+    username = (payload.get("username") or "").strip()
+    password = (payload.get("password") or "")
+    if not email or not email_code or not username or not password:
+        return HttpResponseBadRequest("Missing fields")
+    v = request.session.get("email_verify") or {}
+    if (v.get("email") or "") != email:
+        return JsonResponse({"ok": False, "message": "请先验证邮箱"}, status=400)
+    try:
+        exp_ts = int(v.get("expires_at") or 0)
+    except Exception:
+        exp_ts = 0
+    if exp_ts < int(time.time()):
+        return JsonResponse({"ok": False, "message": "验证码已过期"}, status=400)
+    if (v.get("code") or "") != email_code:
+        return JsonResponse({"ok": False, "message": "邮箱验证码错误"}, status=400)
+    rc = None
+    if code:
+        rc = get_registration_code(code)
+        if not rc:
+            return JsonResponse({"ok": False, "message": "注册码无效"}, status=400)
+        try:
+            exp = rc.get("expires_at")
+            now = __import__("datetime").datetime.now(__import__("datetime").timezone.utc)
+            if hasattr(exp, 'isoformat'):
+                exp_dt = exp
+            else:
+                exp_dt = __import__("datetime").datetime.fromisoformat(str(exp))
+            if exp_dt <= now:
+                return JsonResponse({"ok": False, "message": "注册码已过期"}, status=400)
+        except Exception:
+            pass
+    existing = es_get_user_by_username(username)
+    if existing:
+        return JsonResponse({"ok": False, "message": "用户名已存在"}, status=409)
+    users = es_get_all_users()
+    next_id = (max([int(u.get("user_id", 0)) for u in users]) + 1) if users else 1
+    ok = write_user_data({
+        "user_id": next_id,
+        "username": username,
+        "password": password,
+        "permission": 1,
+        "email": email,
+        "key": (rc.get("keys") if rc else []) or [],
+        "manage_key": (rc.get("manage_keys") if rc else []) or [],
+    })
+    if not ok:
+        return JsonResponse({"ok": False, "message": "注册失败"}, status=500)
+    try:
+        if "email_verify" in request.session:
+            del request.session["email_verify"]
+    except Exception:
+        pass
+    return JsonResponse({"ok": True, "redirect_url": "/accounts/login/"})
+
+@require_http_methods(["POST"])
+@csrf_protect
+def send_email_code(request):
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except json.JSONDecodeError:
+        return HttpResponseBadRequest("Invalid JSON")
+    email = (payload.get("email") or "").strip()
+    if not email:
+        return HttpResponseBadRequest("Missing email")
+    if "@" not in email:
+        return JsonResponse({"ok": False, "message": "邮箱格式不正确"}, status=400)
+    verify_code = "".join(random.choice(string.digits) for _ in range(6))
+    ttl = int(os.environ.get("SMTP_CODE_TTL", "600") or 600)
+    request.session["email_verify"] = {"email": email, "code": verify_code, "expires_at": int(time.time()) + max(60, ttl)}
+    ok, msg = _send_smtp_email(email, verify_code)
+    if not ok:
+        return JsonResponse({"ok": False, "message": msg or "验证码发送失败"}, status=500)
+    return JsonResponse({"ok": True})
+
+def _send_smtp_email(to_email: str, code: str):
+    host = os.environ.get("SMTP_HOST", "")
+    port_raw = os.environ.get("SMTP_PORT", "")
+    try:
+        port = int(port_raw) if port_raw else 0
+    except Exception:
+        port = 0
+    user = os.environ.get("SMTP_USERNAME") or os.environ.get("SMTP_USER") or ""
+    password = os.environ.get("SMTP_PASSWORD", "")
+    use_tls = str(os.environ.get("SMTP_USE_TLS", "")).lower() in ("1", "true", "yes")
+    use_ssl = str(os.environ.get("SMTP_USE_SSL", "")).lower() in ("1", "true", "yes")
+    sender = os.environ.get("SMTP_FROM_EMAIL") or os.environ.get("SMTP_FROM") or user or ""
+    subject = os.environ.get("SMTP_SUBJECT") or "邮箱验证码"
+    if not host or not port or not sender:
+        return False, "缺少SMTP配置"
+    body = f"您的验证码是：{code}，10分钟内有效。"
+    msg = f"From: {sender}\r\nTo: {to_email}\r\nSubject: {subject}\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n{body}"
+    try:
+        if use_ssl:
+            server = smtplib.SMTP_SSL(host, port)
+        else:
+            server = smtplib.SMTP(host, port)
+        server.ehlo()
+        if use_tls and not use_ssl:
+            server.starttls()
+            server.ehlo()
+        if user and password:
+            server.login(user, password)
+        server.sendmail(sender, [to_email], msg.encode("utf-8"))
+        try:
+            server.quit()
+        except Exception:
+            try:
+                server.close()
+            except Exception:
+                pass
+        return True, ""
+    except Exception as e:
+        return False, str(e)

app.py

@@ -1,405 +0,0 @@
-import base64
-from flask import Flask, request, render_template, redirect, url_for, jsonify
-import os
-import uuid
-from PIL import Image
-import re
-import json
-from ESConnect import *
-from json_converter import json_to_string, string_to_json
-from openai import OpenAI
-# import config
-
-# 创建Flask应用实例
-app = Flask(__name__)
-# app.config.from_object(config.Config)
-
-# OCR和信息提取函数，使用大模型API处理图片并提取结构化信息
-def ocr_and_extract_info(image_path):
-    """
-    使用大模型API进行OCR识别并提取图片中的结构化信息
-    
-    参数:
-        image_path (str): 图片文件路径
-        
-    返回:
-        dict: 包含提取信息的字典，格式为 {'id': '', 'name': '', 'students': '', 'teacher': ''}
-    """
-    def encode_image(image_path):
-        """
-        将图片编码为base64格式
-        
-        参数:
-            image_path (str): 图片文件路径
-            
-        返回:
-            str: base64编码的图片字符串
-        """
-        with open(image_path, "rb") as image_file:
-            return base64.b64encode(image_file.read()).decode('utf-8')
-
-    # 将图片转换为base64编码
-    base64_image = encode_image(image_path)
-
-    # 初始化OpenAI客户端，使用百度AI Studio的API
-    client = OpenAI(
-        api_key="188f57db3766e02ed2c7e18373996d84f4112272",
-        # 含有 AI Studio 访问令牌的环境变量，https://aistudio.baidu.com/account/accessToken,
-        base_url="https://aistudio.baidu.com/llm/lmapi/v3",  # aistudio 大模型 api 服务域名
-    )
-
-    # 调用大模型API进行图片识别和信息提取
-    chat_completion = client.chat.completions.create(
-        messages=[
-            {'role': 'system', 'content': '你是一个能理解图片和文本的助手，请根据用户提供的信息进行回答。'},
-            {'role': 'user', "content": [
-                {"type": "text", "text": "请识别这张图片中的信息，将你认为重要的数据转换为不包含嵌套的json，不要显示其它信息以便于解析"
-                                         "直接输出json结果即可"
-                                         "你可以自行决定使用哪些json字段"},
-                {
-                    "type": "image_url",
-                    "image_url": {
-                        "url": f"data:image/png;base64,{base64_image}"
-                    }
-                }
-            ]}
-        ],
-        model="ernie-4.5-turbo-vl-32k",  # 使用百度文心大模型
-    )
-
-    # 获取API返回的文本内容
-    response_text = chat_completion.choices[0].message.content
-    
-    # 添加调试信息：输出模型返回的原始字符串
-    print("=" * 50)
-    print("模型返回的原始字符串:")
-    print(response_text)
-    print("=" * 50)
-
-    def parse_respound(text):
-        """
-        解析API返回的文本，提取JSON数据
-        
-        参数:
-            text (str): API返回的文本
-            
-        返回:
-            dict or None: 解析成功返回字典，失败返回None
-        """
-        # 尝试直接解析标准JSON
-        try:
-            result=json.loads(text)
-            if result:
-                print("✓ 成功解析标准JSON格式")
-                return result
-        except json.JSONDecodeError:
-            print("✗ 无法解析标准JSON格式")
-            pass
-
-        # 提取markdown代码块中的内容
-        code_block = re.search(r'```json\n(.*?)```', text, re.DOTALL)
-        if code_block:
-            try:
-                result=json.loads(code_block.group(1))
-                if result:
-                    print("✓ 成功解析markdown代码块中的JSON")
-                    return result
-            except json.JSONDecodeError:
-                print("✗ 无法解析markdown代码块中的JSON")
-                pass
-
-        # 尝试替换单引号并解析
-        try:
-            fixed_json = text.replace("'", "\"")
-            result=json.loads(fixed_json)
-            if(result):
-                print("✓ 成功解析替换单引号后的JSON")
-                return result
-        except json.JSONDecodeError:
-            print("✗ 无法解析替换单引号后的JSON")
-            pass
-
-    # 解析API返回的文本
-    result_data = parse_respound(response_text)
-    
-    # 添加调试信息：输出解析结果
-    print("解析结果:")
-    if result_data:
-        print(f"✓ 解析成功: {result_data}")
-    else:
-        print("✗ 解析失败，返回None")
-    print("=" * 50)
-    
-    return result_data
-
-    """
-    模拟大模型识别图像并返回结构化JSON。
-    实际应调用Qwen-VL或其他OCR+解析服务。
-    """
-
-
-# 首页路由
-@app.route('/')
-def index():
-    """
-    渲染首页模板
-    
-    返回:
-        str: 渲染后的HTML页面
-    """
-    return render_template('index.html')
-
-# 图片上传路由
-@app.route('/upload', methods=['POST'])
-def upload_image():
-    """
-    处理图片上传请求，调用OCR识别并存储结果
-    
-    返回:
-        JSON: 上传成功或失败的响应
-    """
-    # 获取上传的文件
-    file = request.files.get('file')
-    if not file:
-        return jsonify({"error": "No file uploaded"}), 400
-
-    # 保存上传的图片
-    filename = f"{uuid.uuid4()}_{file.filename}"
-    image_path = os.path.join("image", filename)
-    file.save(image_path)
-
-    # 调用大模型进行识别
-    try:
-        print(f"开始处理图片: {image_path}")
-        original_data = ocr_and_extract_info(image_path)  # 获取原始JSON数据
-        if original_data:
-            # 使用json_converter将JSON数据转换为字符串
-            data_string = json_to_string(original_data)
-            print(f"转换后的数据字符串: {data_string}")
-            
-            # 构造新的数据结构，只包含data和image字段
-            processed_data = {
-                "data": data_string,
-                "image": filename  # 存储图片文件名
-            }
-            print(f"准备存储的数据: {processed_data}")
-            
-            insert_data(processed_data)  # 存入ES
-            print("✓ 数据成功存储到Elasticsearch")
-            return jsonify({"message": "成功录入", "data": original_data, "processed": processed_data})
-        else:
-            print("✗ 无法识别图片内容")
-            return jsonify({"error": "无法识别图片内容"}), 400
-    except Exception as e:
-        print(f"✗ 处理过程中发生错误: {str(e)}")
-        return jsonify({"error": str(e)}), 500
-
-# 搜索路由
-@app.route('/search')
-def search():
-    """
-    处理搜索请求，从Elasticsearch中检索匹配的数据
-    
-    返回:
-        JSON: 搜索结果列表
-    """
-    keyword = request.args.get('q')
-    if not keyword:
-        return jsonify([])
-    results = search_by_any_field(keyword)
-    
-    # 处理搜索结果，将data字段转换回JSON格式
-    processed_results = []
-    for result in results:
-        if '_source' in result and 'data' in result['_source']:
-            try:
-                # 将data字段的字符串转换回JSON
-                original_data = string_to_json(result['_source']['data'])
-                # 构造新的结果格式
-                processed_result = {
-                    '_id': result.get('_id', ''),
-                    '_source': {
-                        'image': result['_source'].get('image', ''),
-                        **original_data  # 展开原始数据字段
-                    }
-                }
-                processed_results.append(processed_result)
-            except Exception as e:
-                # 如果转换失败，保持原始格式
-                processed_results.append(result)
-        else:
-            processed_results.append(result)
-    
-    print(processed_results)
-    return jsonify(processed_results)
-
-# 结果页面路由
-@app.route('/results')
-def results_page():
-    """
-    渲染搜索结果页面
-    
-    返回:
-        str: 渲染后的HTML页面
-    """
-    return render_template('results.html')
-
-# 显示所有数据路由
-@app.route('/all')
-def show_all():
-    """
-    获取所有数据并渲染到页面
-    
-    返回:
-        str: 渲染后的HTML页面，包含所有数据
-    """
-    all_data = search_all()
-    # 将data字段从字符串转换回JSON格式以便显示
-    processed_data = []
-    for item in all_data:
-        if 'data' in item and item['data']:
-            try:
-                # 将data字段的字符串转换回JSON
-                original_data = string_to_json(item['data'])
-                # 合并原始数据和其他字段
-                display_item = {
-                    '_id': item['_id'],
-                    'image': item.get('image', ''),
-                    **original_data  # 展开原始数据字段
-                }
-                processed_data.append(display_item)
-            except Exception as e:
-                # 如果转换失败，保持原始格式
-                processed_data.append(item)
-        else:
-            processed_data.append(item)
-    
-    return render_template('all.html', data=processed_data)
-
-# 编辑数据页面路由
-@app.route('/edit/<doc_id>')
-def edit_entry(doc_id):
-    """
-    渲染编辑页面
-    
-    参数:
-        doc_id (str): 要编辑的文档ID
-        
-    返回:
-        str: 渲染后的编辑页面或错误信息
-    """
-    # 获取要编辑的文档数据
-    document = get_by_id(doc_id)
-    if not document:
-        return "文档不存在", 404
-    
-    # 保持原始数据格式，不进行JSON转换
-    # 直接传递包含data字段的原始文档
-    return render_template('edit.html', document=document)
-
-# 更新数据路由
-@app.route('/update/<doc_id>', methods=['POST'])
-def update_entry(doc_id):
-    """
-    处理数据更新请求
-    
-    参数:
-        doc_id (str): 要更新的文档ID
-        
-    返回:
-        重定向到所有数据页面或错误信息
-    """
-    # 获取原文档的图片信息
-    original_doc = get_by_id(doc_id)
-    if not original_doc:
-        return "文档不存在", 404
-    
-    # 从表单中获取所有字段数据
-    data_parts = []
-    i = 1
-    while True:
-        key_name = request.form.get(f'key_{i}')
-        field_value = request.form.get(f'field_{i}')
-        
-        if not key_name or not field_value:
-            break
-        
-        # 处理字段值（如果是列表格式，用|##|分隔）
-        if ',' in field_value:
-            # 如果是逗号分隔的值，转换为列表格式
-            items = [item.strip() for item in field_value.split(',') if item.strip()]
-            if len(items) > 1:
-                field_value = f"[{'|##|'.join(items)}]"
-        
-        data_parts.append(f"{key_name}:{field_value}")
-        i += 1
-    
-    # 验证是否有数据
-    if not data_parts:
-        return "没有可更新的数据", 400
-    
-    # 构建新的数据字符串
-    data_value = "|###|".join(data_parts)
-    
-    # 构造更新数据
-    updated_data = {
-        'data': data_value,
-        'image': original_doc.get('image', '')  # 保持原图片
-    }
-    
-    # 更新文档
-    if update_by_id(doc_id, updated_data):
-        return redirect(url_for('show_all'))
-    else:
-        return "更新失败", 500
-
-# 删除数据路由
-@app.route('/delete/<doc_id>', methods=['POST'])
-def delete_entry(doc_id):
-    """
-    根据文档ID删除数据
-    
-    参数:
-        doc_id (str): 要删除的文档ID
-        
-    返回:
-        重定向到所有数据页面或错误信息
-    """
-    if delete_by_id(doc_id):
-        return redirect(url_for('show_all'))
-    else:
-        return "删除失败", 500
-
-
-
-# 提供图片访问的路由
-@app.route('/image/<filename>')
-def serve_image(filename):
-    """
-    提供image目录下图片的访问服务
-    
-    参数:
-        filename (str): 图片文件名
-        
-    返回:
-        图片文件或404错误
-    """
-    import os
-    from flask import send_from_directory
-    
-    # 确保文件存在
-    image_dir = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'image')
-    if not os.path.exists(os.path.join(image_dir, filename)):
-        return "图片不存在", 404
-    
-    # 发送图片文件
-    return send_from_directory(image_dir, filename)
-
-# 主程序入口
-if __name__ == '__main__':
-    # 创建Elasticsearch索引
-    create_index_with_mapping()  
-    # 创建图片存储目录
-    os.makedirs("image", exist_ok=True)
-    # 启动Flask应用
-    app.run(use_reloader=False)

elastic/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

elastic/apps.py

@@ -0,0 +1,24 @@
+from django.apps import AppConfig
+import os
+import sys
+
+class ElasticConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "elastic"
+
+    def ready(self):
+        # 避免在 migrate、collectstatic 等管理命令中执行
+        if os.environ.get('RUN_MAIN') != 'true':
+            # Django 开发服务器会启动两个进程，只在主进程执行
+            return
+
+        # 避免在 manage.py 命令（除 runserver 外）中执行
+        if 'runserver' not in sys.argv:
+            return
+
+        # 延迟导入，避免循环导入或过早加载
+        from .es_connect import create_index_with_mapping
+        try:
+            create_index_with_mapping()
+        except Exception as e:
+            print(f"❌ ES 初始化失败: {e}")

elastic/documents.py

@@ -0,0 +1,67 @@
+from django_elasticsearch_dsl import Document, fields, Index
+from .models import AchievementData, User, ElasticNews
+from .indexes import *
+
+ACHIEVEMENT_INDEX = Index(ACHIEVEMENT_INDEX_NAME)
+ACHIEVEMENT_INDEX.settings(number_of_shards=1, number_of_replicas=0)
+USER_INDEX = Index(USER_INDEX_NAME)
+USER_INDEX.settings(number_of_shards=1, number_of_replicas=0)
+GLOBAL_INDEX = Index(GLOBAL_INDEX_NAME)
+GLOBAL_INDEX.settings(number_of_shards=1, number_of_replicas=0)
+
+
+
+@ACHIEVEMENT_INDEX.doc_type
+class AchievementDocument(Document):
+    """获奖数据文档映射"""
+    writer_id = fields.TextField(fields={'keyword': {'type': 'keyword'}})
+    time = fields.DateField()
+    
+    data = fields.TextField(
+        analyzer='ik_max_word',
+        search_analyzer='ik_smart',
+        fields={'keyword': {'type': 'keyword'}}
+    )
+    image = fields.KeywordField()
+    
+    class Django:
+        model = AchievementData
+        # fields列表应该只包含需要特殊处理的字段，或者可以完全省略
+        # 因为我们已经显式定义了所有字段
+
+@USER_INDEX.doc_type
+class UserDocument(Document):
+    """用户数据文档映射"""
+    user_id = fields.LongField()
+    username = fields.KeywordField()
+    email = fields.KeywordField()
+    password_hash = fields.KeywordField()
+    password_salt = fields.KeywordField()
+    permission = fields.IntegerField()    # 还是2种权限，0为管理员，1为用户（区别在于0有全部权限，1在数据管理页面有搜索框，但是索引到的录入信息要根据其用户id查询其key，若其中之一与用户的manage_key字段匹配就显示否则不显示）
+    key = fields.KeywordField(multi=True)           #表示该用户的关键字，举个例子：学生A的key为"2024届人工智能1班","2024届"，"计算机与人工智能学院" 班导师B的key为"计算机与人工智能学院"
+    manage_key = fields.KeywordField(multi=True)    #表示该用户管理的关键字（非管理员）班导师B的manage_key为"2024届人工智能1班"
+    #那么学生A就可以在数据管理页面搜索到自己的获奖数据，而班导师B就可以在数据管理页面搜索到所有人工智能1班的获奖数据。也就是说学生A和班导师B都其实只有用户权限
+
+    class Django:
+        model = User
+        # fields列表应该只包含需要特殊处理的字段，或者可以完全省略
+        # 因为我们已经显式定义了所有字段
+
+@GLOBAL_INDEX.doc_type
+class GlobalDocument(Document):
+    type_list = fields.KeywordField()
+    keys_list = fields.KeywordField(multi=True)
+
+    class Django:
+        model = ElasticNews
+
+@GLOBAL_INDEX.doc_type
+class RegistrationCodeDocument(Document):
+    code = fields.KeywordField() #具体值
+    keys = fields.KeywordField(multi=True) #对应的key
+    manage_keys = fields.KeywordField(multi=True) #对应的manage_key
+    created_at = fields.DateField() #创建时间
+    expires_at = fields.DateField() #过期时间
+    created_by = fields.LongField() #创建者id
+    class Django:
+        model = ElasticNews

elastic/es_connect.py

@@ -0,0 +1,800 @@
+"""
+Django版本的ES连接和操作模块
+迁移自Flask项目的ESConnect.py
+"""
+from elasticsearch import Elasticsearch
+from elasticsearch_dsl import connections
+import os
+from .documents import AchievementDocument, UserDocument, GlobalDocument, RegistrationCodeDocument
+from accounts.crypto import hash_password_random_salt
+from .indexes import ACHIEVEMENT_INDEX_NAME, USER_INDEX_NAME, GLOBAL_INDEX_NAME
+import hashlib
+import time
+from datetime import datetime, timezone, timedelta
+import uuid
+import json
+
+# 使用环境变量配置ES连接，默认为本机
+_ES_URL = os.environ.get('ELASTICSEARCH_URL', 'http://localhost:9200')
+if not (_ES_URL.startswith('http://') or _ES_URL.startswith('https://')):
+    _ES_URL = 'http://' + _ES_URL
+connections.create_connection(hosts=[_ES_URL])
+
+# 获取默认的ES客户端
+es = connections.get_connection()
+
+DATA_INDEX_NAME = ACHIEVEMENT_INDEX_NAME
+USERS_INDEX_NAME = USER_INDEX_NAME
+GLOBAL_TYPES_INDEX_NAME = GLOBAL_INDEX_NAME
+
+def create_index_with_mapping():
+    """创建索引和映射配置（仅当索引不存在时）"""
+    # 获取 Elasticsearch 客户端（与 Document 使用的客户端一致）
+    try:
+        # --- 1. 处理获奖数据索引 ---
+        if not es.indices.exists(index=DATA_INDEX_NAME):
+            AchievementDocument.init()
+            print(f"✅ 创建索引 {DATA_INDEX_NAME} 并设置映射")
+        else:
+            print(f"ℹ️ 索引 {DATA_INDEX_NAME} 已存在，跳过创建")
+
+        # --- 2. 处理用户索引 ---
+        if not es.indices.exists(index=USERS_INDEX_NAME):
+            UserDocument.init()
+            print(f"✅ 创建索引 {USERS_INDEX_NAME} 并设置映射")
+        else:
+            print(f"ℹ️ 索引 {USERS_INDEX_NAME} 已存在，跳过创建")
+
+        # --- 3. 处理全局类型索引 ---
+        if not es.indices.exists(index=GLOBAL_TYPES_INDEX_NAME):
+            GlobalDocument.init()
+            default_types = ['软著', '专利', '奖状']
+            doc = GlobalDocument(type_list=default_types)
+            doc.meta.id = 'types'
+            doc.save()
+            print(f"✅ 创建索引 {GLOBAL_TYPES_INDEX_NAME} 并写入默认类型")
+        else:
+            try:
+                GlobalDocument.get(id='types')
+            except Exception:
+                default_types = ['软著', '专利', '奖状']
+                doc = GlobalDocument(type_list=default_types)
+                doc.meta.id = 'types'
+                doc.save()
+                print("ℹ️ 全局类型文档缺失，已补充默认类型")
+
+        # --- 4. 创建默认管理员用户（可选：也可检查用户是否已存在）---
+        # 这里简单处理：每次初始化都写入（可能重复），建议加唯一性判断
+        _salt_b64, _hash_b64 = hash_password_random_salt("admin")
+        admin_user = {
+            "user_id": 0,
+            "username": "admin",
+            "password_hash": _hash_b64,
+            "password_salt": _salt_b64,
+            "permission": 0
+        }
+        # 可选：检查 admin 是否已存在（根据 user_id 或 username）
+        from elasticsearch_dsl import Search
+        s = Search(using=es, index=USERS_INDEX_NAME).query("match", username="admin")
+        if s.count() == 0:
+            write_user_data(admin_user)
+            print("✅ 默认管理员用户已创建")
+        else:
+            print("ℹ️ 默认管理员用户已存在，跳过创建")
+
+    except Exception as e:
+        print(f"❌ 创建索引失败: {str(e)}")
+        # raise  # 可选：在 AppConfig 中捕获，这里可以 re-raise 便于调试
+
+def get_type_list():
+    try:
+        doc = GlobalDocument.get(id='types')
+        lst = [str(t).strip().strip(';') for t in (doc.type_list or [])]
+        return lst
+    except Exception:
+        return ['软著', '专利', '奖状']
+
+def ensure_type_in_list(type_name: str):
+    if not type_name:
+        return False
+    norm = str(type_name).strip().strip(';')
+    try:
+        try:
+            doc = GlobalDocument.get(id='types')
+            cur = list(doc.type_list or [])
+        except Exception:
+            cur = ['软著', '专利', '奖状']
+            doc = GlobalDocument(type_list=cur)
+            doc.meta.id = 'types'
+        cur_sanitized = {str(t).strip().strip(';') for t in cur}
+        if norm not in cur_sanitized:
+            cur.append(norm)
+            doc.type_list = cur
+            doc.save()
+            return True
+        return False
+    except Exception:
+        return False
+
+def get_keys_list():
+    try:
+        try:
+            doc = GlobalDocument.get(id='keys')
+            cur = list(doc.keys_list or [])
+        except Exception:
+            cur = []
+            doc = GlobalDocument(keys_list=cur)
+            doc.meta.id = 'keys'
+            doc.save()
+        return [str(t).strip().strip(';') for t in cur]
+    except Exception:
+        return []
+
+def ensure_key_in_list(key_name: str):
+    if not key_name:
+        return False
+    norm = str(key_name).strip().strip(';')
+    try:
+        try:
+            doc = GlobalDocument.get(id='keys')
+            cur = list(doc.keys_list or [])
+        except Exception:
+            cur = []
+            doc = GlobalDocument(keys_list=cur)
+            doc.meta.id = 'keys'
+        cur_sanitized = {str(t).strip().strip(';') for t in cur}
+        if norm not in cur_sanitized:
+            cur.append(norm)
+            doc.keys_list = cur
+            doc.save()
+            return True
+        return False
+    except Exception:
+        return False
+
+def generate_registration_code(keys=None, manage_keys=None, expires_in_days: int = 30, created_by: int = None):
+    try:
+        keys = list(keys or [])
+        manage_keys = list(manage_keys or [])
+        for k in list(keys):
+            ensure_key_in_list(k)
+        for mk in list(manage_keys):
+            ensure_key_in_list(mk)
+        code = uuid.uuid4().hex + str(int(time.time()))[-6:]
+        now = datetime.now(timezone.utc)
+        expires = now + timedelta(days=max(1, int(expires_in_days or 30)))
+        doc = RegistrationCodeDocument(
+            code=code,
+            keys=keys,
+            manage_keys=manage_keys,
+            created_at=now.isoformat(),
+            expires_at=expires.isoformat(),
+            created_by=created_by,
+        )
+        doc.meta.id = code
+        doc.save()
+        return {
+            "code": code,
+            "keys": keys,
+            "manage_keys": manage_keys,
+            "created_at": now.isoformat(),
+            "expires_at": expires.isoformat(),
+        }
+    except Exception as e:
+        return None
+
+def get_registration_code(code: str):
+    try:
+        doc = RegistrationCodeDocument.get(id=str(code))
+        return {
+            "code": getattr(doc, 'code', str(code)),
+            "keys": list(getattr(doc, 'keys', []) or []),
+            "manage_keys": list(getattr(doc, 'manage_keys', []) or []),
+            "created_at": getattr(doc, 'created_at', None),
+            "expires_at": getattr(doc, 'expires_at', None),
+            "created_by": getattr(doc, 'created_by', None),
+        }
+    except Exception:
+        return None
+
+def list_registration_codes():
+    try:
+        search = RegistrationCodeDocument.search()
+        body = {
+            "sort": [{"created_at": {"order": "desc"}}],
+            "query": {"exists": {"field": "code"}}
+        }
+        search = search.update_from_dict(body)
+        resp = search.execute()
+        out = []
+        now = datetime.now(timezone.utc)
+        for hit in resp:
+            try:
+                if not getattr(hit, 'code', None):
+                    continue
+            except Exception:
+                continue
+            exp = getattr(hit, 'expires_at', None)
+            try:
+                if hasattr(exp, 'isoformat'):
+                    exp_dt = exp
+                else:
+                    exp_dt = datetime.fromisoformat(str(exp))
+            except Exception:
+                exp_dt = None
+            active = bool(exp_dt and exp_dt > now)
+            out.append({
+                "code": getattr(hit, 'code', ''),
+                "keys": list(getattr(hit, 'keys', []) or []),
+                "manage_keys": list(getattr(hit, 'manage_keys', []) or []),
+                "created_at": getattr(hit, 'created_at', None),
+                "expires_at": getattr(hit, 'expires_at', None),
+                "created_by": getattr(hit, 'created_by', None),
+                "active": active,
+            })
+        return out
+    except Exception:
+        return []
+
+def revoke_registration_code(code: str):
+    try:
+        doc = RegistrationCodeDocument.get(id=str(code))
+        now = datetime.now(timezone.utc).isoformat()
+        doc.expires_at = now
+        doc.save()
+        return True
+    except Exception:
+        return False
+
+def get_doc_id(data):
+    """
+    根据数据内容生成唯一ID（用于去重）
+    
+    参数:
+        data (dict): 包含文档数据的字典
+        
+    返回:
+        str: 基于数据内容生成的MD5哈希值作为唯一ID
+    """
+    data_str = data.get('data', '')
+    image_str = data.get('image', '')
+    unique_str = f"{data_str}{image_str}"
+    return hashlib.md5(unique_str.encode('utf-8')).hexdigest()
+
+def insert_data(data):
+    """
+    向Elasticsearch插入数据
+    
+    参数:
+        data (dict): 要插入的数据
+        
+    返回:
+        bool: 插入成功返回True，失败返回False
+    """
+    try:
+        achievement = AchievementDocument(
+            writer_id=data.get('writer_id', ''),
+            data=data.get('data', ''),
+            image=data.get('image', ''),
+            time=datetime.now(timezone.utc).isoformat()
+        )
+        achievement.save()
+        print(f"文档写入成功，内容: {data}")
+        return True
+    except Exception as e:
+        print(f"文档写入失败: {str(e)}, 数据: {data}")
+        return False
+
+def search_data(query):
+    """
+    在Elasticsearch中搜索数据
+    
+    参数:
+        query (str): 搜索关键词
+        
+    返回:
+        list: 包含搜索结果的列表
+    """
+    try:
+        # 使用Django-elasticsearch-dsl进行搜索
+        search = AchievementDocument.search()
+        search = search.query("multi_match", query=query, fields=['*'])
+        response = search.execute()
+        
+        results = []
+        for hit in response:
+            results.append({
+                "_id": hit.meta.id,
+                "writer_id": hit.writer_id,
+                "data": hit.data,
+                "image": hit.image
+            })
+        
+        return results
+    except Exception as e:
+        print(f"搜索失败: {str(e)}")
+        return []
+
+def search_all():
+    """获取所有文档"""
+    try:
+        search = AchievementDocument.search()
+        search = search.query("match_all")
+        response = search.execute()
+        
+        results = []
+        for hit in response:
+            results.append({
+                "_id": hit.meta.id,
+                "writer_id": hit.writer_id,
+                "data": hit.data,
+                "image": hit.image
+            })
+        
+        return results
+    except Exception as e:
+        print(f"获取所有文档失败: {str(e)}")
+        return []
+
+def delete_by_id(doc_id):
+    """
+    根据 doc_id 删除文档
+    
+    参数:
+        doc_id (str): 要删除的文档ID
+        
+    返回:
+        bool: 删除成功返回True，失败返回False
+    """
+    try:
+        # 使用Django-elasticsearch-dsl删除文档
+        achievement = AchievementDocument.get(id=doc_id)
+        achievement.delete()
+        print(f"文档 {doc_id} 删除成功")
+        return True
+    except Exception as e:
+        print(f"删除失败: {str(e)}")
+        return False
+
+def update_by_id(doc_id, updated_data):
+    """
+    根据文档ID更新数据
+
+    参数:
+        doc_id (str): 要更新的文档ID
+        updated_data (dict): 更新的数据内容
+
+    返回:
+        bool: 更新成功返回True，失败返回False
+    """
+    try:
+        # 获取文档
+        achievement = AchievementDocument.get(id=doc_id)
+        print(doc_id)
+        # 更新字段
+        if 'writer_id' in updated_data:
+            achievement.writer_id = updated_data['writer_id']
+        if 'data' in updated_data:
+            achievement.data = updated_data['data']
+        if 'image' in updated_data:
+            achievement.image = updated_data['image']
+            
+        achievement.save()
+        print(f"文档 {doc_id} 更新成功")
+        return True
+    except Exception as e:
+        print(f"更新失败: {str(e)}")
+        return False
+
+def get_by_id(doc_id):
+    """
+    根据文档ID获取单个文档
+
+    参数:
+        doc_id (str): 要获取的文档ID
+
+    返回:
+        dict or None: 成功返回文档数据，失败返回None
+    """
+    try:
+        achievement = AchievementDocument.get(id=doc_id)
+        return {
+            "_id": achievement.meta.id,
+            "writer_id": achievement.writer_id,
+            "data": achievement.data,
+            "image": achievement.image
+        }
+    except Exception as e:
+        print(f"获取文档失败: {str(e)}")
+        return None
+
+def search_by_any_field(keyword):
+    """
+    在任意字段中搜索关键词（支持模糊搜索）
+    
+    参数:
+        keyword (str): 搜索关键词
+        
+    返回:
+        list: 包含搜索结果的列表
+    """
+    try:
+        search = AchievementDocument.search()
+        
+        # 使用multi_match查询，在所有字段中搜索
+        search = search.query("multi_match", 
+                             query=keyword, 
+                             fields=['*'],
+                             fuzziness="AUTO")
+        
+        response = search.execute()
+        
+        results = []
+        for hit in response:
+            results.append({
+                "_id": hit.meta.id,
+                "writer_id": hit.writer_id,
+                "data": hit.data,
+                "image": hit.image
+            })
+        
+        return results
+    except Exception as e:
+        print(f"模糊搜索失败: {str(e)}")
+        return []
+
+    
+def _type_filters_from_list(limit: int = None):
+    try:
+        types = get_type_list()
+    except Exception:
+        types = ['软著', '专利', '奖状']
+    if isinstance(limit, int) and limit > 0:
+        types = types[:limit]
+    filters = {}
+    for t in types:
+        key = str(t)
+        # 精确匹配键与值之间的关系，避免其它字段中的同名值造成误匹配
+        pattern = f'*"数据类型": "{key}"*'
+        filters[key] = {"wildcard": {"data.keyword": {"value": pattern}}}
+    return filters
+
+def analytics_trend(gte: str = None, lte: str = None, interval: str = "day"):
+    try:
+        search = AchievementDocument.search()
+        body = {
+            "size": 0,
+            "aggs": {
+                "trend": {
+                    "date_histogram": {
+                        "field": "time",
+                        "calendar_interval": interval,
+                        "min_doc_count": 0
+                    }
+                }
+            }
+        }
+        if gte or lte:
+            rng = {}
+            if gte:
+                rng["gte"] = gte
+            if lte:
+                rng["lte"] = lte
+            body["query"] = {"range": {"time": rng}}
+        search = search.update_from_dict(body)
+        resp = search.execute()
+        buckets = resp.aggregations.trend.buckets if hasattr(resp, 'aggregations') else []
+        return [{"key_as_string": b.key_as_string, "key": b.key, "doc_count": b.doc_count} for b in buckets]
+    except Exception as e:
+        print(f"分析趋势失败: {str(e)}")
+        return []
+
+def analytics_types(gte: str = None, lte: str = None, size: int = 10):
+    try:
+        filters = _type_filters_from_list(limit=size)
+        body = {
+            "size": 0,
+            "aggs": {
+                "by_type": {
+                    "filters": {
+                        "filters": filters
+                    }
+                }
+            }
+        }
+        if gte or lte:
+            rng = {}
+            if gte:
+                rng["gte"] = gte
+            if lte:
+                rng["lte"] = lte
+            body["query"] = {"range": {"time": rng}}
+        resp = es.search(index=DATA_INDEX_NAME, body=body)
+        buckets = resp.get("aggregations", {}).get("by_type", {}).get("buckets", {})
+        out = []
+        for k, v in buckets.items():
+            try:
+                out.append({"key": k, "doc_count": int(v.get("doc_count", 0))})
+            except Exception:
+                out.append({"key": str(k), "doc_count": 0})
+        return out
+    except Exception as e:
+        print(f"分析类型占比失败: {str(e)}")
+        return []
+
+def analytics_types_trend(gte: str = None, lte: str = None, interval: str = "week", size: int = 8):
+    try:
+        filters = _type_filters_from_list(limit=size)
+        body = {
+            "size": 0,
+            "aggs": {
+                "by_interval": {
+                    "date_histogram": {
+                        "field": "time",
+                        "calendar_interval": interval,
+                        "min_doc_count": 0
+                    },
+                    "aggs": {
+                        "by_type": {
+                            "filters": {"filters": filters}
+                        }
+                    }
+                }
+            }
+        }
+        if gte or lte:
+            rng = {}
+            if gte:
+                rng["gte"] = gte
+            if lte:
+                rng["lte"] = lte
+            body["query"] = {"range": {"time": rng}}
+        resp = es.search(index=DATA_INDEX_NAME, body=body)
+        by_interval = resp.get("aggregations", {}).get("by_interval", {}).get("buckets", [])
+        out = []
+        for ib in by_interval:
+            t_buckets = ib.get("by_type", {}).get("buckets", {})
+            types_arr = []
+            for k, v in t_buckets.items():
+                types_arr.append({"key": k, "doc_count": int(v.get("doc_count", 0))})
+            out.append({
+                "key_as_string": ib.get("key_as_string"),
+                "key": ib.get("key"),
+                "doc_count": ib.get("doc_count", 0),
+                "types": types_arr
+            })
+        return out
+    except Exception as e:
+        print(f"分析类型变化失败: {str(e)}")
+        return []
+
+def analytics_recent(limit: int = 10, gte: str = None, lte: str = None):
+    try:
+        def _extract_type(s: str):
+            if not s:
+                return ""
+            try:
+                obj = json.loads(s)
+                if isinstance(obj, dict):
+                    v = obj.get("数据类型")
+                    if isinstance(v, str) and v:
+                        return v
+            except Exception:
+                pass
+            try:
+                m = re.search(r'"数据类型"\s*:\s*"([^"]+)"', s)
+                if m:
+                    return m.group(1)
+            except Exception:
+                pass
+            return ""
+
+        search = AchievementDocument.search()
+        body = {
+            "size": max(1, min(limit, 100)),
+            "sort": [{"time": {"order": "desc"}}]
+        }
+        if gte or lte:
+            rng = {}
+            if gte:
+                rng["gte"] = gte
+            if lte:
+                rng["lte"] = lte
+            body["query"] = {"range": {"time": rng}}
+        search = search.update_from_dict(body)
+        resp = search.execute()
+        results = []
+        for hit in resp:
+            w = getattr(hit, 'writer_id', '')
+            uname = None
+            try:
+                uname_lookup = get_user_by_id(w)
+                uname = (uname_lookup or {}).get("username")
+            except Exception:
+                uname = None
+            if not uname:
+                try:
+                    uname_lookup = get_user_by_id(int(w))
+                    uname = (uname_lookup or {}).get("username")
+                except Exception:
+                    uname = None
+            tval = _extract_type(getattr(hit, 'data', ''))
+            results.append({
+                "_id": hit.meta.id,
+                "writer_id": w,
+                "username": uname or "",
+                "type": tval or "",
+                "time": getattr(hit, 'time', None)
+            })
+        return results
+    except Exception as e:
+        print(f"获取最近活动失败: {str(e)}")
+        return []
+
+def write_user_data(user_data):
+    """
+    写入用户数据到 ES
+    
+    参数:
+        user_data (dict): 用户数据
+        
+    返回:
+        bool: 写入成功返回True，失败返回False
+    """
+    try:
+        # enforce integer permission
+        try:
+            perm_val = int(user_data.get('permission', 1))
+        except Exception:
+            perm_val = 1
+        pwd = str(user_data.get('password') or '').strip()
+        pwd_hash_b64 = user_data.get('password_hash')
+        pwd_salt_b64 = user_data.get('password_salt')
+        if pwd:
+            salt_b64, hash_b64 = hash_password_random_salt(pwd)
+            pwd_hash_b64, pwd_salt_b64 = hash_b64, salt_b64
+        user = UserDocument(
+            user_id=user_data.get('user_id'),
+            username=user_data.get('username'),
+            password_hash=pwd_hash_b64,
+            password_salt=pwd_salt_b64,
+            permission=perm_val,
+            email=user_data.get('email'),
+            key=list(user_data.get('key') or []),
+            manage_key=list(user_data.get('manage_key') or []),
+        )
+        user.save()
+        print(f"用户数据写入成功: {user_data.get('username')}")
+        return True
+    except Exception as e:
+        print(f"用户数据写入失败: {str(e)}")
+        return False
+
+def get_user_by_id(user_id):
+    try:
+        search = UserDocument.search()
+        search = search.query("term", user_id=user_id)
+        response = search.execute()
+
+        if response.hits:
+            hit = response.hits[0]
+            return {
+                "user_id": hit.user_id,
+                "username": hit.username,
+                "permission": hit.permission
+            }
+        return None
+
+    except Exception as e:
+        print(f"获取用户数据失败: {str(e)}")
+        return None
+
+def get_user_by_username(username):
+    """
+    根据用户名获取用户数据
+    
+    参数:
+        username (str): 用户名
+        
+    返回:
+        dict or None: 用户数据或None
+    """
+    try:
+        search = UserDocument.search()
+        search = search.query("term", username=username)
+        response = search.execute()
+        
+        if response.hits:
+            hit = response.hits[0]
+            return {
+                "user_id": hit.user_id,
+                "username": hit.username,
+                "password_hash": getattr(hit, 'password_hash', None),
+                "password_salt": getattr(hit, 'password_salt', None),
+                "permission": int(hit.permission)
+            }
+        return None
+    except Exception as e:
+        print(f"获取用户数据失败: {str(e)}")
+        return None
+
+def get_all_users():
+    """获取所有用户"""
+    try:
+        search = UserDocument.search()
+        search = search.query("match_all")
+        response = search.execute()
+        
+        users = []
+        for hit in response:
+            users.append({
+                "user_id": hit.user_id,
+                "username": hit.username,
+                "permission": int(hit.permission),
+                "email": getattr(hit, 'email', None),
+                "key": list(getattr(hit, 'key', []) or []),
+                "manage_key": list(getattr(hit, 'manage_key', []) or []),
+            })
+        
+        return users
+    except Exception as e:
+        print(f"获取所有用户失败: {str(e)}")
+        return []
+
+def get_user_by_id(user_id):
+    try:
+        search = UserDocument.search()
+        search = search.query("term", user_id=int(user_id))
+        response = search.execute()
+        if response.hits:
+            hit = response.hits[0]
+            return {
+                "user_id": hit.user_id,
+                "username": hit.username,
+                "permission": int(hit.permission),
+                "email": getattr(hit, 'email', None),
+                "key": list(getattr(hit, 'key', []) or []),
+                "manage_key": list(getattr(hit, 'manage_key', []) or []),
+            }
+        return None
+    except Exception as e:
+        print(f"获取用户数据失败: {str(e)}")
+        return None
+
+def delete_user_by_id(user_id):
+    try:
+        search = UserDocument.search()
+        search = search.query("term", user_id=int(user_id))
+        response = search.execute()
+        if response.hits:
+            hit = response.hits[0]
+            doc = UserDocument.get(id=hit.meta.id)
+            doc.delete()
+            return True
+        return False
+    except Exception as e:
+        print(f"删除用户失败: {str(e)}")
+        return False
+
+def update_user_by_id(user_id, username=None, permission=None, password=None):
+    try:
+        search = UserDocument.search()
+        search = search.query("term", user_id=int(user_id))
+        response = search.execute()
+        if response.hits:
+            hit = response.hits[0]
+            doc = UserDocument.get(id=hit.meta.id)
+            if username is not None:
+                doc.username = username
+            if permission is not None:
+                doc.permission = int(permission)
+            if password is not None:
+                salt_b64, hash_b64 = hash_password_random_salt(str(password))
+                doc.password_hash = hash_b64
+                doc.password_salt = salt_b64
+            doc.save()
+            return True
+        return False
+    except Exception as e:
+        print(f"更新用户失败: {str(e)}")
+        return False

elastic/indexes.py

@@ -0,0 +1,5 @@
+INDEX_NAME = "wordsearch21"
+USER_NAME = "users16"
+ACHIEVEMENT_INDEX_NAME = INDEX_NAME
+USER_INDEX_NAME = USER_NAME
+GLOBAL_INDEX_NAME = "global11121"

elastic/models.py

@@ -0,0 +1,41 @@
+from django.db import models
+
+class AchievementData(models.Model):
+    """获奖数据模型，对应Flask项目中的wordsearch266666索引"""
+    writer_id = models.CharField(max_length=100, verbose_name="作者ID")
+    data = models.TextField(verbose_name="数据内容")
+    image = models.CharField(max_length=500, blank=True, null=True, verbose_name="图片路径")
+    created_at = models.DateTimeField(auto_now_add=True, verbose_name="创建时间")
+    updated_at = models.DateTimeField(auto_now=True, verbose_name="更新时间")
+    
+    class Meta:
+        verbose_name = "获奖数据"
+        verbose_name_plural = verbose_name
+        
+    def __str__(self):
+        return f"{self.writer_id} - {self.data[:50]}"
+
+
+class User(models.Model):
+    """用户模型，对应Flask项目中的users索引"""
+    user_id = models.BigIntegerField(unique=True, verbose_name="用户ID")
+    username = models.CharField(max_length=100, unique=True, verbose_name="用户名")
+    password = models.CharField(max_length=100, verbose_name="密码")
+    permission = models.IntegerField(default=1, verbose_name="权限级别")
+    created_at = models.DateTimeField(auto_now_add=True, verbose_name="创建时间")
+    
+    class Meta:
+        verbose_name = "用户"
+        verbose_name_plural = verbose_name
+        
+    def __str__(self):
+        return self.username
+
+# 保留原有的ElasticNews模型用于兼容
+class ElasticNews(models.Model):
+    title = models.CharField(max_length=100)
+    content = models.TextField()
+    
+    class Meta:
+        verbose_name = "新闻"
+        verbose_name_plural = verbose_name

elastic/templates/elastic/manage.html

@@ -0,0 +1,733 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <title>数据管理</title>
+    <style>
+    body{margin:0;font-family:sans-serif;background:#fafafa}
+    .sidebar{position:fixed;top:0;left:0;width:180px;height:100vh;background:#1e1e2e;color:white;padding:20px;box-shadow:2px 0 5px rgba(0,0,0,.1);z-index:1000;display:flex;flex-direction:column;align-items:center}
+    .user-id{text-align:center;margin-bottom:0}
+    .sidebar h3{margin:0;font-size:18px;color:#add8e6;text-align:center;margin-bottom:20px}
+    .navigation-links{width:100%;margin-top:60px}
+    .sidebar a,.sidebar button{display:block;color:#8be9fd;text-decoration:none;margin:10px 0;font-size:16px;padding:15px;border-radius:4px;background:transparent;border:none;cursor:pointer;width:calc(100% - 40px);text-align:left;transition:.2s}
+    .sidebar a:hover,.sidebar button:hover{color:#ff79c6;background-color:rgba(139,233,253,.2)}
+    .main-content{margin-left:200px;padding:20px;color:#333}
+    .container{max-width:1200px;margin:0 auto;background:#fff;border-radius:10px;box-shadow:0 6px 18px rgba(0,0,0,.06);padding:20px}
+    table{width:100%;border-collapse:collapse;margin-top:20px}
+    th,td{border-bottom:1px solid #eee;padding:12px 8px;text-align:left;vertical-align:top}
+    th{background:#f8f9fa;font-weight:600}
+    img{max-width:120px;border:1px solid #eee;border-radius:6px;cursor:pointer}
+    .btn{padding:6px 10px;border:none;border-radius:6px;cursor:pointer;font-size:14px;margin:2px}
+    .btn-primary{background:#1677ff;color:#fff}
+    .btn-danger{background:#ff4d4f;color:#fff}
+    .btn-secondary{background:#f0f0f0;color:#333}
+    .muted{color:#666;font-size:12px}
+    .modal{position:fixed;inset:0;display:none;background:rgba(0,0,0,.4);align-items:center;justify-content:center;z-index:1000}
+    .modal .dialog{width:720px;max-width:92vw;background:#fff;border-radius:10px;padding:20px;max-height:80vh;overflow-y:auto}
+    textarea{width:100%;min-height:240px;font-family:monospace;font-size:14px;padding:10px;border:1px solid #ddd;border-radius:4px;resize:vertical}
+    #kvForm{border:1px solid #eee;border-radius:6px;padding:8px;max-height:300px;overflow:auto}
+    .search-container{background:#f8f9fa;padding:15px;border-radius:8px;margin-bottom:20px}
+    .search-controls{display:flex;flex-wrap:wrap;gap:10px;align-items:center;margin-bottom:10px}
+    .search-input{flex:1;min-width:200px;padding:8px 12px;border:1px solid #ddd;border-radius:4px;font-size:14px}
+    .search-result{margin-top:10px;padding:10px;background:#e8f4ff;border-radius:4px;font-size:14px}
+    .search-result.empty{background:#fff8e8}
+    .search-result.error{background:#ffe8e8}
+    .loading{display:inline-block;width:20px;height:20px;border:3px solid #f3f3f3;border-top:3px solid #1677ff;border-radius:50%;animation:spin 1s linear infinite}
+    @keyframes spin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}
+    @media(max-width:768px){.search-controls{flex-direction:column;align-items:stretch}.search-input{min-width:auto}.btn{width:100%;margin:2px 0}}
+    .image-modal{display:none;position:fixed;z-index:2000;left:0;top:0;width:100%;height:100%;background:rgba(0,0,0,.9);overflow:hidden}
+    .image-modal-content{margin:auto;display:block;position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);max-width:80%;max-height:80%;object-fit:contain;border-radius:8px;box-shadow:0 10px 30px rgba(0,0,0,.5);cursor:grab;transition:transform .3s ease}
+    .image-modal-content.dragging{cursor:grabbing}
+    .image-modal-close{position:absolute;top:15px;right:35px;color:#f1f1f1;font-size:40px;font-weight:bold;transition:.3s;cursor:pointer;z-index:2001}
+    .image-modal-close:hover{color:#bbb}
+    .zoom-controls{position:absolute;bottom:30px;left:50%;transform:translateX(-50%);display:flex;gap:10px;z-index:2001}
+    .zoom-btn{background:rgba(255,255,255,.7);border:none;border-radius:50%;width:40px;height:40px;font-size:18px;cursor:pointer;display:flex;align-items:center;justify-content:center;box-shadow:0 2px 10px rgba(0,0,0,.3);transition:background .3s}
+    .zoom-btn:hover{background:rgba(255,255,255,.9)}
+    .zoom-info{position:absolute;top:15px;left:15px;color:#f1f1f1;font-size:14px;z-index:2001;background:rgba(0,0,0,.5);padding:5px 10px;border-radius:4px}
+  </style>
+</head>
+<body>
+<!-- 左侧固定栏目 -->
+<div class="sidebar">
+  <div class="user-id">
+    <h3>你好，{{ username|default:"访客" }}</h3>
+  </div>
+  <div class="navigation-links">
+    <a href="{% url 'main:home' %}">返回主页</a>
+    <a id="logoutBtn">退出登录</a>
+    <div id="logoutMsg"></div>
+    {% csrf_token %}
+  </div>
+</div>
+
+<!-- 主内容区域 -->
+<div class="main-content">
+  <div class="container">
+    <h2>数据管理</h2>
+    <p class="muted">仅管理员可见。可查看、编辑、删除所有记录。</p>
+
+    <!-- 搜索功能区域 -->
+    <div class="search-container">
+      <div class="search-controls">
+        <input type="text" id="searchQuery" class="search-input" placeholder="请输入搜索关键词...">
+        <button class="btn btn-primary" onclick="performSearch('exact')">关键词搜索</button>
+        <button class="btn btn-secondary" onclick="performSearch('fuzzy')">模糊搜索</button>
+        <button class="btn" onclick="loadAllData()">显示全部</button>
+        <button class="btn" onclick="clearSearch()">清空结果</button>
+      </div>
+
+      <div id="searchResult" class="search-result" style="display: none;">
+        <div id="searchStatus">正在搜索...</div>
+        <div id="searchCount" style="margin-top: 5px; font-weight: bold;"></div>
+      </div>
+    </div>
+
+    <!-- 数据表格 -->
+    <table id="dataTable">
+      <thead>
+        <tr>
+          <th>ID</th>
+          <th>图片</th>
+          <th>数据</th>
+          <th>录入人</th>
+          <th>操作</th>
+        </tr>
+      </thead>
+      <tbody id="tableBody">
+        <!-- 数据将通过JavaScript动态加载 -->
+      </tbody>
+    </table>
+
+    <!-- 编辑模态框 -->
+    <div id="editModal" class="modal">
+      <div class="dialog">
+        <h3>编辑数据</h3>
+        <div style="display:flex; gap:8px; align-items:center; margin-bottom:8px;">
+          <button id="addFieldBtn" class="btn btn-secondary" type="button">添加字段</button>
+          <button id="syncFromTextBtn" class="btn btn-secondary" type="button">从文本区刷新表单</button>
+          <span id="editMsg" class="muted"></span>
+        </div>
+        <div id="kvForm"></div>
+        <div style="margin-top:8px;">
+          <textarea id="resultBox" placeholder="JSON数据"></textarea>
+        </div>
+        <div style="margin-top:12px; display:flex; gap:8px;">
+          <button class="btn btn-primary" onclick="saveEdit()">保存</button>
+          <button class="btn" onclick="closeModal()">取消</button>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+
+<!-- 图片放大模态框 -->
+<div id="imageModal" class="image-modal">
+  <span class="image-modal-close">&times;</span>
+  <div class="zoom-info">缩放: <span id="zoomValue">100%</span></div>
+  <img class="image-modal-content" id="expandedImage">
+  <div class="zoom-controls">
+    <button class="zoom-btn" id="zoomOutBtn">-</button>
+    <button class="zoom-btn" id="resetZoomBtn">1:1</button>
+    <button class="zoom-btn" id="zoomInBtn">+</button>
+  </div>
+</div>
+
+<script>
+// 获取CSRF token的函数
+function getCookie(name) {
+  const value = `; ${document.cookie}`;
+  const parts = value.split(`; ${name}=`);
+  if (parts.length === 2) return parts.pop().split(';').shift();
+}
+
+// DOM元素引用
+const searchQueryInput = document.getElementById('searchQuery');
+const searchResultDiv = document.getElementById('searchResult');
+const searchStatus = document.getElementById('searchStatus');
+const searchCount = document.getElementById('searchCount');
+const tableBody = document.getElementById('tableBody');
+const editModal = document.getElementById('editModal');
+const kvForm = document.getElementById('kvForm');
+const resultBox = document.getElementById('resultBox');
+const editMsg = document.getElementById('editMsg');
+const addFieldBtn = document.getElementById('addFieldBtn');
+const syncFromTextBtn = document.getElementById('syncFromTextBtn');
+
+// 图片放大相关元素
+const imageModal = document.getElementById('imageModal');
+const expandedImage = document.getElementById('expandedImage');
+const imageModalClose = document.querySelector('.image-modal-close');
+const zoomInBtn = document.getElementById('zoomInBtn');
+const zoomOutBtn = document.getElementById('zoomOutBtn');
+const resetZoomBtn = document.getElementById('resetZoomBtn');
+const zoomValue = document.getElementById('zoomValue');
+
+// 全局变量
+let currentId = '';
+let currentWriter = '';
+let currentImage = '';
+let allDataCache = []; // 缓存所有数据，避免重复请求
+let currentSearchQuery = ''; // 记录当前搜索查询
+let isFuzzySearch = false; // 记录当前是否为模糊搜索
+let isDeleting = false; // 标记是否正在删除
+
+// 图片缩放相关变量
+let currentScale = 1;
+let currentX = 0;
+let currentY = 0;
+let isDragging = false;
+let dragStartX = 0;
+let dragStartY = 0;
+let imgStartX = 0;
+let imgStartY = 0;
+
+// 搜索功能
+async function performSearch(type) {
+  const query = searchQueryInput.value.trim();
+  if (!query) {
+    showSearchMessage('请输入搜索关键词', 'error');
+    return;
+  }
+
+  currentSearchQuery = query;
+  isFuzzySearch = type === 'fuzzy';
+  showSearchLoading();
+
+  try {
+    let url;
+    if (type === 'exact') {
+      url = `/elastic/search/?q=${encodeURIComponent(query)}`;
+    } else if (type === 'fuzzy') {
+      url = `/elastic/fuzzy-search/?keyword=${encodeURIComponent(query)}`;
+    }
+
+    const response = await fetch(url);
+    const data = await response.json();
+
+    if (data.status === 'success') {
+      displaySearchResults(data.data || []);
+    } else {
+      showSearchMessage(`搜索失败: ${data.message || '未知错误'}`, 'error');
+    }
+  } catch (error) {
+    console.error('搜索请求失败:', error);
+    showSearchMessage('搜索请求失败，请检查网络连接', 'error');
+  }
+}
+
+// 显示加载状态
+function showSearchLoading() {
+  searchResultDiv.style.display = 'block';
+  searchResultDiv.className = 'search-result';
+  searchStatus.innerHTML = '<span class="loading"></span> 正在搜索...';
+  searchCount.textContent = '';
+}
+
+// 显示搜索结果
+function displaySearchResults(results) {
+  if (results.length === 0) {
+    showSearchMessage('未找到匹配的结果', 'empty');
+    renderTable([]);
+    return;
+  }
+
+  searchResultDiv.style.display = 'block';
+  searchResultDiv.className = 'search-result';
+  searchStatus.textContent = `找到 ${results.length} 条匹配结果`;
+  searchCount.textContent = `显示 ${results.length} 条记录`;
+
+  renderTable(results);
+}
+
+// 显示搜索消息
+function showSearchMessage(message, type = '') {
+  searchResultDiv.style.display = 'block';
+  searchResultDiv.className = `search-result ${type}`;
+  searchStatus.textContent = message;
+  searchCount.textContent = '';
+}
+
+// 加载所有数据
+async function loadAllData() {
+  currentSearchQuery = '';
+  showSearchLoading();
+
+  try {
+    // 如果已有缓存，直接使用
+    if (allDataCache.length > 0) {
+      displayAllData(allDataCache);
+      return;
+    }
+
+    const response = await fetch('/elastic/all-data/');
+    const data = await response.json();
+
+    if (data.status === 'success') {
+      allDataCache = data.data || [];
+      displayAllData(allDataCache);
+    } else {
+      showSearchMessage(`加载数据失败: ${data.message || '未知错误'}`, 'error');
+    }
+  } catch (error) {
+    console.error('加载数据失败:', error);
+    showSearchMessage('加载数据失败，请检查网络连接', 'error');
+  }
+}
+
+// 显示所有数据
+function displayAllData(data) {
+  searchResultDiv.style.display = 'block';
+  searchResultDiv.className = 'search-result';
+  searchStatus.textContent = '显示全部数据';
+  searchCount.textContent = `共 ${data.length} 条记录`;
+
+  renderTable(data);
+}
+
+// 清空搜索结果
+function clearSearch() {
+  searchQueryInput.value = '';
+  searchResultDiv.style.display = 'none';
+  currentSearchQuery = '';
+
+  // 如果有缓存数据，显示全部
+  if (allDataCache.length > 0) {
+    renderTable(allDataCache);
+  } else {
+    // 否则重新加载
+    loadAllData();
+  }
+}
+
+// 渲染表格
+function renderTable(data) {
+  tableBody.innerHTML = '';
+
+  if (!data || data.length === 0) {
+    const row = document.createElement('tr');
+    row.innerHTML = '<td colspan="5" style="text-align: center; color: #999;">暂无数据</td>';
+    tableBody.appendChild(row);
+    return;
+  }
+
+  data.forEach(item => {
+    const row = document.createElement('tr');
+    row.setAttribute('data-id', item._id || item.id);
+    row.setAttribute('data-writer', item.writer_id);
+    row.setAttribute('data-image', item.image);
+
+    // 解析data字段，如果是JSON字符串则格式化显示
+    let displayData = item.data || '';
+    try {
+      const parsed = JSON.parse(item.data);
+      displayData = JSON.stringify(parsed, null, 2);
+    } catch (e) {
+      // 如果不是JSON，直接显示原字符串
+    }
+
+    row.innerHTML = `
+      <td style="max-width:140px; word-break:break-all; font-size: 12px;">${item._id || item.id || ''}</td>
+      <td>
+        ${item.image ? `<img src="/media/${item.image}" onerror="this.src=''; this.alt='图片加载失败'" class="clickable-image" data-image="/media/${item.image}" />` : '无图片'}
+      </td>
+      <td>
+        <pre style="white-space:pre-wrap; word-wrap:break-word; max-height: 100px; overflow-y: auto; font-size: 12px; margin: 0;">${escapeHtml(displayData)}</pre>
+      </td>
+      <td style="font-size: 12px;">${item.writer_id || ''}</td>
+      <td>
+        <button class="btn btn-primary" onclick="openEdit('${item._id || item.id}')">编辑</button>
+        <button class="btn btn-danger" onclick="doDelete('${item._id || item.id}')">删除</button>
+      </td>
+    `;
+    tableBody.appendChild(row);
+  });
+}
+
+// 转义HTML以防止XSS
+function escapeHtml(unsafe) {
+  return unsafe
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#039;");
+}
+
+// 编辑功能相关
+function createRow(k = '', v = '') {
+  const row = document.createElement('div');
+  row.style.display = 'grid';
+  row.style.gridTemplateColumns = '1fr 1fr auto';
+  row.style.gap = '8px';
+  row.style.marginBottom = '6px';
+
+  const kI = document.createElement('input');
+  kI.type='text';
+  kI.placeholder='字段名';
+  kI.value=k;
+
+  const vI = document.createElement('input');
+  vI.type='text';
+  vI.placeholder='字段值';
+  vI.value = typeof v==='object'? JSON.stringify(v): (v??'');
+
+  const del = document.createElement('button');
+  del.type='button';
+  del.className='btn';
+  del.textContent='删除';
+  del.onclick=()=>{
+    if (kvForm.children.length > 1) { // 至少保留一行
+      kvForm.removeChild(row);
+      syncTextarea();
+    } else {
+      kI.value = '';
+      vI.value = '';
+      syncTextarea();
+    }
+  };
+
+  kI.oninput = syncTextarea;
+  vI.oninput = syncTextarea;
+
+  row.appendChild(kI);
+  row.appendChild(vI);
+  row.appendChild(del);
+  return row;
+}
+
+function renderForm(obj){
+  kvForm.innerHTML='';
+  Object.keys(obj||{}).forEach(k=> kvForm.appendChild(createRow(k, obj[k])));
+  if (!kvForm.children.length) kvForm.appendChild(createRow());
+  syncTextarea();
+}
+
+function formToObject(){
+  const o={};
+  Array.from(kvForm.children).forEach(row=>{
+    const [kI,vI] = row.querySelectorAll('input');
+    const k=(kI.value||'').trim(); if(!k) return;
+    const raw=vI.value;
+    try{
+      o[k]=JSON.parse(raw);
+    }catch(_){
+      o[k]=raw;
+    }
+  });
+  return o;
+}
+
+function syncTextarea(){
+  try {
+    resultBox.value = JSON.stringify(formToObject(), null, 2);
+  } catch (e) {
+    resultBox.value = '{}';
+  }
+}
+
+// 事件绑定
+addFieldBtn.onclick = ()=>{
+  kvForm.appendChild(createRow());
+  syncTextarea();
+};
+
+syncFromTextBtn.onclick = ()=>{
+  try{
+    const obj = JSON.parse(resultBox.value||'{}');
+    renderForm(obj);
+    editMsg.textContent = '已从文本区刷新表单';
+    setTimeout(() => editMsg.textContent = '', 2000);
+  }catch(e){
+    editMsg.textContent = 'JSON格式无效';
+  }
+};
+
+function openEdit(id){
+  const tr = document.querySelector(`tr[data-id="${id}"]`);
+  currentId = id;
+  currentWriter = tr?.getAttribute('data-writer') || '';
+  currentImage = tr?.getAttribute('data-image') || '';
+
+  fetch(`/elastic/data/${id}/`, { credentials:'same-origin' })
+    .then(r=>r.json()).then(d=>{
+      if(d.status!=='success') throw new Error(d.message || '获取失败');
+      const rec=d.data||{};
+      const dataStr = rec.data || '{}';
+      let obj={};
+      try{
+        obj = typeof dataStr==='string'? JSON.parse(dataStr): (dataStr||{});
+      }catch(_){
+        obj={};
+      }
+      renderForm(obj);
+      editModal.style.display='flex';
+    }).catch(e=>{
+      alert(e.message||'获取数据失败');
+    });
+}
+
+function closeModal(){
+  editModal.style.display='none';
+  currentId='';
+}
+
+async function saveEdit(){
+  const body = {
+    writer_id: currentWriter,
+    data: resultBox.value, // 直接使用textarea中的值
+    image: currentImage,
+  };
+
+  try {
+    const response = await fetch(`/elastic/data/${currentId}/update/`, {
+      method:'PUT',
+      credentials:'same-origin',
+      headers:{
+        'Content-Type':'application/json',
+        'X-CSRFToken': getCookie('csrftoken')||''
+      },
+      body: JSON.stringify(body),
+    });
+
+    const data = await response.json();
+    if(data.status!=='success') throw new Error(data.message || '保存失败');
+
+    alert('保存成功');
+    closeModal();
+    // 重新加载数据以显示更新
+    if (currentSearchQuery) {
+      // 如果当前显示的是搜索结果，重新执行搜索
+      performSearch(isFuzzySearch ? 'fuzzy' : 'exact');
+    } else {
+      loadAllData();
+    }
+  } catch (e) {
+    editMsg.textContent = e.message||'保存失败';
+  }
+}
+
+async function doDelete(id){
+  if (isDeleting) {
+    alert('正在处理删除操作，请稍候...');
+    return;
+  }
+
+  if(!confirm('确认删除该记录？此操作不可撤销')) return;
+
+  isDeleting = true;
+  const deleteButton = document.querySelector(`button[onclick="doDelete('${id}')"]`);
+  if (deleteButton) {
+    deleteButton.disabled = true;
+    deleteButton.textContent = '删除中...';
+  }
+
+  try {
+    const response = await fetch(`/elastic/data/${id}/delete/`, {
+      method:'DELETE',
+      credentials:'same-origin',
+      headers:{ 'X-CSRFToken': getCookie('csrftoken')||'' }
+    });
+
+    const data = await response.json();
+    if(data.status!=='success') throw new Error(data.message || '删除失败');
+
+    alert('删除成功');
+    // 清空缓存，确保下次加载获取最新数据
+    allDataCache = [];
+
+    // 根据当前显示状态重新加载数据
+    if (currentSearchQuery) {
+      // 如果当前显示的是搜索结果，重新执行搜索
+      performSearch(isFuzzySearch ? 'fuzzy' : 'exact');
+    } else {
+      // 修复：重新加载所有数据时，强制刷新缓存
+      const response = await fetch('/elastic/all-data/');
+      const data = await response.json();
+      if (data.status === 'success') {
+        allDataCache = data.data || [];
+        displayAllData(allDataCache);
+      } else {
+        showSearchMessage(`加载数据失败: ${data.message || '未知错误'}`, 'error');
+      }
+    }
+  } catch (e) {
+    alert(e.message||'删除失败');
+  } finally {
+    isDeleting = false;
+    if (deleteButton) {
+      deleteButton.disabled = false;
+      deleteButton.textContent = '删除';
+    }
+  }
+}
+
+// 页面加载时自动加载所有数据
+document.addEventListener('DOMContentLoaded', function() {
+  loadAllData();
+});
+
+// 退出登录处理
+document.getElementById('logoutBtn').addEventListener('click', async () => {
+  const msg = document.getElementById('logoutMsg');
+  msg.textContent = '';
+  const csrftoken = getCookie('csrftoken');
+  try {
+    const resp = await fetch('/accounts/logout/', {
+      method: 'POST',
+      credentials: 'same-origin',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-CSRFToken': csrftoken || ''
+      },
+      body: JSON.stringify({})
+    });
+    const data = await resp.json();
+    if (!resp.ok || !data.ok) {
+      throw new Error('登出失败');
+    }
+    document.cookie = 'sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+    document.cookie = 'csrftoken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+    window.location.href = data.redirect_url;
+  } catch (e) {
+    msg.textContent = e.message || '发生错误';
+  }
+});
+
+// 图片缩放功能
+function updateZoom() {
+  expandedImage.style.transform = `translate(-50%, -50%) scale(${currentScale}) translate(${currentX}px, ${currentY}px)`;
+  zoomValue.textContent = `${Math.round(currentScale * 100)}%`;
+}
+
+function resetZoom() {
+  currentScale = 1;
+  currentX = 0;
+  currentY = 0;
+  updateZoom();
+}
+
+function zoomIn() {
+  currentScale *= 1.2;
+  updateZoom();
+}
+
+function zoomOut() {
+  currentScale /= 1.2;
+  if (currentScale < 0.1) currentScale = 0.1; // 最小缩放限制
+  updateZoom();
+}
+
+// 图片放大功能
+document.addEventListener('DOMContentLoaded', function() {
+  // 为所有图片添加点击事件监听器
+  document.addEventListener('click', function(e) {
+    if (e.target.classList.contains('clickable-image')) {
+      const imgSrc = e.target.src;
+      expandedImage.src = imgSrc;
+      imageModal.style.display = 'block';
+
+      // 重置缩放状态
+      resetZoom();
+    }
+  });
+
+  // 点击关闭按钮关闭模态框
+  imageModalClose.onclick = function() {
+    imageModal.style.display = 'none';
+  }
+
+  // 点击模态框外部区域关闭模态框
+  window.onclick = function(event) {
+    if (event.target === imageModal) {
+      imageModal.style.display = 'none';
+    }
+  }
+
+  // 缩放按钮事件
+  zoomInBtn.addEventListener('click', zoomIn);
+  zoomOutBtn.addEventListener('click', zoomOut);
+  resetZoomBtn.addEventListener('click', resetZoom);
+
+  // 鼠标滚轮缩放
+  expandedImage.addEventListener('wheel', function(e) {
+    e.preventDefault();
+
+    if (e.deltaY < 0) {
+      zoomIn();
+    } else {
+      zoomOut();
+    }
+  });
+
+  // 拖拽功能
+  expandedImage.addEventListener('mousedown', function(e) {
+    isDragging = true;
+    dragStartX = e.clientX;
+    dragStartY = e.clientY;
+    imgStartX = currentX;
+    imgStartY = currentY;
+    expandedImage.classList.add('dragging');
+  });
+
+  document.addEventListener('mousemove', function(e) {
+    if (isDragging) {
+      const deltaX = e.clientX - dragStartX;
+      const deltaY = e.clientY - dragStartY;
+      currentX = imgStartX + deltaX / currentScale;
+      currentY = imgStartY + deltaY / currentScale;
+      updateZoom();
+    }
+  });
+
+  document.addEventListener('mouseup', function() {
+    isDragging = false;
+    expandedImage.classList.remove('dragging');
+  });
+
+  // 触摸事件支持（移动端）
+  expandedImage.addEventListener('touchstart', function(e) {
+    if (e.touches.length === 1) {
+      isDragging = true;
+      dragStartX = e.touches[0].clientX;
+      dragStartY = e.touches[0].clientY;
+      imgStartX = currentX;
+      imgStartY = currentY;
+    } else if (e.touches.length === 2) {
+      // 双指缩放
+      initialDistance = getDistance(e.touches[0], e.touches[1]);
+      initialScale = currentScale;
+    }
+  });
+
+  document.addEventListener('touchmove', function(e) {
+    e.preventDefault();
+    if (isDragging && e.touches.length === 1) {
+      const deltaX = e.touches[0].clientX - dragStartX;
+      const deltaY = e.touches[0].clientY - dragStartY;
+      currentX = imgStartX + deltaX / currentScale;
+      currentY = imgStartY + deltaY / currentScale;
+      updateZoom();
+    } else if (e.touches.length === 2) {
+      // 双指缩放
+      const currentDistance = getDistance(e.touches[0], e.touches[1]);
+      const scale = (currentDistance / initialDistance) * initialScale;
+      currentScale = Math.max(0.1, Math.min(scale, 10)); // 限制缩放范围
+      updateZoom();
+    }
+  });
+
+  document.addEventListener('touchend', function() {
+    isDragging = false;
+  });
+
+  // 计算两点间距离
+  function getDistance(touch1, touch2) {
+    return Math.sqrt(
+      Math.pow(touch2.clientX - touch1.clientX, 2) +
+      Math.pow(touch2.clientY - touch1.clientY, 2)
+    );
+  }
+});
+</script>
+</body>
+</html>

elastic/templates/elastic/registration_codes.html

@@ -0,0 +1,341 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <title>注册码管理</title>
+  <style>
+    body { margin:0; font-family: system-ui,-apple-system, Segoe UI, Roboto, sans-serif; background:#fafafa; }
+    .sidebar { position:fixed; top:0; left:0; width:180px; height:100vh; background:#1e1e2e; color:#fff; padding:20px; box-shadow:2px 0 5px rgba(0,0,0,0.1); z-index:1000; display:flex; flex-direction:column; align-items:center; }
+    .sidebar h3 { margin:0; font-size:18px; color:#add8e6; text-align:center;  margin-bottom: 20px; }
+    .navigation-links { width:100%; margin-top:60px; }
+    .sidebar a, .sidebar button { display:block; color:#8be9fd; text-decoration:none; margin:10px 0; font-size:16px; padding:15px; border-radius:4px; background:transparent; border:none; cursor:pointer; width:calc(100% - 40px); text-align:left; transition:all .2s ease; }
+    .sidebar a:hover, .sidebar button:hover { color:#ff79c6; background-color:rgba(139,233,253,.2); }
+    .main { margin-left:200px; padding:20px; color:#333; }
+    .card { background:#fff; border-radius:14px; box-shadow:0 10px 24px rgba(31,35,40,.08); padding:20px; margin-bottom:20px; }
+    .row { display:flex; gap:16px; }
+    .col { flex:1; }
+    label { display:block; margin-bottom:6px; font-weight:600; }
+    input[type=text], input[type=number], select { width:100%; padding:8px 12px; border:1px solid #d1d5db; border-radius:6px; box-sizing:border-box; }
+    .btn { padding:8px 12px; border:none; border-radius:8px; cursor:pointer; margin:0 4px; }
+    .btn-primary { background:#4f46e5; color:#fff; }
+    .btn-secondary { background:#64748b; color:#fff; }
+    .notice { padding:10px; border-radius:6px; margin-top:10px; display:none; }
+    .notice.success { background:#d4edda; color:#155724; border:1px solid #c3e6cb; }
+    .notice.error { background:#f8d7da; color:#721c24; border:1px solid #f5c6cb; }
+    .code-box { font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace; padding:12px; border:1px solid #e5e7eb; border-radius:8px; background:#fafafa; margin-top:10px; }
+    .overlay { position:fixed; inset:0; background:rgba(0,0,0,0.25); display:flex; align-items:center; justify-content:center; z-index:2000; }
+    .spinner { width:42px; height:42px; border:4px solid #cbd5e1; border-top-color:#4f46e5; border-radius:50%; animation:spin 0.8s linear infinite; }
+    @keyframes spin { to { transform: rotate(360deg); } }
+    .fade-in { animation: fadeUp 0.25s ease-out; }
+    @keyframes fadeUp { from { opacity:0; transform: translateY(6px); } to { opacity:1; transform: translateY(0); } }
+    table tr:hover { background-color:#f3f4f6; transition: background-color 0.2s ease; }
+    .btn { transition: transform 0.1s ease, box-shadow 0.2s ease; }
+    .btn:hover { transform: translateY(-1px); box-shadow:0 6px 16px rgba(31,35,40,0.12); }
+  </style>
+  {% csrf_token %}
+  <script>
+    function getCookie(name){const v=`; ${document.cookie}`;const p=v.split(`; ${name}=`);if(p.length===2) return p.pop().split(';').shift();}
+    async function loadKeys(){
+      const resp=await fetch('/elastic/registration-codes/keys/');
+      const data=await resp.json();
+      const opts=(data.data||[]);
+      const keySel=document.getElementById('keys');
+      const mkeySel=document.getElementById('manageKeys');
+      keySel.innerHTML=''; mkeySel.innerHTML='';
+      opts.forEach(k=>{
+        const o=document.createElement('option'); o.value=k; o.textContent=k; keySel.appendChild(o);
+        const o2=document.createElement('option'); o2.value=k; o2.textContent=k; mkeySel.appendChild(o2);
+      });
+    }
+    async function addKey(){
+      const keyName=(document.getElementById('newKey').value||'').trim();
+      if(!keyName) return;
+      const csrftoken=getCookie('csrftoken');
+      const resp=await fetch('/elastic/registration-codes/keys/add/',{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json','X-CSRFToken':csrftoken||''},body:JSON.stringify({key:keyName})});
+      const data=await resp.json();
+      const msg=document.getElementById('msg');
+      if(resp.ok && data.status==='success'){msg.textContent='新增key成功'; msg.className='notice success'; msg.style.display='block'; document.getElementById('newKey').value=''; loadKeys();}
+      else{msg.textContent=data.message||'新增失败'; msg.className='notice error'; msg.style.display='block';}
+    }
+    function selectedValues(sel){return Array.from(sel.selectedOptions).map(o=>o.value);}    
+    function enableToggleSelect(sel){ sel.addEventListener('mousedown',function(e){ if(e.target && e.target.tagName==='OPTION'){ e.preventDefault(); const op=e.target; op.selected=!op.selected; this.dispatchEvent(new Event('change',{bubbles:true})); } }); }
+    function clearSelection(id){ const sel=document.getElementById(id); Array.from(sel.options).forEach(o=>o.selected=false); }
+    async function generateCode(){
+      const ov=document.getElementById('overlay'); ov.style.display='flex';
+      const csrftoken=getCookie('csrftoken');
+      const keys=selectedValues(document.getElementById('keys'));
+      const manageKeys=selectedValues(document.getElementById('manageKeys'));
+      const mode=document.getElementById('expireMode').value;
+      let days=30; if(mode==='month') days=30; else if(mode==='fouryears') days=1460; else { const d=parseInt(document.getElementById('customDays').value||'30'); days=isNaN(d)?30:Math.max(1,d);} 
+      const resp=await fetch('/elastic/registration-codes/generate/',{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json','X-CSRFToken':csrftoken||''},body:JSON.stringify({keys,manage_keys:manageKeys,expires_in_days:days})});
+      const data=await resp.json();
+      const out=document.getElementById('codeOut');
+      const msg=document.getElementById('msg');
+      if(resp.ok && data.status==='success'){out.textContent=data.data.code; msg.textContent='生成成功'; msg.className='notice success'; msg.style.display='block';}
+      else{msg.textContent=data.message||'生成失败'; msg.className='notice error'; msg.style.display='block';}
+      ov.style.display='none';
+    }
+    async function loadCodes(){
+      const ov=document.getElementById('overlay'); ov.style.display='flex';
+      const resp=await fetch('/elastic/registration-codes/list/');
+      const data=await resp.json();
+      const tbody=document.getElementById('codesBody');
+      if(!tbody) return;
+      tbody.innerHTML='';
+      if(resp.ok && data.status==='success'){
+        (data.data||[]).forEach(it=>{
+          const tr=document.createElement('tr');
+          const status = it.active? '有效' : '失效';
+          const ka = Array.isArray(it.keys)? it.keys.join('、') : '';
+          const mka = Array.isArray(it.manage_keys)? it.manage_keys.join('、') : '';
+          tr.innerHTML = `<td>${it.code||''}</td><td>${ka}</td><td>${mka}</td><td>${formatDate(it.created_at)}</td><td>${formatDate(it.expires_at)}</td><td>${status}</td><td>${it.active? '<button class=\"btn btn-secondary\" data-code=\"'+it.code+'\">作废</button>':''}</td>`;
+          tbody.appendChild(tr);
+        });
+      }
+      ov.style.display='none';
+    }
+    function formatDate(t){ if(!t) return ''; try{ const d = new Date(t); if(String(d)!='Invalid Date'){ const p=n=>String(n).padStart(2,'0'); return `${d.getFullYear()}-${p(d.getMonth()+1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;} }catch(e){} return ''; }
+    async function revokeCode(code){ const csrftoken=getCookie('csrftoken'); const resp=await fetch('/elastic/registration-codes/revoke/',{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json','X-CSRFToken':csrftoken||''},body:JSON.stringify({code})}); const msg=document.getElementById('msg'); const data=await resp.json(); if(resp.ok && data.status==='success'){ msg.textContent='已作废'; msg.className='notice success'; msg.style.display='block'; loadCodes(); } else { msg.textContent=data.message||'作废失败'; msg.className='notice error'; msg.style.display='block'; } }
+    document.addEventListener('click',function(e){ const btn=e.target; if(btn && btn.matches('button[data-code]')){ revokeCode(btn.getAttribute('data-code')); }});
+    document.addEventListener('DOMContentLoaded',()=>{loadKeys(); enableToggleSelect(document.getElementById('keys')); enableToggleSelect(document.getElementById('manageKeys')); loadCodes();});
+  </script>
+</head>
+<body>
+  <div id="overlay" class="overlay" style="display:none"><div class="spinner"></div></div>
+  <div class="sidebar">
+    <h3>你好，{{ username|default:"访客" }}</h3>
+    <div class="navigation-links">
+      <a href="{% url 'main:home' %}">返回主页</a>
+      <a id="logoutBtn">退出登录</a>
+      <div id="logoutMsg"></div>
+      {% csrf_token %}
+    </div>
+  </div>
+  <div class="main">
+    <div class="card fade-in">
+      <h2>管理注册码</h2>
+      <div class="row">
+        <div class="col">
+          <label>新增key</label>
+          <input id="newKey" type="text" placeholder="输入新的key" />
+          <button class="btn btn-secondary" onclick="addKey()">新增</button>
+        </div>
+      </div>
+      <div class="row" style="margin-top:12px;">
+        <div class="col">
+          <label>选择keys</label>
+          <select id="keys" multiple size="10"></select>
+          <div style="margin-top:8px;"><button class="btn btn-secondary" onclick="clearSelection('keys')">清空选择</button></div>
+        </div>
+        <div class="col">
+          <label>选择manage_keys</label>
+          <select id="manageKeys" multiple size="10"></select>
+          <div style="margin-top:8px;"><button class="btn btn-secondary" onclick="clearSelection('manageKeys')">清空选择</button></div>
+        </div>
+      </div>
+      <div class="row" style="margin-top:12px;">
+        <div class="col">
+          <label>有效期</label>
+          <select id="expireMode">
+            <option value="month">一个月</option>
+            <option value="fouryears">四年</option>
+            <option value="custom">自定义天数</option>
+          </select>
+          <input id="customDays" type="number" min="1" placeholder="自定义天数" />
+        </div>
+        <div class="col" style="display:flex; align-items:flex-end;">
+          <button class="btn btn-primary" onclick="generateCode()">生成注册码</button>
+        </div>
+      </div>
+      <div id="msg" class="notice"></div>
+      <div class="code-box" id="codeOut"></div>
+      <div class="row" style="margin-top:12px;">
+        <div class="col">
+          <div style="display:flex; justify-content:space-between; align-items:center;">
+            <h3>已生成的注册码</h3>
+            <div>
+              <button class="btn btn-secondary" onclick="loadCodes()">刷新列表</button>
+            </div>
+          </div>
+          <table style="width:100%; border-collapse:collapse; margin-top:10px;">
+            <thead>
+              <tr>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">code</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">keys</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">manage_keys</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">创建时间</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">过期时间</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">状态</th>
+                <th style="text-align:left; border-bottom:1px solid #e5e7eb; padding:8px;">操作</th>
+              </tr>
+            </thead>
+            <tbody id="codesBody"></tbody>
+          </table>
+        </div>
+      </div>
+    </div>
+  </div>
+  <script>
+    // 获取CSRF令牌的函数
+    function getCookie(name) {
+        const value = `; ${document.cookie}`;
+        const parts = value.split(`; ${name}=`);
+        if (parts.length === 2) return parts.pop().split(';').shift();
+    }
+
+    // 导航点击处理函数，提供备用URL
+    function handleNavClick(element, fallbackUrl) {
+        // 尝试使用Django模板生成的URL，如果失败则使用备用URL
+        try {
+            // 如果模板渲染正常，直接返回true让默认行为处理
+            return true;
+        } catch (e) {
+            // 如果模板渲染有问题，使用备用URL
+            window.location.href = fallbackUrl;
+            return false;
+        }
+    }
+
+    // 修复用户管理链接跳转问题
+    document.addEventListener('DOMContentLoaded', function() {
+        // 为用户管理链接添加事件监听器，确保正确跳转
+        const userManagementLink = document.querySelector('a[href*="get_users"]');
+        if (userManagementLink) {
+            userManagementLink.addEventListener('click', function(e) {
+                // 阻止默认行为
+                e.preventDefault();
+
+                // 获取备用URL
+                const fallbackUrl = this.getAttribute('onclick').match(/'([^']+)'/g)[1].replace(/'/g, '');
+
+                // 直接跳转到用户管理页面
+                window.location.href = fallbackUrl;
+            });
+        }
+    });
+
+    // 登出功能
+    document.getElementById('logoutBtn').addEventListener('click', async () => {
+        const msg = document.getElementById('logoutMsg');
+        msg.textContent = '';
+        const csrftoken = getCookie('csrftoken');
+        try {
+            const resp = await fetch('/accounts/logout/', {
+                method: 'POST',
+                credentials: 'same-origin',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-CSRFToken': csrftoken || ''
+                },
+                body: JSON.stringify({})
+            });
+            const data = await resp.json();
+            if (!resp.ok || !data.ok) {
+                throw new Error('登出失败');
+            }
+            document.cookie = 'sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            document.cookie = 'csrftoken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            window.location.href = data.redirect_url;
+        } catch (e) {
+            msg.textContent = e.message || '发生错误';
+        }
+    });
+
+
+    function fetchJSON(url){ return fetch(url, {credentials:'same-origin'}).then(r=>r.json()); }
+    function qs(params){ const u = new URLSearchParams(params); return u.toString(); }
+
+    const trendChart = echarts.init(document.getElementById('chartTrend'));
+    const typesChart = echarts.init(document.getElementById('chartTypes'));
+    const typesTrendChart = echarts.init(document.getElementById('chartTypesTrend'));
+
+    async function loadTrend(){
+      const url = '/elastic/analytics/trend/?' + qs({ from:'now-90d', to:'now', interval:'day' });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const buckets = res.data || [];
+      const x = buckets.map(b=>b.key_as_string||'');
+      const y = buckets.map(b=>b.doc_count||0);
+      trendChart.setOption({
+        tooltip:{trigger:'axis'},
+        xAxis:{type:'category', data:x},
+        yAxis:{type:'value'},
+        series:[{ type:'line', areaStyle:{}, data:y, smooth:true, color:'#4f46e5' }]
+      });
+    }
+
+    async function loadTypes(){
+      const url = '/elastic/analytics/types/?' + qs({ from:'now-30d', to:'now', size:10 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const buckets = res.data || [];
+      const data = buckets.map(b=>({ name: String(b.key||'未知'), value: b.doc_count||0 }));
+      typesChart.setOption({
+        tooltip:{trigger:'item'},
+        legend:{type:'scroll'},
+        series:[{ type:'pie', radius:['40%','70%'], data }]
+      });
+    }
+
+    async function loadTypesTrend(){
+      const url = '/elastic/analytics/types_trend/?' + qs({ from:'now-180d', to:'now', interval:'week', size:6 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const rows = res.data || [];
+      const x = rows.map(r=>r.key_as_string||'');
+      const typeSet = new Set();
+      rows.forEach(r=> (r.types||[]).forEach(t=> typeSet.add(String(t.key||'未知'))));
+      const types = Array.from(typeSet);
+      const series = types.map(tp=>({
+        name: tp,
+        type:'line',
+        smooth:true,
+        data: rows.map(r=>{
+          const b = (r.types||[]).find(x=>String(x.key||'')===tp);
+          return b? b.doc_count||0 : 0;
+        })
+      }));
+      typesTrendChart.setOption({
+        tooltip:{trigger:'axis'},
+        legend:{type:'scroll'},
+        xAxis:{type:'category', data:x},
+        yAxis:{type:'value'},
+        series
+      });
+    }
+
+    function formatTime(t){
+      try{
+        const d = new Date(t);
+        if(String(d) !== 'Invalid Date'){
+          const pad = n=> String(n).padStart(2,'0');
+          return `${d.getFullYear()}-${pad(d.getMonth()+1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+        }
+      }catch(e){}
+      return t||'';
+    }
+
+    async function loadRecent(){
+      const listEl = document.getElementById('recentList');
+      const url = '/elastic/analytics/recent/?' + qs({ from:'now-7d', to:'now', limit:10 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const items = res.data || [];
+      listEl.innerHTML = '';
+      items.forEach(it=>{
+        const li = document.createElement('li');
+        const t = formatTime(it.time);
+        const u = it.username || '';
+        const ty = it.type || '未知';
+        li.textContent = `${t}，${u}，${ty}`;
+        listEl.appendChild(li);
+      });
+    }
+
+    loadTrend();
+    loadTypes();
+    loadTypesTrend();
+    loadRecent();
+  </script>
+</body>
+</html>

elastic/templates/elastic/upload.html

@@ -0,0 +1,455 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <title>图片上传与识别</title>
+  <style>
+      body {margin: 0;font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif;background: #fafafa;}
+    /* 导航栏样式 */
+    .sidebar {position: fixed;top: 0;left: 0;width: 180px;height: 100vh;background: #1e1e2e;color: white;padding: 20px;box-shadow: 2px 0 5px rgba(0,0,0,0.1);z-index: 1000;display: flex;
+    flex-direction: column;align-items: center;}
+    .user-id {text-align: center;margin-bottom: 0px;}
+    .sidebar h3 {margin-top: 0;font-size: 18px;color: #add8e6;text-align: center; margin-bottom: 20px;}
+    .navigation-links {width: 100%;margin-top: 60px;}
+    .sidebar a,
+    .sidebar button {display: block;color: #8be9fd;text-decoration: none;margin: 10px 0;font-size: 16px;padding: 15px;border-radius: 4px;background: transparent;
+      border: none;cursor: pointer; width: calc(100% - 40px);text-align: left;transition: all 0.2s ease;}
+    .sidebar a:hover,
+    .sidebar button:hover {color: #ff79c6;background-color: rgba(139, 233, 253, 0.2);}
+    /* 主内容区 - 改进后的样式 */
+    .main-content {margin-left: 200px;padding: 20px;color: #333;}
+    .container { max-width: 1200px;margin: 0 auto;background: #fff;border-radius: 14px;box-shadow: 0 10px 24px rgba(31,35,40,0.08);
+      padding: 24px;}
+    .header {display: flex;align-items: center;justify-content: space-between;margin-bottom: 12px;}
+    .header h2 {margin: 0; color: #1e293b;}
+    .header p {margin: 5px 0 0 0;color: #64748b;font-size: 14px;}
+    .upload-section { background: #f8fafc; border: 2px dashed #cbd5e1; border-radius: 12px;padding: 32px; text-align: center;transition: all 0.3s ease;
+      margin-bottom: 24px;}
+    .upload-section:hover {border-color: #4f46e5; background: #f1f5f9; }
+    .upload-section.drag-over {border-color: #4f46e5; background: #e0e7ff; }
+    .upload-section input[type="file"] {margin: 15px 0;}
+    .btn {padding: 10px 16px;border: none;border-radius: 8px;cursor: pointer;margin: 0 4px;font-size: 14px;transition: all 0.2s ease; }
+    .btn-primary { background: #4f46e5; color: #fff; }
+    .btn-primary:hover { background: #4338ca;}
+    .btn-secondary {background: #e2e8f0;color: #334155; }
+    .btn-secondary:hover {  background: #cbd5e1;}
+    .btn-danger { background: #ef4444;color: #fff;}
+    .btn-danger:hover { background: #dc2626;}
+    .preview-container {display: flex; gap: 24px; margin: 24px 0;}
+    @media (max-width: 768px) {
+      .preview-container {flex-direction: column;}
+    }
+    .preview-box {flex: 1; text-align: center; }
+    .preview-box h3 {margin-top: 0;color: #334155; }
+    .preview-box img { max-width: 100%;max-height: 300px;border: 1px solid #e2e8f0;border-radius: 8px;object-fit: contain;}
+    .result-box {flex: 1;}
+  .result-box h3 { margin-top: 0; color: #334155;}
+  .form-controls { display: flex;gap: 8px;margin-bottom: 12px;flex-wrap: wrap;}
+  #kvForm {border: 1px solid #e2e8f0; border-radius: 8px; padding: 12px;    max-height: 300px;  overflow: auto;margin-bottom: 12px;background: white;}
+  .form-row {display: grid;grid-template-columns: 1fr 1fr auto;gap: 8px; margin-bottom: 6px; }
+  .form-row input {padding: 8px;border: 1px solid #cbd5e1;border-radius: 4px;}
+  #resultBox { width: 100%;min-height: 200px;font-family: ui-monospace, SFMono-Regular, Menlo, monospace;font-size: 14px; padding: 12px; border: 1px solid #e2e8f0;
+    border-radius: 8px; resize: vertical;box-sizing: border-box; }
+  .status-message { padding: 10px; margin: 10px 0; border-radius: 6px; display: none; }
+  .status-message.success { background-color: #d4edda; color: #155724; border: 1px solid #c3e6cb; }
+  .status-message.error { background-color: #f8d7da;color: #721c24; border: 1px solid #f5c6cb; }
+  .action-buttons { margin-top: 16px; display: flex; gap: 8px; flex-wrap: wrap; }
+  .progress {position: relative; height: 12px; background: #e2e8f0; border-radius: 8px; overflow: hidden;}
+  .progress-bar {height: 100%; width: 0; background: linear-gradient(90deg, #4f46e5 0%, #60a5fa 100%); transition: width .2s ease;}
+  .progress-wrap {display:none; margin-top: 8px;}
+  .progress-text {margin-top: 6px; font-size: 12px; color: #334155;}
+  </style>
+</head>
+<body>
+<!-- 左侧固定栏目 -->
+<div class="sidebar">
+  <div class="user-id">
+    <h3>你好，{{ username|default:"访客" }}</h3>
+  </div>
+  <div class="navigation-links">
+    <a href="{% url 'main:home' %}">返回主页</a>
+    <a id="logoutBtn">退出登录</a>
+    <div id="logoutMsg"></div>
+    {% csrf_token %}
+  </div>
+</div>
+
+<!-- 主内容区域 -->
+<div class="main-content">
+  <div class="container">
+    <div class="header">
+      <div>
+        <h2>图片上传与识别</h2>
+        <p>选择图片后上传，服务端调用大模型解析为可编辑的 JSON，再确认入库。</p>
+      </div>
+    </div>
+
+    <div class="upload-section" id="dropArea">
+      <h3>上传图片</h3>
+      <p>点击下方按钮选择图片，或拖拽图片到此区域</p>
+      <form id="uploadForm" enctype="multipart/form-data">
+        {% csrf_token %}
+        <input type="file" id="fileInput" name="file" accept="image/*" required />
+        <br>
+        <button type="submit" class="btn btn-primary">上传并识别</button>
+      </form>
+      <div class="status-message" id="uploadMsg"></div>
+      <div class="progress-wrap" id="progressWrap">
+        <div class="progress"><div class="progress-bar" id="progressBar"></div></div>
+        <div class="progress-text" id="progressText"></div>
+      </div>
+    </div>
+
+    <div class="preview-container">
+      <div class="preview-box">
+        <h3>图片预览</h3>
+        <img id="preview" alt="预览" />
+      </div>
+
+      <div class="result-box">
+        <h3>识别结果（可编辑）</h3>
+        <div class="form-controls">
+          <button id="addFieldBtn" class="btn btn-secondary" type="button">添加字段</button>
+          <button id="syncFromTextBtn" class="btn btn-secondary" type="button">从文本区刷新表单</button>
+        </div>
+        <div id="kvForm"></div>
+        <textarea id="resultBox" placeholder="识别结果JSON将显示在这里"></textarea>
+      </div>
+    </div>
+
+    <div class="action-buttons">
+      <button id="confirmBtn" class="btn btn-primary" disabled>确认并入库</button>
+      <button id="clearBtn" class="btn btn-secondary" type="button">清空</button>
+      <span id="confirmMsg" class="muted"></span>
+    </div>
+  </div>
+</div>
+
+<script>
+function getCookie(name) {
+  const value = `; ${document.cookie}`;
+  const parts = value.split(`; ${name}=`);
+  if (parts.length === 2) return parts.pop().split(';').shift();
+}
+
+const uploadForm = document.getElementById('uploadForm');
+const fileInput = document.getElementById('fileInput');
+const preview = document.getElementById('preview');
+const resultBox = document.getElementById('resultBox');
+const uploadMsg = document.getElementById('uploadMsg');
+const confirmBtn = document.getElementById('confirmBtn');
+const clearBtn = document.getElementById('clearBtn');
+const confirmMsg = document.getElementById('confirmMsg');
+const kvForm = document.getElementById('kvForm');
+const addFieldBtn = document.getElementById('addFieldBtn');
+const syncFromTextBtn = document.getElementById('syncFromTextBtn');
+const dropArea = document.getElementById('dropArea');
+const progressWrap = document.getElementById('progressWrap');
+const progressBar = document.getElementById('progressBar');
+const progressText = document.getElementById('progressText');
+
+let currentImageRel = '';
+
+function setProgress(p, text){
+  const v = Math.max(0, Math.min(100, Math.round(p||0)));
+  progressBar.style.width = v + '%';
+  progressText.textContent = (text||'') + (text? ' ' : '') + v + '%';
+}
+function showProgress(){
+  progressWrap.style.display = 'block';
+}
+function hideProgress(){
+  progressWrap.style.display = 'none';
+  setProgress(0, '');
+}
+
+async function convertToJpeg(file){
+  const url = URL.createObjectURL(file);
+  let img;
+  try{
+    const blob = await fetch(url).then(r=>r.blob());
+    img = await createImageBitmap(blob);
+  }catch(e){
+    img = await new Promise((resolve,reject)=>{const i=new Image();i.onload=()=>resolve(i);i.onerror=reject;i.src=url;});
+  }
+  URL.revokeObjectURL(url);
+  const maxDim = 2000;
+  const w = img.width;
+  const h = img.height;
+  const scale = Math.min(1, maxDim/Math.max(w,h));
+  const nw = Math.round(w*scale);
+  const nh = Math.round(h*scale);
+  const canvas = document.createElement('canvas');
+  canvas.width = nw;
+  canvas.height = nh;
+  const ctx = canvas.getContext('2d');
+  ctx.drawImage(img, 0, 0, nw, nh);
+  const blob = await new Promise(resolve=>canvas.toBlob(resolve,'image/jpeg',0.82));
+  const name = (file.name||'image').replace(/\.[^/.]+$/, '') + '.jpg';
+  return new File([blob], name, {type:'image/jpeg'});
+}
+
+// 拖拽上传功能
+['dragenter', 'dragover', 'dragleave', 'drop'].forEach(eventName => {
+  dropArea.addEventListener(eventName, preventDefaults, false);
+});
+
+function preventDefaults(e) {
+  e.preventDefault();
+  e.stopPropagation();
+}
+
+['dragenter', 'dragover'].forEach(eventName => {
+  dropArea.addEventListener(eventName, highlight, false);
+});
+
+['dragleave', 'drop'].forEach(eventName => {
+  dropArea.addEventListener(eventName, unhighlight, false);
+});
+
+function highlight() {
+  dropArea.classList.add('drag-over');
+}
+
+function unhighlight() {
+  dropArea.classList.remove('drag-over');
+}
+
+dropArea.addEventListener('drop', handleDrop, false);
+
+function handleDrop(e) {
+  const dt = e.dataTransfer;
+  const files = dt.files;
+  if (files.length) {
+    fileInput.files = files;
+    const event = new Event('change', { bubbles: true });
+    fileInput.dispatchEvent(event);
+  }
+}
+
+// 文件选择后预览
+fileInput.addEventListener('change', function(e) {
+  const file = e.target.files[0];
+  if (file && file.type.startsWith('image/')) {
+    const reader = new FileReader();
+    reader.onload = function(e) {
+      preview.src = e.target.result;
+    };
+    reader.readAsDataURL(file);
+  }
+});
+
+function createRow(k = '', v = '') {
+  const row = document.createElement('div');
+  row.className = 'form-row';
+  const keyInput = document.createElement('input');
+  keyInput.type = 'text';
+  keyInput.placeholder = '字段名';
+  keyInput.value = k;
+  const valInput = document.createElement('input');
+  valInput.type = 'text';
+  valInput.placeholder = '字段值';
+  valInput.value = typeof v === 'object' ? JSON.stringify(v) : (v ?? '');
+  const delBtn = document.createElement('button');
+  delBtn.type = 'button';
+  delBtn.className = 'btn btn-danger';
+  delBtn.textContent = '删除';
+  delBtn.onclick = () => {
+    if (kvForm.children.length > 1) {
+      kvForm.removeChild(row);
+    } else {
+      keyInput.value = '';
+      valInput.value = '';
+    }
+    syncTextarea();
+  };
+  keyInput.oninput = syncTextarea;
+  valInput.oninput = syncTextarea;
+  row.appendChild(keyInput);
+  row.appendChild(valInput);
+  row.appendChild(delBtn);
+  return row;
+}
+
+function renderFormFromObject(obj) {
+  kvForm.innerHTML = '';
+  Object.keys(obj || {}).forEach(k => {
+    kvForm.appendChild(createRow(k, obj[k]));
+  });
+  if (!kvForm.children.length) kvForm.appendChild(createRow());
+  syncTextarea();
+}
+
+function objectFromForm() {
+  const obj = {};
+  Array.from(kvForm.children).forEach(row => {
+    const [kInput, vInput] = row.querySelectorAll('input');
+    const k = (kInput.value || '').trim();
+    if (!k) return;
+    const raw = vInput.value;
+    try {
+      obj[k] = JSON.parse(raw);
+    } catch (_) {
+      obj[k] = raw;
+    }
+  });
+  return obj;
+}
+
+function syncTextarea() {
+  const obj = objectFromForm();
+  resultBox.value = JSON.stringify(obj, null, 2);
+}
+
+addFieldBtn.addEventListener('click', () => {
+  kvForm.appendChild(createRow());
+  syncTextarea();
+});
+
+syncFromTextBtn.addEventListener('click', () => {
+  try {
+    const obj = JSON.parse(resultBox.value || '{}');
+    renderFormFromObject(obj);
+    uploadMsg.textContent = '已从文本区刷新表单';
+    uploadMsg.className = 'status-message success';
+    uploadMsg.style.display = 'block';
+    setTimeout(() => {
+      uploadMsg.style.display = 'none';
+    }, 2000);
+  } catch (e) {
+    uploadMsg.textContent = '文本区不是有效JSON';
+    uploadMsg.className = 'status-message error';
+    uploadMsg.style.display = 'block';
+  }
+});
+
+uploadForm.addEventListener('submit', async (e) => {
+  e.preventDefault();
+  uploadMsg.textContent = '';
+  confirmMsg.textContent = '';
+  confirmBtn.disabled = true;
+  resultBox.value = '';
+  currentImageRel = '';
+
+  const file = fileInput.files[0];
+  if (!file) {
+    uploadMsg.textContent = '请选择图片文件';
+    uploadMsg.className = 'status-message error';
+    uploadMsg.style.display = 'block';
+    return;
+  }
+
+  showProgress();
+  setProgress(5, '转换为JPG');
+  let jpegFile = file;
+  try {
+    jpegFile = await convertToJpeg(file);
+    setProgress(50, '转换为JPG');
+    preview.src = URL.createObjectURL(jpegFile);
+  } catch (_) {
+    jpegFile = file;
+    setProgress(50, '转换为JPG');
+  }
+  const formData = new FormData();
+  formData.append('file', jpegFile);
+
+  try {
+    let prog = 50;
+    setProgress(prog, '识别中');
+    const timer = setInterval(() => {
+      prog = Math.min(95, prog + 1);
+      setProgress(prog, '识别中');
+    }, 120);
+    const resp = await fetch('/elastic/upload/', {
+      method: 'POST',
+      credentials: 'same-origin',
+      headers: { 'X-CSRFToken': getCookie('csrftoken') || '' },
+      body: formData,
+    });
+    clearInterval(timer);
+    const data = await resp.json();
+    if (!resp.ok || data.status !== 'success') {
+      throw new Error(data.message || '上传识别失败');
+    }
+    setProgress(100, '识别完成');
+    uploadMsg.textContent = data.message || '识别成功';
+    uploadMsg.className = 'status-message success';
+    uploadMsg.style.display = 'block';
+    preview.src = data.image_url;
+    renderFormFromObject(data.data || {});
+    currentImageRel = data.image;
+    confirmBtn.disabled = false;
+    setTimeout(hideProgress, 800);
+  } catch (e) {
+    uploadMsg.textContent = e.message || '发生错误';
+    uploadMsg.className = 'status-message error';
+    uploadMsg.style.display = 'block';
+    progressText.textContent = '识别失败';
+  }
+});
+
+confirmBtn.addEventListener('click', async () => {
+  confirmMsg.textContent = '';
+  try {
+    const edited = objectFromForm();
+    const resp = await fetch('/elastic/confirm/', {
+      method: 'POST',
+      credentials: 'same-origin',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-CSRFToken': getCookie('csrftoken') || ''
+      },
+      body: JSON.stringify({ data: edited, image: currentImageRel })
+    });
+    const data = await resp.json();
+    if (!resp.ok || data.status !== 'success') {
+      throw new Error(data.message || '录入失败');
+    }
+    confirmMsg.textContent = data.message || '录入成功';
+    confirmMsg.style.color = '#179957';
+  } catch (e) {
+    confirmMsg.textContent = e.message || '发生错误';
+    confirmMsg.style.color = '#d14343';
+  }
+});
+
+clearBtn.addEventListener('click', () => {
+  fileInput.value = '';
+  preview.src = '';
+  resultBox.value = '';
+  kvForm.innerHTML = '';
+  kvForm.appendChild(createRow()); // 保留一个空行
+  uploadMsg.textContent = '';
+  confirmMsg.textContent = '';
+  confirmBtn.disabled = true;
+});
+
+// 退出登录处理
+document.getElementById('logoutBtn').addEventListener('click', async () => {
+  const msg = document.getElementById('logoutMsg');
+  msg.textContent = '';
+  const csrftoken = getCookie('csrftoken');
+  try {
+    const resp = await fetch('/accounts/logout/', {
+      method: 'POST',
+      credentials: 'same-origin',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-CSRFToken': csrftoken || ''
+      },
+      body: JSON.stringify({})
+    });
+    const data = await resp.json();
+    if (!resp.ok || !data.ok) {
+      throw new Error('登出失败');
+    }
+    document.cookie = 'sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+    document.cookie = 'csrftoken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+    window.location.href = data.redirect_url;
+  } catch (e) {
+    msg.textContent = e.message || '发生错误';
+  }
+});
+</script>
+</body>
+</html>

elastic/templates/elastic/users.html

@@ -0,0 +1,657 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <title>用户管理</title>
+  <style>
+     body {margin: 0;font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif;background: #fafafa;}
+    /* 导航栏样式 */
+    .sidebar {position: fixed;top: 0;left: 0;width: 180px;height: 100vh;background: #1e1e2e;color: white;padding: 20px;box-shadow: 2px 0 5px rgba(0,0,0,0.1);z-index: 1000;display: flex;
+    flex-direction: column;align-items: center;}
+    .user-id {text-align: center;margin-bottom: 0px;}
+    .sidebar h3 {margin-top: 0;font-size: 18px;color: #add8e6;text-align: center; margin-bottom: 20px;}
+    .navigation-links {width: 100%;margin-top: 60px;}
+    .sidebar a,
+    .sidebar button {display: block;color: #8be9fd;text-decoration: none;margin: 10px 0;font-size: 16px;padding: 15px;border-radius: 4px;background: transparent;
+      border: none;cursor: pointer; width: calc(100% - 40px);text-align: left;transition: all 0.2s ease;}
+    .sidebar a:hover,
+    .sidebar button:hover {color: #ff79c6;background-color: rgba(139, 233, 253, 0.2);}
+    /* 主内容区 */
+    .main-content {
+      margin-left: 200px;
+      padding: 20px;
+      color: #333;
+    }
+
+    .card {
+      background: #fff;
+      border-radius: 14px;
+      box-shadow: 0 10px 24px rgba(31,35,40,0.08);
+      padding: 20px;
+      margin-bottom: 20px;
+    }
+
+    .header {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      margin-bottom: 12px;
+    }
+
+    .btn {
+      padding: 8px 12px;
+      border: none;
+      border-radius: 8px;
+      cursor: pointer;
+      margin: 0 4px;
+    }
+
+    .btn-primary {
+      background: #4f46e5;
+      color: #fff;
+    }
+
+    .btn-danger {
+      background: #ef4444;
+      color: #fff;
+    }
+
+    .btn-success {
+      background: #22c55e;
+      color: #fff;
+    }
+
+    .table-container {
+      overflow-x: auto;
+    }
+
+    table {
+      width: 100%;
+      border-collapse: collapse;
+      margin-top: 10px;
+    }
+
+    th, td {
+      padding: 12px 15px;
+      text-align: left;
+      border-bottom: 1px solid #e5e7eb;
+    }
+
+    th {
+      background-color: #f9fafb;
+      font-weight: bold;
+      color: #374151;
+    }
+
+    tr:hover {
+      background-color: #f3f4f6;
+    }
+
+    .form-group {
+      margin-bottom: 15px;
+    }
+
+    .form-group label {
+      display: block;
+      margin-bottom: 5px;
+      font-weight: bold;
+    }
+
+    .form-group input, .form-group select {
+      width: 100%;
+      padding: 8px 12px;
+      border: 1px solid #d1d5db;
+      border-radius: 6px;
+      box-sizing: border-box;
+    }
+
+    .form-row {
+      display: flex;
+      gap: 15px;
+      margin-bottom: 15px;
+    }
+
+    .form-row .form-group {
+      flex: 1;
+      margin-bottom: 0;
+    }
+
+    .action-buttons {
+      display: flex;
+      gap: 8px;
+    }
+
+    .search-container {
+      display: flex;
+      gap: 10px;
+      margin-bottom: 20px;
+    }
+
+    .search-container input {
+      flex: 1;
+      padding: 8px 12px;
+      border: 1px solid #d1d5db;
+      border-radius: 6px;
+    }
+
+    .search-container button {
+      padding: 8px 15px;
+      background: #4f46e5;
+      color: white;
+      border: none;
+      border-radius: 6px;
+      cursor: pointer;
+    }
+
+    .modal {
+      display: none;
+      position: fixed;
+      z-index: 2000;
+      left: 0;
+      top: 0;
+      width: 100%;
+      height: 100%;
+      background-color: rgba(0,0,0,0.5);
+    }
+
+    .modal-content {
+      background-color: white;
+      margin: 10% auto;
+      padding: 20px;
+      border-radius: 8px;
+      width: 80%;
+      max-width: 500px;
+    }
+
+    .close {
+      color: #aaa;
+      float: right;
+      font-size: 28px;
+      font-weight: bold;
+      cursor: pointer;
+    }
+
+    .close:hover {
+      color: black;
+    }
+
+    .notification {
+      padding: 10px;
+      margin-bottom: 15px;
+      border-radius: 4px;
+      display: none;
+    }
+
+    .notification.success {
+      background-color: #d4edda;
+      color: #155724;
+      border: 1px solid #c3e6cb;
+    }
+
+    .notification.error {
+      background-color: #f8d7da;
+      color: #721c24;
+      border: 1px solid #f5c6cb;
+    }
+
+    .nav-error {
+      color: #ef4444;
+      font-size: 12px;
+      margin-top: 5px;
+      text-align: center;
+    }
+  </style>
+</head>
+<body>
+  <!-- 左侧固定栏目 -->
+  <div class="sidebar">
+    <div class="user-id">
+      <h3>你好，{{ username|default:"访客" }}</h3>
+    </div>
+    <div class="navigation-links">
+      <a href="{% url 'main:home' %}" onclick="return handleNavClick(this, '/');">返回主页</a>
+      <a id="logoutBtn">退出登录</a>
+      <div id="logoutMsg"></div>
+      {% csrf_token %}
+    </div>
+  </div>
+
+  <div class="main-content">
+    {% if is_student %}
+    <div class="card">
+      <div class="header"><h2>修改密码</h2></div>
+      <form id="selfPwdForm">
+        <input type="hidden" id="selfUserId" name="user_id" value="{{ user_id }}">
+        <div class="form-group">
+          <label for="password">新密码</label>
+          <input type="password" id="password" name="password" required>
+        </div>
+        <div class="form-group">
+          <label for="confirmPassword">确认密码</label>
+          <input type="password" id="confirmPassword" name="confirmPassword" required>
+        </div>
+        <button type="submit" class="btn btn-primary">保存</button>
+      </form>
+    </div>
+    {% else %}
+    {% if is_tutor %}
+    <div class="card">
+      <div class="header"><h2>修改本人密码</h2></div>
+      <form id="selfPwdForm">
+        <input type="hidden" id="selfUserId" name="user_id" value="{{ user_id }}">
+        <div class="form-group">
+          <label for="password">新密码</label>
+          <input type="password" id="password" name="password" required>
+        </div>
+        <div class="form-group">
+          <label for="confirmPassword">确认密码</label>
+          <input type="password" id="confirmPassword" name="confirmPassword" required>
+        </div>
+        <button type="submit" class="btn btn-primary">保存</button>
+      </form>
+    </div>
+    {% endif %}
+    <div class="card">
+      <div class="header">
+        <h2>用户管理</h2>
+        {% if is_admin %}<button id="addUserBtn" class="btn btn-primary">添加用户</button>{% endif %}
+      </div>
+
+      <div class="notification success" id="successNotification">操作成功！</div>
+      <div class="notification error" id="errorNotification">操作失败！</div>
+
+      <div class="search-container">
+        <input type="text" id="searchInput" placeholder="搜索用户名...">
+        <button id="searchBtn">搜索</button>
+        <button id="resetBtn">重置</button>
+      </div>
+
+      <div class="table-container">
+        <table id="usersTable">
+          <thead>
+            <tr>
+              <th>用户ID</th>
+              <th>用户名</th>
+              <th>权限</th>
+              <th>操作</th>
+            </tr>
+          </thead>
+          <tbody id="usersTableBody"></tbody>
+        </table>
+      </div>
+    </div>
+    {% endif %}
+  </div>
+
+  <!-- 添加/编辑用户模态框 -->
+  <div id="userModal" class="modal">
+    <div class="modal-content">
+      <span class="close">&times;</span>
+      <h2 id="modalTitle">添加用户</h2>
+      <form id="userForm">
+        <input type="hidden" id="userId" name="user_id">
+        <div class="form-row">
+          <div class="form-group">
+            <label for="username">用户名</label>
+            <input type="text" id="username" name="username" required>
+          </div>
+          <div class="form-group">
+            <label for="permission">权限</label>
+            <select id="permission" name="permission" required>
+              <option value="0">管理员</option>
+              <option value="1">普通用户</option>
+            </select>
+          </div>
+        </div>
+        <div class="form-group">
+          <label for="password">密码</label>
+          <input type="password" id="password" name="password" required>
+        </div>
+        <div class="form-group">
+          <label for="confirmPassword">确认密码</label>
+          <input type="password" id="confirmPassword" name="confirmPassword" required>
+        </div>
+        <button type="submit" class="btn btn-primary">保存</button>
+      </form>
+    </div>
+  </div>
+
+  <!-- 确认删除模态框 -->
+  <div id="deleteModal" class="modal">
+    <div class="modal-content">
+      <span class="close">&times;</span>
+      <h2>确认删除</h2>
+      <p>确定要删除用户 <strong id="deleteUserName"></strong> 吗？此操作不可撤销。</p>
+      <input type="hidden" id="deleteUserId">
+      <button id="confirmDeleteBtn" class="btn btn-danger">确认删除</button>
+      <button class="btn">取消</button>
+    </div>
+  </div>
+
+  <script>
+    // 获取CSRF令牌的函数
+    function getCookie(name) {
+        const value = `; ${document.cookie}`;
+        const parts = value.split(`; ${name}=`);
+        if (parts.length === 2) return parts.pop().split(';').shift();
+    }
+
+    // 导航点击处理函数，提供备用URL
+    function handleNavClick(element, fallbackUrl) {
+        // 尝试使用Django模板生成的URL，如果失败则使用备用URL
+        try {
+            // 如果模板渲染正常，直接返回true让默认行为处理
+            return true;
+        } catch (e) {
+            // 如果模板渲染有问题，使用备用URL
+            window.location.href = fallbackUrl;
+            return false;
+        }
+    }
+
+    // 显示通知
+    function showNotification(message, isSuccess = true) {
+        const notification = isSuccess ?
+            document.getElementById('successNotification') :
+            document.getElementById('errorNotification');
+
+        notification.textContent = message;
+        notification.style.display = 'block';
+
+        setTimeout(() => {
+            notification.style.display = 'none';
+        }, 3000);
+    }
+
+    // 获取所有用户
+    async function loadUsers(searchTerm = '') {
+        try {
+            const url = searchTerm ?
+                `/elastic/users/?search=${encodeURIComponent(searchTerm)}` :
+                '/elastic/users/';
+
+            const response = await fetch(url);
+            const result = await response.json();
+
+            if (result.status === 'success') {
+                const tbody = document.getElementById('usersTableBody');
+                tbody.innerHTML = '';
+
+                // 处理不同格式的API响应
+                const users = result.data || result.users || [];
+
+                users.forEach(user => {
+                    const row = document.createElement('tr');
+
+                // 根据权限值显示权限名称
+                const permissionText = Number(user.permission) === 0 ? '管理员' : '普通用户';
+
+                    row.innerHTML = `
+                        <td>${user.user_id}</td>
+                        <td>${user.username}</td>
+                        <td>${permissionText}</td>
+                        <td class="action-buttons">
+                            <button class="btn btn-success edit-btn" data-user='${JSON.stringify(user)}'>编辑</button>
+                            <button class="btn btn-danger delete-btn" data-username="${user.username}" data-userid="${user.user_id}">删除</button>
+                        </td>
+                    `;
+
+                    tbody.appendChild(row);
+                });
+            } else {
+                showNotification('获取用户列表失败', false);
+            }
+        } catch (error) {
+            console.error('加载用户列表失败:', error);
+            showNotification('获取用户列表失败', false);
+        }
+    }
+
+    // 打开添加用户模态框
+    function openAddModal() {
+        document.getElementById('modalTitle').textContent = '添加用户';
+        document.getElementById('userForm').reset();
+        document.getElementById('userId').value = '';
+        document.getElementById('password').required = true;
+        document.getElementById('confirmPassword').required = true;
+        document.getElementById('userModal').style.display = 'block';
+    }
+
+    // 打开编辑用户模态框
+    function openEditModal(user) {
+        document.getElementById('modalTitle').textContent = '编辑用户';
+        document.getElementById('username').value = user.username;
+        document.getElementById('userId').value = user.user_id;
+        document.getElementById('permission').value = user.permission;
+        document.getElementById('password').required = false;
+        document.getElementById('confirmPassword').required = false;
+        document.getElementById('userModal').style.display = 'block';
+    }
+
+    // 打开删除确认模态框
+    function openDeleteModal(username, userId) {
+        document.getElementById('deleteUserName').textContent = username;
+        document.getElementById('deleteUserId').value = userId;
+        document.getElementById('deleteModal').style.display = 'block';
+    }
+
+    // 保存用户（添加或编辑）
+    async function saveUser(event) {
+        event.preventDefault();
+
+        const formData = new FormData(event.target);
+        const userId = formData.get('user_id');
+        const username = formData.get('username');
+        const permission = formData.get('permission');
+        const password = formData.get('password');
+        const confirmPassword = formData.get('confirmPassword');
+
+        // 验证密码
+        if (password !== confirmPassword) {
+            showNotification('密码和确认密码不匹配', false);
+            return;
+        }
+
+        // 验证密码长度（如果提供了密码）
+        if (password && password.length < 6) {
+            showNotification('密码长度至少为6位', false);
+            return;
+        }
+
+        const data = {
+            username: username,
+            permission: parseInt(permission)
+        };
+
+        if (password) {
+            data.password = password;
+        }
+
+        try {
+            const csrftoken = getCookie('csrftoken');
+            let response;
+
+            if (userId) {
+                response = await fetch(`/elastic/users/${userId}/update/`, {
+                    method: 'POST',
+                    credentials: 'same-origin',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'X-CSRFToken': csrftoken
+                    },
+                    body: JSON.stringify(data)
+                });
+            } else {
+                response = await fetch('/elastic/users/add/', {
+                    method: 'POST',
+                    credentials: 'same-origin',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'X-CSRFToken': csrftoken
+                    },
+                    body: JSON.stringify(data)
+                });
+            }
+
+            const result = await response.json();
+
+            if (result.status === 'success') {
+                showNotification(userId ? '用户更新成功' : '用户添加成功');
+                document.getElementById('userModal').style.display = 'none';
+                loadUsers();
+            } else {
+                showNotification(result.message || '操作失败', false);
+            }
+        } catch (error) {
+            console.error('保存用户失败:', error);
+            showNotification('保存用户失败', false);
+        }
+    }
+
+    // 删除用户
+    async function deleteUser() {
+        const userId = document.getElementById('deleteUserId').value;
+
+        try {
+            const csrftoken = getCookie('csrftoken');
+            const response = await fetch(`/elastic/users/${userId}/delete/`, {
+                method: 'POST',
+                credentials: 'same-origin',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-CSRFToken': csrftoken
+                }
+            });
+
+            const result = await response.json();
+
+            if (result.status === 'success') {
+                showNotification('用户删除成功');
+                document.getElementById('deleteModal').style.display = 'none';
+                loadUsers();
+            } else {
+                showNotification(result.message || '删除失败', false);
+            }
+        } catch (error) {
+            console.error('删除用户失败:', error);
+            showNotification('删除用户失败', false);
+        }
+    }
+
+    // 事件监听器
+    const addBtn = document.getElementById('addUserBtn');
+    if (addBtn) {
+        addBtn.addEventListener('click', openAddModal);
+    }
+
+    document.getElementById('userForm').addEventListener('submit', saveUser);
+
+    document.getElementById('confirmDeleteBtn').addEventListener('click', deleteUser);
+
+    document.querySelectorAll('.close').forEach(closeBtn => {
+        closeBtn.addEventListener('click', function() {
+            this.parentElement.parentElement.style.display = 'none';
+        });
+    });
+
+    const searchBtn = document.getElementById('searchBtn');
+    if (searchBtn) {
+        searchBtn.addEventListener('click', function() {
+            const searchTerm = document.getElementById('searchInput').value;
+            loadUsers(searchTerm);
+        });
+    }
+
+    const resetBtn = document.getElementById('resetBtn');
+    if (resetBtn) {
+        resetBtn.addEventListener('click', function() {
+            document.getElementById('searchInput').value = '';
+            loadUsers();
+        });
+    }
+
+    // 点击模态框外部关闭模态框
+    window.addEventListener('click', function(event) {
+        const modals = document.querySelectorAll('.modal');
+        modals.forEach(modal => {
+            if (event.target === modal) {
+                modal.style.display = 'none';
+            }
+        });
+    });
+
+    // 登出功能
+    document.getElementById('logoutBtn').addEventListener('click', async () => {
+        const msg = document.getElementById('logoutMsg');
+        msg.textContent = '';
+        const csrftoken = getCookie('csrftoken');
+        try {
+            const resp = await fetch('/accounts/logout/', {
+                method: 'POST',
+                credentials: 'same-origin',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-CSRFToken': csrftoken || ''
+                },
+                body: JSON.stringify({})
+            });
+            const data = await resp.json();
+            if (!resp.ok || !data.ok) {
+                throw new Error('登出失败');
+            }
+            document.cookie = 'sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            document.cookie = 'csrftoken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            window.location.href = data.redirect_url;
+        } catch (e) {
+            msg.textContent = e.message || '发生错误';
+        }
+    });
+
+    // 页面加载时获取用户列表
+    document.addEventListener('DOMContentLoaded', function() {
+        const selfForm = document.getElementById('selfPwdForm');
+        if (selfForm) {
+            selfForm.addEventListener('submit', async (e) => {
+                e.preventDefault();
+                const uid = document.getElementById('selfUserId').value;
+                const pwd = document.getElementById('password').value;
+                const cpwd = document.getElementById('confirmPassword').value;
+                if (pwd !== cpwd) { showNotification('密码和确认密码不匹配', false); return; }
+                if ((pwd || '').length < 6) { showNotification('密码长度至少为6位', false); return; }
+                try {
+                    const csrftoken = getCookie('csrftoken');
+                    const resp = await fetch(`/elastic/users/${uid}/update/`, {
+                        method: 'POST', credentials: 'same-origin',
+                        headers: { 'Content-Type': 'application/json', 'X-CSRFToken': csrftoken || '' },
+                        body: JSON.stringify({ password: pwd })
+                    });
+                    const result = await resp.json();
+                    if (resp.ok && result.status === 'success') { showNotification('修改成功'); }
+                    else { showNotification(result.message || '操作失败', false); }
+                } catch (error) {
+                    showNotification('保存失败', false);
+                }
+            });
+        }
+        const tbody = document.getElementById('usersTableBody');
+        if (tbody) {
+            loadUsers();
+        }
+    });
+
+    // 为表格中的编辑和删除按钮添加事件监听器
+    document.addEventListener('click', function(e) {
+        if (e.target.classList.contains('edit-btn')) {
+            const user = JSON.parse(e.target.getAttribute('data-user'));
+            openEditModal(user);
+        }
+
+        if (e.target.classList.contains('delete-btn')) {
+            const username = e.target.getAttribute('data-username');
+            const userId = e.target.getAttribute('data-userid');
+            openDeleteModal(username, userId);
+        }
+    });
+  </script>
+</body>
+</html>

elastic/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

elastic/urls.py

@@ -0,0 +1,47 @@
+from django.urls import path
+from . import views
+
+app_name = 'elastic'
+
+urlpatterns = [
+    # ES索引管理
+    # path('init-index/', views.init_index, name='init_index'),
+    
+    # 数据操作
+    path('data/', views.add_data, name='add_data'),
+    path('data/<str:doc_id>/', views.get_data, name='get_data'),
+    path('data/<str:doc_id>/update/', views.update_data, name='update_data'),
+    path('data/<str:doc_id>/delete/', views.delete_data, name='delete_data'),
+    
+    # 搜索功能
+    path('search/', views.search, name='search'),
+    path('fuzzy-search/', views.fuzzy_search, name='fuzzy_search'),
+    path('all-data/', views.get_all_data, name='get_all_data'),
+    
+    # 用户管理
+    path('users/', views.get_users, name='get_users'),
+    path('users/add/', views.add_user, name='add_user'),
+    path('users/<int:user_id>/update/', views.update_user_by_id_view, name='update_user_by_id'),
+    path('users/<int:user_id>/delete/', views.delete_user_by_id_view, name='delete_user_by_id'),
+
+    # 图片上传与确认
+    path('upload-page/', views.upload_page, name='upload_page'),
+    path('upload/', views.upload, name='upload'),
+    path('confirm/', views.confirm, name='confirm'),
+
+    # 管理页面
+    path('manage/', views.manage_page, name='manage_page'),
+    path('user_manage/', views.user_manage, name='user_manage'),
+    path('registration-codes/manage/', views.registration_code_manage_page, name='registration_code_manage_page'),
+    path('registration-codes/keys/', views.get_keys_list_view, name='get_keys_list'),
+    path('registration-codes/keys/add/', views.add_key_view, name='add_key'),
+    path('registration-codes/generate/', views.generate_registration_code_view, name='generate_registration_code'),
+    path('registration-codes/list/', views.list_registration_codes_view, name='list_registration_codes'),
+    path('registration-codes/revoke/', views.revoke_registration_code_view, name='revoke_registration_code'),
+
+    # 分析接口
+    path('analytics/trend/', views.analytics_trend_view, name='analytics_trend'),
+    path('analytics/types/', views.analytics_types_view, name='analytics_types'),
+    path('analytics/types_trend/', views.analytics_types_trend_view, name='analytics_types_trend'),
+    path('analytics/recent/', views.analytics_recent_view, name='analytics_recent'),
+]

elastic/views.py

@@ -0,0 +1,733 @@
+"""
+ES相关的API视图
+"""
+import os
+import re
+import uuid
+import base64
+import json
+from django.conf import settings
+from django.http import JsonResponse
+from django.shortcuts import render
+from django.views.decorators.http import require_http_methods
+from django.views.decorators.csrf import ensure_csrf_cookie
+from django.views.decorators.csrf import csrf_exempt, ensure_csrf_cookie, csrf_protect
+from .es_connect import *
+from .es_connect import update_user_by_id as es_update_user_by_id, delete_user_by_id as es_delete_user_by_id
+from .es_connect import (
+    analytics_trend as es_analytics_trend,
+    analytics_types as es_analytics_types,
+    analytics_types_trend as es_analytics_types_trend,
+    analytics_recent as es_analytics_recent,
+)
+from PIL import Image
+
+
+@require_http_methods(["GET", "POST"])
+@csrf_exempt
+def init_index(request):
+    """初始化ES索引"""
+    print("⚠️ init_index 被调用了！")
+    try:
+        create_index_with_mapping()
+        return JsonResponse({"status": "success", "message": "索引初始化成功"})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["POST"])
+@csrf_exempt
+def add_data(request):
+    """添加数据到ES"""
+    try:
+        data = json.loads(request.body.decode('utf-8'))
+        success = insert_data(data)
+        if success:
+            return JsonResponse({"status": "success", "message": "数据添加成功"})
+        else:
+            return JsonResponse({"status": "error", "message": "数据添加失败"}, status=500)
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def search(request):
+    """搜索数据"""
+    try:
+        query = request.GET.get('q', '')
+        if not query:
+            return JsonResponse({"status": "error", "message": "搜索关键词不能为空"}, status=400)
+        
+        results = search_data(query)
+        return JsonResponse({"status": "success", "data": results})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def fuzzy_search(request):
+    """模糊搜索"""
+    try:
+        keyword = request.GET.get('keyword', '')
+        if not keyword:
+            return JsonResponse({"status": "error", "message": "搜索关键词不能为空"}, status=400)
+        
+        results = search_by_any_field(keyword)
+        return JsonResponse({"status": "success", "data": results})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+        
+@require_http_methods(["GET"])
+def get_all_data(request):
+    """获取所有数据"""
+    try:
+        results = search_all()
+        return JsonResponse({"status": "success", "data": results})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+@require_http_methods(["DELETE"])
+@csrf_exempt
+def delete_data(request, doc_id):
+    """删除数据（需登录；管理员或作者本人）"""
+    request_user=request.session.get("user_id")
+    # request_admin=request.session.get("permisssion")
+    if request_user is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+
+
+    try:
+        existing = get_by_id(doc_id)
+        user_existing=get_user_by_id(request_user)
+
+        if not existing:
+            return JsonResponse({"status": "error", "message": "数据不存在"}, status=404)
+
+        is_admin = int(user_existing.get('permission')) == 0
+        is_owner = str(existing.get("writer_id", "")) == str(request.session.get("user_id"))
+
+        if not (is_admin or is_owner):
+            return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+        success = delete_by_id(doc_id)
+
+        if success:
+            return JsonResponse({"status": "success", "message": "数据删除成功"})
+        else:
+            return JsonResponse({"status": "error", "message": "数据删除失败"}, status=500)
+
+
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["PUT"])
+@csrf_exempt
+def update_data(request, doc_id):
+    """更新数据（需登录；管理员或作者本人）"""
+    request_user = request.session.get("user_id")
+    if request_user is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+
+    try:
+        payload = json.loads(request.body.decode('utf-8'))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    try:
+        existing = get_by_id(doc_id)
+        user_existing = get_user_by_id(request_user)
+
+        if not existing:
+            return JsonResponse({"status": "error", "message": "数据不存在"}, status=404)
+
+        is_admin = int(user_existing.get('permission')) == 0
+        is_owner = str(existing.get("writer_id", "")) == str(request.session.get("user_id"))
+
+        if not (is_admin or is_owner):
+            return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+
+        updated = {}
+        if "writer_id" in payload:
+            updated["writer_id"] = payload["writer_id"]
+        if "image" in payload:
+            updated["image"] = payload["image"]
+        if "data" in payload:
+            v = payload["data"]
+            if isinstance(v, dict):
+                updated["data"] = json.dumps(v, ensure_ascii=False)
+            else:
+                try:
+                    obj = json.loads(str(v))
+                    updated["data"] = json.dumps(obj, ensure_ascii=False)
+                except Exception:
+                    updated["data"] = str(v)
+
+        success = update_by_id(doc_id, updated)
+        if success:
+            return JsonResponse({"status": "success", "message": "数据更新成功"})
+        else:
+            return JsonResponse({"status": "error", "message": "数据更新失败"}, status=500)
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def get_data(request, doc_id):
+    """获取单个数据"""
+    try:
+        result = get_by_id(doc_id)
+        if result:
+            return JsonResponse({"status": "success", "data": result})
+        else:
+            return JsonResponse({"status": "error", "message": "数据不存在"}, status=404)
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["POST"])
+@csrf_protect
+def add_user(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    username = (payload.get("username") or "").strip()
+    password = (payload.get("password") or "").strip()
+    try:
+        permission = int(payload.get("permission", 1))
+    except Exception:
+        permission = 1
+    if not username:
+        return JsonResponse({"status": "error", "message": "用户名不能为空"}, status=400)
+    if password and len(password) < 6:
+        return JsonResponse({"status": "error", "message": "密码长度至少为6位"}, status=400)
+    existing = get_user_by_username(username)
+    if existing:
+        return JsonResponse({"status": "error", "message": "用户名已存在"}, status=409)
+    users = get_all_users()
+    next_id = (max([int(u.get("user_id", 0)) for u in users]) + 1) if users else 1
+    ok = write_user_data({
+        "user_id": next_id,
+        "username": username,
+        "password": password,
+        "permission": permission,
+    })
+    if not ok:
+        return JsonResponse({"status": "error", "message": "用户添加失败"}, status=500)
+    return JsonResponse({"status": "success", "message": "用户添加成功"})
+
+
+@require_http_methods(["GET"])
+def get_users(request):
+    uid = request.session.get("user_id")
+    if uid is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    try:
+        is_admin = int(request.session.get("permission", 1)) == 0
+        requester = get_user_by_id(uid) or {}
+        mgr_keys = set(requester.get("manage_key") or [])
+        q = (request.GET.get("search") or "").strip()
+        users = get_all_users()
+        if is_admin:
+            filtered = users
+        elif mgr_keys:
+            def match_manage(user):
+                ukeys = set(user.get("key") or [])
+                return bool(ukeys & mgr_keys)
+            filtered = [u for u in users if match_manage(u)]
+        else:
+            filtered = [u for u in users if str(u.get("user_id")) == str(uid)]
+        if q:
+            filtered = [u for u in filtered if q in str(u.get("username", ""))]
+        return JsonResponse({"status": "success", "data": filtered})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["POST"])
+@csrf_protect
+def update_user_by_id_view(request, user_id):
+    uid = request.session.get("user_id")
+    if uid is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    new_username = (payload.get("username") or "").strip()
+    new_permission = payload.get("permission")
+    new_password = (payload.get("password") or "").strip()
+    if new_password and len(new_password) < 6:
+        return JsonResponse({"status": "error", "message": "密码长度至少为6位"}, status=400)
+
+    is_admin = int(request.session.get("permission", 1)) == 0
+    requester = get_user_by_id(uid) or {}
+    target = get_user_by_id(user_id) or {}
+    requester_mgr = set(requester.get("manage_key") or [])
+    target_keys = set(target.get("key") or [])
+
+    if is_admin:
+        if new_username:
+            other = get_user_by_username(new_username)
+            if other and int(other.get("user_id", -1)) != int(user_id):
+                return JsonResponse({"status": "error", "message": "用户名已存在"}, status=409)
+        ok = es_update_user_by_id(
+            user_id,
+            username=new_username if new_username else None,
+            permission=int(new_permission) if new_permission is not None else None,
+            password=new_password if new_password else None,
+        )
+        return JsonResponse({"status": "success"}) if ok else JsonResponse({"status": "error", "message": "用户更新失败"}, status=500)
+
+    if str(uid) == str(user_id):
+        if not new_password:
+            return JsonResponse({"status": "error", "message": "仅允许修改密码"}, status=400)
+        ok = es_update_user_by_id(user_id, password=new_password)
+        return JsonResponse({"status": "success"}) if ok else JsonResponse({"status": "error", "message": "用户更新失败"}, status=500)
+
+    if requester_mgr and (target_keys & requester_mgr):
+        if not new_password or new_username or new_permission is not None:
+            return JsonResponse({"status": "error", "message": "导师仅允许修改密码"}, status=403)
+        ok = es_update_user_by_id(user_id, password=new_password)
+        return JsonResponse({"status": "success"}) if ok else JsonResponse({"status": "error", "message": "用户更新失败"}, status=500)
+
+    return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+
+@require_http_methods(["POST"])
+@csrf_protect
+def delete_user_by_id_view(request, user_id):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    ok = es_delete_user_by_id(user_id)
+    if not ok:
+        return JsonResponse({"status": "error", "message": "用户删除失败"}, status=500)
+    return JsonResponse({"status": "success", "message": "用户删除成功"})
+
+
+# 辅助：JSON 转换（兼容 a.py 行为）
+def json_to_string(obj):
+    try:
+        return json.dumps(obj, ensure_ascii=False)
+    except Exception:
+        return str(obj)
+
+
+def string_to_json(s):
+    try:
+        return json.loads(s)
+    except Exception:
+        return {}
+
+
+# 移植自 a.py 的核心：调用大模型进行 OCR/信息抽取
+def ocr_and_extract_info(image_path: str):
+    from openai import OpenAI
+    def encode_image(path: str) -> str:
+        with open(path, "rb") as f:
+            return base64.b64encode(f.read()).decode("utf-8")
+
+    base64_image = encode_image(image_path)
+
+    # api_key = getattr(settings, "AISTUDIO_API_KEY", "188f57db3766e02ed2c7e18373996d84f4112272")
+    # base_url = getattr(settings, "OPENAI_BASE_URL", "https://aistudio.baidu.com/llm/lmapi/v3")
+    # if not api_key:
+    #     raise RuntimeError("缺少 AISTUDIO_API_KEY，请在环境变量或 settings 中配置")
+
+
+    api_key = getattr(settings, "AISTUDIO_API_KEY", "")
+    base_url = getattr(settings, "OPENAI_BASE_URL", "")
+    if not api_key or not base_url:
+        raise RuntimeError("缺少模型服务配置，请设置 AISTUDIO_API_KEY 与 OPENAI_BASE_URL")
+    client = OpenAI(api_key=api_key, base_url=base_url)
+
+    types = get_type_list()
+    chat_completion = client.chat.completions.create(
+        messages=[
+            {"role": "system", "content": "你是一个能理解图片和文本的助手，请根据用户提供的信息进行回答。"},
+            {
+                "role": "user",
+                "content": [
+                    {"type": "text", "text": f"请识别这张图片中的信息，将你认为重要的数据转换为不包含嵌套的json，不要显示其它信息以便于解析，直接输出json结果即可。使用“数据类型”字段表示这个东西的大致类型，除此之外你可以自行决定使用哪些json字段。“数据类型”的内容有严格规定，请查看{json.dumps(types, ensure_ascii=False)}中是否包含你所需要的类型，确定不包含后你才可以填入你觉得合适的大致分类。"},
+                    {"type": "image_url", "image_url": {"url": f"data:image/png;base64,{base64_image}"}},
+                ],
+            },
+        ],
+        model=getattr(settings, "OPENAI_MODEL_NAME", "ernie-4.5-turbo-vl-32k"),
+    )
+
+    response_text = chat_completion.choices[0].message.content
+
+    def parse_response(text: str):
+        try:
+            result = json.loads(text)
+            if result:
+                return result
+        except json.JSONDecodeError:
+            pass
+
+        m = re.search(r"```json\n(.*?)```", text, re.DOTALL)
+        if m:
+            try:
+                result = json.loads(m.group(1))
+                if result:
+                    return result
+            except json.JSONDecodeError:
+                pass
+
+        try:
+            fixed = text.replace("'", '"')
+            result = json.loads(fixed)
+            if result:
+                return result
+        except json.JSONDecodeError:
+            pass
+
+        return None
+
+    return parse_response(response_text)
+
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def upload_page(request):
+    session_user_id = request.session.get("user_id")
+    if session_user_id is None:
+        from django.shortcuts import redirect
+        return redirect("/accounts/login/")
+    user_id_qs = request.GET.get("user_id")
+    context = {"user_id": user_id_qs or session_user_id}
+    return render(request, "elastic/upload.html", context)
+
+
+# 上传并识别（不入库）
+@require_http_methods(["POST"])
+def upload(request):
+    if request.session.get("user_id") is None:
+        fallback_uid = request.POST.get("user_id") or request.GET.get("user_id")
+        if fallback_uid:
+            request.session["user_id"] = fallback_uid
+            request.session.setdefault("permission", 1)
+        else:
+            return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+
+    file = request.FILES.get("file")
+    if not file:
+        return JsonResponse({"status": "error", "message": "未选择文件"}, status=400)
+
+    images_dir = os.path.join(settings.MEDIA_ROOT, "images")
+    os.makedirs(images_dir, exist_ok=True)
+    filename = f"{uuid.uuid4()}_{file.name}"
+    abs_path = os.path.join(images_dir, filename)
+
+    with open(abs_path, "wb") as dst:
+        for chunk in file.chunks():
+            dst.write(chunk)
+
+    try:
+        data = ocr_and_extract_info(abs_path)
+        if not data:
+            return JsonResponse({"status": "error", "message": "无法识别图片内容"}, status=400)
+
+        rel_path = f"images/{filename}"
+        image_url = request.build_absolute_uri(settings.MEDIA_URL + rel_path)
+        return JsonResponse({
+            "status": "success",
+            "message": "识别成功，请确认数据后点击录入",
+            "data": data,
+            "image": rel_path,
+            "image_url": image_url,
+        })
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+# 确认并入库
+@require_http_methods(["POST"])
+def confirm(request):
+    if request.session.get("user_id") is None:
+        # 允许从payload中带入user_id作为后备（便于前端已知用户时继续操作）
+        try:
+            payload_for_uid = json.loads(request.body.decode("utf-8"))
+        except Exception:
+            payload_for_uid = {}
+        fb_uid = (payload_for_uid or {}).get("user_id")
+        if fb_uid:
+            request.session["user_id"] = fb_uid
+            request.session.setdefault("permission", 1)
+        else:
+            return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except json.JSONDecodeError:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+
+    edited = payload.get("data") or {}
+    image_rel = payload.get("image") or ""
+    if not isinstance(edited, dict) or not edited:
+        return JsonResponse({"status": "error", "message": "数据不能为空"}, status=400)
+
+    ensure_type_in_list(edited.get("数据类型"))
+    final_image_rel = image_rel
+    try:
+        if image_rel:
+            images_dir = os.path.join(settings.MEDIA_ROOT, "images")
+            os.makedirs(images_dir, exist_ok=True)
+            src_abs = os.path.join(settings.MEDIA_ROOT, image_rel)
+            base = os.path.splitext(os.path.basename(image_rel))[0]
+            webp_name = base + ".webp"
+            webp_abs = os.path.join(images_dir, webp_name)
+            with Image.open(src_abs) as im:
+                if im.mode in ("RGBA", "LA", "P"):
+                    im = im.convert("RGBA")
+                else:
+                    im = im.convert("RGB")
+                im.save(webp_abs, format="WEBP", quality=80)
+            final_image_rel = f"images/{webp_name}"
+    except Exception:
+        final_image_rel = image_rel
+
+    to_store = {
+        "writer_id": str(request.session.get("user_id")),
+        "data": json_to_string(edited),
+        "image": final_image_rel,
+    }
+
+    ok = insert_data(to_store)
+    if not ok:
+        return JsonResponse({"status": "error", "message": "写入ES失败"}, status=500)
+
+    try:
+        if image_rel and final_image_rel != image_rel:
+            orig_abs = os.path.join(settings.MEDIA_ROOT, image_rel)
+            if os.path.isfile(orig_abs):
+                os.remove(orig_abs)
+    except Exception:
+        pass
+
+    return JsonResponse({"status": "success", "message": "数据录入成功", "data": edited})
+
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def manage_page(request):
+    session_user_id = request.session.get("user_id")
+    if session_user_id is None:
+        from django.shortcuts import redirect
+        return redirect("/accounts/login/")
+
+    is_admin = int(request.session.get("permission", 1)) == 0
+    if is_admin:
+        raw_results = search_all()
+    else:
+        uid = str(session_user_id)
+        raw_results = [r for r in search_all() if str(r.get("writer_id", "")) == uid]
+
+    results = []
+    for r in raw_results:
+        try:
+            r_data = string_to_json(r.get("data", "{}"))
+            r_data["_id"] = r["id"]
+            r_data["_image"] = r.get("image", "")
+            results.append(r_data)
+        except Exception:
+            pass
+
+    return render(
+        request,
+        "elastic/manage.html",
+        {
+            "results": results,
+            "is_admin": is_admin,
+            "user_id": session_user_id,
+        },
+    )
+    # 规范化键，避免模板点号访问下划线前缀字段
+    results = []
+    for r in raw_results:
+        results.append({
+            "id": r.get("_id", ""),
+            "writer_id": r.get("writer_id", ""),
+            "image": r.get("image", ""),
+            "data": r.get("data", ""),
+        })
+    user_id_qs = request.GET.get("user_id")
+    context = {"items": results, "user_id": user_id_qs or session_user_id}
+    return render(request, "elastic/manage.html", context)
+
+
+@require_http_methods(["GET"])
+def analytics_trend_view(request):
+    try:
+        gte = request.GET.get("from")
+        lte = request.GET.get("to")
+        interval = request.GET.get("interval", "day")
+        data = es_analytics_trend(gte=gte, lte=lte, interval=interval)
+        return JsonResponse({"status": "success", "data": data})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def analytics_types_view(request):
+    try:
+        gte = request.GET.get("from")
+        lte = request.GET.get("to")
+        size = request.GET.get("size")
+        try:
+            size_int = int(size) if size is not None else 10
+        except Exception:
+            size_int = 10
+        data = es_analytics_types(gte=gte, lte=lte, size=size_int)
+        return JsonResponse({"status": "success", "data": data})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def analytics_types_trend_view(request):
+    try:
+        gte = request.GET.get("from")
+        lte = request.GET.get("to")
+        interval = request.GET.get("interval", "week")
+        size = request.GET.get("size")
+        try:
+            size_int = int(size) if size is not None else 8
+        except Exception:
+            size_int = 8
+        data = es_analytics_types_trend(gte=gte, lte=lte, interval=interval, size=size_int)
+        return JsonResponse({"status": "success", "data": data})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@require_http_methods(["GET"])
+def analytics_recent_view(request):
+    try:
+        limit = request.GET.get("limit")
+        gte = request.GET.get("from")
+        lte = request.GET.get("to")
+        try:
+            limit_int = int(limit) if limit is not None else 10
+        except Exception:
+            limit_int = 10
+        data = es_analytics_recent(limit=limit_int, gte=gte, lte=lte)
+        return JsonResponse({"status": "success", "data": data})
+    except Exception as e:
+        return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def user_manage(request):
+    session_user_id = request.session.get("user_id")
+    if session_user_id is None:
+        from django.shortcuts import redirect
+        return redirect("/accounts/login/")
+    is_admin = int(request.session.get("permission", 1)) == 0
+    me = get_user_by_id(session_user_id) or {}
+    has_manage = bool(me.get("manage_key"))
+    user_id_qs = request.GET.get("user_id")
+    context = {
+        "user_id": user_id_qs or session_user_id,
+        "is_admin": is_admin,
+        "is_tutor": (not is_admin) and has_manage,
+        "is_student": (not is_admin) and (not has_manage),
+    }
+    return render(request, "elastic/users.html", context)
+
+@require_http_methods(["GET"])
+@ensure_csrf_cookie
+def registration_code_manage_page(request):
+    session_user_id = request.session.get("user_id")
+    if session_user_id is None:
+        from django.shortcuts import redirect
+        return redirect("/accounts/login/")
+    if int(request.session.get("permission", 1)) != 0:
+        from django.shortcuts import redirect
+        return redirect("/main/home/")
+    user_id_qs = request.GET.get("user_id")
+    context = {"user_id": user_id_qs or session_user_id}
+    return render(request, "elastic/registration_codes.html", context)
+
+@require_http_methods(["GET"])
+def get_keys_list_view(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    lst = get_keys_list()
+    return JsonResponse({"status": "success", "data": lst})
+
+@require_http_methods(["POST"])
+@csrf_protect
+def add_key_view(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    key_name = (payload.get("key") or "").strip()
+    if not key_name:
+        return JsonResponse({"status": "error", "message": "key不能为空"}, status=400)
+    ok = ensure_key_in_list(key_name)
+    if not ok:
+        return JsonResponse({"status": "error", "message": "key已存在或写入失败"}, status=409)
+    return JsonResponse({"status": "success"})
+
+@require_http_methods(["POST"])
+@csrf_protect
+def generate_registration_code_view(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    keys = list(payload.get("keys") or [])
+    manage_keys = list(payload.get("manage_keys") or [])
+    try:
+        days = int(payload.get("expires_in_days", 30))
+    except Exception:
+        days = 30
+    result = generate_registration_code(keys=keys, manage_keys=manage_keys, expires_in_days=days, created_by=request.session.get("user_id"))
+    if not result:
+        return JsonResponse({"status": "error", "message": "生成失败"}, status=500)
+    return JsonResponse({"status": "success", "data": result})
+
+@require_http_methods(["GET"])
+def list_registration_codes_view(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    data = list_registration_codes()
+    return JsonResponse({"status": "success", "data": data})
+
+@require_http_methods(["POST"])
+@csrf_protect
+def revoke_registration_code_view(request):
+    if request.session.get("user_id") is None:
+        return JsonResponse({"status": "error", "message": "未登录"}, status=401)
+    if int(request.session.get("permission", 1)) != 0:
+        return JsonResponse({"status": "error", "message": "无权限"}, status=403)
+    try:
+        payload = json.loads(request.body.decode("utf-8"))
+    except Exception:
+        return JsonResponse({"status": "error", "message": "JSON无效"}, status=400)
+    code = (payload.get("code") or "").strip()
+    if not code:
+        return JsonResponse({"status": "error", "message": "缺少code"}, status=400)
+    ok = revoke_registration_code(code)
+    if not ok:
+        return JsonResponse({"status": "error", "message": "作废失败"}, status=500)
+    return JsonResponse({"status": "success"})

json_converter.py

@@ -1,100 +0,0 @@
-import json
-
-
-def json_to_string(json_data):
-    """
-    将JSON数据转换为使用指定分隔符的字符串
-    使用 |###| 作为键值对分隔符
-    使用 |##| 作为列表元素分隔符
-    
-    Args:
-        json_data (dict): 要转换的JSON数据
-        
-    Returns:
-        str: 转换后的字符串
-    """
-    if not isinstance(json_data, dict):
-        raise ValueError("输入必须是字典类型")
-    
-    result_parts = []
-    
-    for key, value in json_data.items():
-        if isinstance(value, list):
-            # 处理列表：使用 |##| 分隔列表元素
-            list_str = "|##|".join(str(item) for item in value)
-            result_parts.append(f"{key}:[{list_str}]")
-        else:
-            # 处理普通值
-            result_parts.append(f"{key}:{value}")
-    
-    # 使用 |###| 分隔键值对
-    return "|###|".join(result_parts)
-
-
-def string_to_json(data_string):
-    """
-    将使用指定分隔符的字符串转换回JSON格式
-    解析使用 |###| 分隔的键值对
-    解析使用 |##| 分隔的列表元素
-    
-    Args:
-        data_string (str): 要转换的字符串
-        
-    Returns:
-        dict: 转换后的JSON数据
-    """
-    if not isinstance(data_string, str):
-        raise ValueError("输入必须是字符串类型")
-    
-    if not data_string.strip():
-        return {}
-    
-    result = {}
-    
-    # 使用 |###| 分割键值对
-    pairs = data_string.split("|###|")
-    
-    for pair in pairs:
-        if ":" not in pair:
-            continue
-            
-        # 分割键和值
-        key, value = pair.split(":", 1)
-        key = key.strip()
-        value = value.strip()
-        
-        # 检查是否是列表格式 [...]
-        if value.startswith("[") and value.endswith("]"):
-            # 处理列表
-            list_content = value[1:-1]  # 去掉方括号
-            if list_content:
-                # 使用 |##| 分割列表元素
-                items = list_content.split("|##|")
-                # 尝试转换为适当的数据类型
-                converted_items = []
-                for item in items:
-                    item = item.strip()
-                    # 尝试转换为数字
-                    try:
-                        if "." in item:
-                            converted_items.append(float(item))
-                        else:
-                            converted_items.append(int(item))
-                    except ValueError:
-                        # 如果不是数字，保持为字符串
-                        converted_items.append(item)
-                result[key] = converted_items
-            else:
-                result[key] = []
-        else:
-            # 处理普通值，尝试转换为适当的数据类型
-            try:
-                if "." in value:
-                    result[key] = float(value)
-                else:
-                    result[key] = int(value)
-            except ValueError:
-                # 如果不是数字，保持为字符串
-                result[key] = value
-    
-    return result

main/__init__.py

@@ -0,0 +1 @@
+"""Main app for home page (login required)."""

main/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class MainConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'main'

main/templates/main/home.html

@@ -0,0 +1,247 @@
+<!DOCTYPE html>
+{% load static %}
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <title>数据管理系统</title>
+  <script src="{% static 'vendor/echarts.min.js' %}"></script>
+  <style>
+    body {margin: 0;font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif;background: #fafafa;}
+    /* 导航栏样式 */
+    .sidebar {position: fixed;top: 0;left: 0;width: 180px;height: 100vh;background: #1e1e2e;color: white;padding: 20px;box-shadow: 2px 0 5px rgba(0,0,0,0.1);z-index: 1000;display: flex;
+    flex-direction: column;align-items: center;}
+    .user-id {text-align: center;margin-bottom: 0px;}
+    .sidebar h3 {margin-top: 0;font-size: 18px;color: #add8e6;text-align: center; margin-bottom: 20px;}
+    .navigation-links {width: 100%;margin-top: 60px;}
+    .sidebar a,
+    .sidebar button {display: block;color: #8be9fd;text-decoration: none;margin: 10px 0;font-size: 16px;padding: 15px;border-radius: 4px;background: transparent;
+      border: none;cursor: pointer; width: calc(100% - 40px);text-align: left;transition: all 0.2s ease;}
+    .sidebar a:hover,
+    .sidebar button:hover {color: #ff79c6;background-color: rgba(139, 233, 253, 0.2);}
+    /* 主内容区 */
+    .main-content {margin-left: 200px;padding: 20px;color: #333;}
+    .card {background: #fff;border-radius: 14px;box-shadow: 0 10px 24px rgba(31,35,40,0.08);padding: 20px;}
+    .grid {display: grid;grid-template-columns: repeat(2, 1fr);gap: 16px;}
+    .grid-3 {display: grid;grid-template-columns: repeat(3, 1fr);gap: 16px; }
+    .header {display: flex;align-items: center;     justify-content: space-between;     margin-bottom: 12px;    }
+    .badge { background: #eef2ff; color: #3730a3; border-radius: 999px;  padding: 4px 10px;     font-size: 12px;    }
+    .legend {display: flex;gap: 12px;align-items: center;}
+    .legend .dot { width: 8px;height: 8px;border-radius: 50%;display: inline-block; }
+    .muted {color: #6b7280;font-size: 12px;}
+    .btn {padding: 8px 12px;border: none; border-radius: 8px;cursor: pointer; }
+    .btn-primary {background: #4f46e5;color: #fff;}
+  </style>
+</head>
+<body>
+  <!-- 左侧固定栏目 -->
+  <div class="sidebar">
+    <div class="user-id">
+      <h3>你好，{{ username|default:"访客" }}</h3>
+    </div>
+    <div class="navigation-links">
+      <a href="{% url 'main:home' %}" onclick="return handleNavClick(this, '/');">主页</a>
+      <a href="{% url 'elastic:upload_page' %}" onclick="return handleNavClick(this, '/elastic/upload/');">图片上传与识别</a>
+      <a href="{% url 'elastic:manage_page' %}" onclick="return handleNavClick(this, '/elastic/manage/');">数据管理</a>
+      <a href="{% url 'elastic:user_manage' %}" onclick="return handleNavClick(this, '/elastic/user_manage/');">用户管理</a>
+      {% if is_admin %}
+      <a href="{% url 'elastic:registration_code_manage_page' %}" onclick="return handleNavClick(this, '/elastic/registration-codes/manage/');">注册码管理</a>
+      {% endif %}
+      <a id="logoutBtn">退出登录</a>
+      <div id="logoutMsg"></div>
+      {% csrf_token %}
+    </div>
+  </div>
+
+  <!-- 主内容区域 -->
+  <div class="main-content">
+    <div class="card">
+      <div class="header">
+        <h2>师生共创系统</h2>
+        <span class="badge">用户：{{ user_id }}</span>
+      </div>
+      <div class="muted">数据可视化概览：录入量变化、类型占比、类型变化、最近活动</div>
+    </div>
+    <div class="grid" style="margin-top:16px;">
+      <div class="card">
+        <div class="header"><h3>录入量变化（近90天）</h3></div>
+        <div id="chartTrend" style="width:100%;height:320px;"></div>
+      </div>
+      <div class="card">
+        <div class="header"><h3>类型占比（近30天）</h3></div>
+        <div id="chartTypes" style="width:100%;height:320px;"></div>
+      </div>
+      <div class="card">
+        <div class="header"><h3>类型变化（近180天，按周）</h3></div>
+        <div id="chartTypesTrend" style="width:100%;height:320px;"></div>
+      </div>
+      <div class="card">
+        <div class="header"><h3>最近活动（近7天）</h3></div>
+        <ul id="recentList" style="list-style:none;padding:0;margin:0;"></ul>
+      </div>
+    </div>
+  </div>
+
+  <script>
+    // 获取CSRF令牌的函数
+    function getCookie(name) {
+        const value = `; ${document.cookie}`;
+        const parts = value.split(`; ${name}=`);
+        if (parts.length === 2) return parts.pop().split(';').shift();
+    }
+
+    // 导航点击处理函数，提供备用URL
+    function handleNavClick(element, fallbackUrl) {
+        // 尝试使用Django模板生成的URL，如果失败则使用备用URL
+        try {
+            // 如果模板渲染正常，直接返回true让默认行为处理
+            return true;
+        } catch (e) {
+            // 如果模板渲染有问题，使用备用URL
+            window.location.href = fallbackUrl;
+            return false;
+        }
+    }
+
+    // 修复用户管理链接跳转问题
+    document.addEventListener('DOMContentLoaded', function() {
+        // 为用户管理链接添加事件监听器，确保正确跳转
+        const userManagementLink = document.querySelector('a[href*="get_users"]');
+        if (userManagementLink) {
+            userManagementLink.addEventListener('click', function(e) {
+                // 阻止默认行为
+                e.preventDefault();
+
+                // 获取备用URL
+                const fallbackUrl = this.getAttribute('onclick').match(/'([^']+)'/g)[1].replace(/'/g, '');
+
+                // 直接跳转到用户管理页面
+                window.location.href = fallbackUrl;
+            });
+        }
+    });
+
+    // 登出功能
+    document.getElementById('logoutBtn').addEventListener('click', async () => {
+        const msg = document.getElementById('logoutMsg');
+        msg.textContent = '';
+        const csrftoken = getCookie('csrftoken');
+        try {
+            const resp = await fetch('/accounts/logout/', {
+                method: 'POST',
+                credentials: 'same-origin',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-CSRFToken': csrftoken || ''
+                },
+                body: JSON.stringify({})
+            });
+            const data = await resp.json();
+            if (!resp.ok || !data.ok) {
+                throw new Error('登出失败');
+            }
+            document.cookie = 'sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            document.cookie = 'csrftoken=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/';
+            window.location.href = data.redirect_url;
+        } catch (e) {
+            msg.textContent = e.message || '发生错误';
+        }
+    });
+
+    
+    function fetchJSON(url){ return fetch(url, {credentials:'same-origin'}).then(r=>r.json()); }
+    function qs(params){ const u = new URLSearchParams(params); return u.toString(); }
+
+    const trendChart = echarts.init(document.getElementById('chartTrend'));
+    const typesChart = echarts.init(document.getElementById('chartTypes'));
+    const typesTrendChart = echarts.init(document.getElementById('chartTypesTrend'));
+
+    async function loadTrend(){
+      const url = '/elastic/analytics/trend/?' + qs({ from:'now-90d', to:'now', interval:'day' });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const buckets = res.data || [];
+      const x = buckets.map(b=>b.key_as_string||'');
+      const y = buckets.map(b=>b.doc_count||0);
+      trendChart.setOption({
+        tooltip:{trigger:'axis'},
+        xAxis:{type:'category', data:x},
+        yAxis:{type:'value'},
+        series:[{ type:'line', areaStyle:{}, data:y, smooth:true, color:'#4f46e5' }]
+      });
+    }
+
+    async function loadTypes(){
+      const url = '/elastic/analytics/types/?' + qs({ from:'now-30d', to:'now', size:10 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const buckets = res.data || [];
+      const data = buckets.map(b=>({ name: String(b.key||'未知'), value: b.doc_count||0 }));
+      typesChart.setOption({
+        tooltip:{trigger:'item'},
+        legend:{type:'scroll'},
+        series:[{ type:'pie', radius:['40%','70%'], data }]
+      });
+    }
+
+    async function loadTypesTrend(){
+      const url = '/elastic/analytics/types_trend/?' + qs({ from:'now-180d', to:'now', interval:'week', size:6 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const rows = res.data || [];
+      const x = rows.map(r=>r.key_as_string||'');
+      const typeSet = new Set();
+      rows.forEach(r=> (r.types||[]).forEach(t=> typeSet.add(String(t.key||'未知'))));
+      const types = Array.from(typeSet);
+      const series = types.map(tp=>({
+        name: tp,
+        type:'line',
+        smooth:true,
+        data: rows.map(r=>{
+          const b = (r.types||[]).find(x=>String(x.key||'')===tp);
+          return b? b.doc_count||0 : 0;
+        })
+      }));
+      typesTrendChart.setOption({
+        tooltip:{trigger:'axis'},
+        legend:{type:'scroll'},
+        xAxis:{type:'category', data:x},
+        yAxis:{type:'value'},
+        series
+      });
+    }
+
+    function formatTime(t){
+      try{
+        const d = new Date(t);
+        if(String(d) !== 'Invalid Date'){
+          const pad = n=> String(n).padStart(2,'0');
+          return `${d.getFullYear()}-${pad(d.getMonth()+1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+        }
+      }catch(e){}
+      return t||'';
+    }
+
+    async function loadRecent(){
+      const listEl = document.getElementById('recentList');
+      const url = '/elastic/analytics/recent/?' + qs({ from:'now-7d', to:'now', limit:10 });
+      const res = await fetchJSON(url);
+      if(res.status!=='success') return;
+      const items = res.data || [];
+      listEl.innerHTML = '';
+      items.forEach(it=>{
+        const li = document.createElement('li');
+        const t = formatTime(it.time);
+        const u = it.username || '';
+        const ty = it.type || '未知';
+        li.textContent = `${t}，${u}，${ty}`;
+        listEl.appendChild(li);
+      });
+    }
+
+    loadTrend();
+    loadTypes();
+    loadTypesTrend();
+    loadRecent();
+  </script>
+</body>
+</html>

main/urls.py

@@ -0,0 +1,9 @@
+from django.urls import path
+from . import views
+
+
+app_name = "main"
+
+urlpatterns = [
+    path("home/", views.home, name="home"),
+]

main/views.py

@@ -0,0 +1,33 @@
+from django.shortcuts import render, redirect
+from django.views.decorators.http import require_http_methods
+from elastic.es_connect import get_user_by_id
+
+
+@require_http_methods(["GET"])
+def home(request):
+    # Enforce login: require session user_id
+    session_user_id = request.session.get("user_id")
+    if session_user_id is None:
+        return redirect("/accounts/login/")
+
+    # Show user_id (prefer query param if present, but don't trust it)
+    user_id_qs = request.GET.get("user_id")
+    uid = user_id_qs or session_user_id
+    perm = request.session.get("permission")
+    if perm is None and uid is not None:
+        u = get_user_by_id(uid)
+        try:
+            perm = int((u or {}).get("permission", 1))
+        except Exception:
+            perm = 1
+        request.session["permission"] = perm
+    else:
+        try:
+            perm = int(perm)
+        except Exception:
+            perm = 1
+    context = {
+        "user_id": uid,
+        "is_admin": (int(perm) == 0),
+    }
+    return render(request, "main/home.html", context)

manage.py

@@ -0,0 +1,22 @@
+#!/usr/bin/env python
+"""Django's command-line utility for administrative tasks."""
+import os
+import sys
+
+
+def main():
+    """Run administrative tasks."""
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'Achievement_Inputing.settings')
+    try:
+        from django.core.management import execute_from_command_line
+    except ImportError as exc:
+        raise ImportError(
+            "Couldn't import Django. Are you sure it's installed and "
+            "available on your PYTHONPATH environment variable? Did you "
+            "forget to activate a virtual environment?"
+        ) from exc
+    execute_from_command_line(sys.argv)
+
+
+if __name__ == '__main__':
+    main()

requirements.txt

@@ -1,6 +1,14 @@
-flask==3.1.1
-pillow==11.1.0
-openai==1.88.0
-elasticsearch==7.17.0
-pandas==2.2.3
-requests
+Django==5.2.8
+elasticsearch==7.17.9
+django-elasticsearch-dsl==7.4.0
+django-elasticsearch-dsl-drf==0.22
+elasticsearch-dsl==7.4.1
+requests==2.32.3
+openai==1.52.2
+httpx==0.27.2
+Pillow==10.4.0
+gunicorn==21.2.0
+whitenoise==6.6.0
+django-browser-reload==1.21.0
+captcha==0.7.1
+cryptography==46.0.3

templates/all.html

@@ -1,178 +0,0 @@
-{% extends "base.html" %}
-
-{% block title %}数据操作 - 紫金·稷下薪火·云枢智海师生成果共创系统{% endblock %}
-
-{% block content %}
-<style>
-    /* 基础样式重置 */
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-
-    /* 容器样式 - 调整为靠左靠上 */
-    .container {
-        max-width: 1200px;
-        margin: 0; /* 移除自动居中 */
-        padding: 20px 0 0 20px; /* 顶部和左侧留白 */
-    }
-
-    /* 标题样式 - 减少底部边距 */
-    h2 {
-        color: #2c3e50;
-        border-bottom: 2px solid #3498db;
-        padding-bottom: 8px;
-        margin-bottom: 15px; /* 减少间距 */
-    }
-
-    /* 描述文字样式 */
-    p {
-        margin-bottom: 15px;
-    }
-
-    /* 表格容器 - 顶部边距调整 */
-    .table-container {
-        overflow-x: auto;
-        margin-top: 15px; /* 减少顶部间距 */
-        border-radius: 8px;
-        box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-    }
-
-    /* 表格样式 */
-    table {
-        width: 100%;
-        border-collapse: collapse;
-        font-family: 'Segoe UI', Arial, sans-serif;
-    }
-
-    /* 表头样式 */
-    thead {
-        background: linear-gradient(135deg, #3498db, #1a5276);
-        color: white;
-    }
-
-    th {
-        padding: 16px 12px;
-        text-align: left;
-        font-weight: 600;
-    }
-
-    /* 表格行样式 */
-    tbody tr {
-        border-bottom: 1px solid #eef1f5;
-        transition: background-color 0.3s;
-    }
-
-    tbody tr:nth-child(even) {
-        background-color: #f8fafc;
-    }
-
-    tbody tr:hover {
-        background-color: #e3f2fd;
-    }
-
-    td {
-        padding: 14px 12px;
-        color: #4a5568;
-    }
-
-    /* 操作按钮样式 */
-    .action-button {
-        padding: 6px 16px;
-        border: none;
-        border-radius: 4px;
-        cursor: pointer;
-        font-weight: 500;
-        transition: all 0.3s;
-        margin: 0 2px;
-    }
-
-    .edit-btn {
-        background: linear-gradient(to right, #4CAF50, #45a049);
-        color: white;
-    }
-
-    .edit-btn:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(76, 175, 80, 0.3);
-    }
-
-    .delete-btn {
-        background: linear-gradient(to right, #ff416c, #ff4b2b);
-        color: white;
-    }
-
-    .delete-btn:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(255, 75, 43, 0.3);
-    }
-
-    /* 返回按钮样式 */
-    .back-btn {
-        display: inline-block;
-        padding: 10px 20px;
-        background: linear-gradient(to right, #0066cc, #003399);
-        color: white;
-        text-decoration: none;
-        border-radius: 6px;
-        margin-top: 15px; /* 减少顶部间距 */
-        margin-left: 20px; /* 左侧对齐 */
-        transition: transform 0.3s;
-    }
-
-    .back-btn:hover {
-        transform: translateY(-3px);
-        box-shadow: 0 5px 15px rgba(0, 102, 204, 0.4);
-    }
-
-    /* 空数据提示 */
-    .no-data {
-        text-align: center;
-        padding: 40px 0;
-        color: #a0aec0;
-        font-style: italic;
-    }
-</style>
-
-<div class="container">
-    <h2>所有已录入的奖项信息</h2>
-    <p>在此页面可以查看所有已录入的成果信息，并进行编辑和删除操作</p>
-
-    <div class="table-container">
-        <table>
-            <thead>
-                <tr>
-                    <th>比赛/论文名称</th>
-                    <th>项目名称</th>
-                    <th>学生</th>
-                    <th>指导老师</th>
-                    <th style="text-align: center;">操作</th>
-                </tr>
-            </thead>
-            <tbody>
-                {% if data %}
-                    {% for item in data %}
-                        <tr>
-                            <td>{{ item.id or '无' }}</td>
-                            <td>{{ item.name or '无' }}</td>
-                            <td>{% if item.students is string %}{{ item.students or '无' }}{% else %}{{ item.students|join(', ') if item.students else '无' }}{% endif %}</td>
-                            <td>{% if item.teacher is string %}{{ item.teacher or '无' }}{% else %}{{ item.teacher|join(', ') if item.teacher else '无' }}{% endif %}</td>
-                            <td style="text-align: center;">
-                                <div style="display: flex; justify-content: center; gap: 8px;">
-                                    <a href="{{ url_for('edit_entry', doc_id=item._id) }}" class="action-button edit-btn">编辑</a>
-                                    <form action="{{ url_for('delete_entry', doc_id=item._id) }}" method="POST" onsubmit="return confirm('确定要删除这条记录吗？')" style="margin: 0;">
-                                        <button type="submit" class="action-button delete-btn">删除</button>
-                                    </form>
-                                </div>
-                            </td>
-                        </tr>
-                    {% endfor %}
-                {% else %}
-                    <tr>
-                        <td colspan="5" class="no-data">暂无数据</td>
-                    </tr>
-                {% endif %}
-            </tbody>
-        </table>
-    </div>
-
-    <a href="{{ url_for('index') }}" class="back-btn">返回首页</a>
-</div>
-{% endblock %}

templates/base.html

@@ -1,177 +0,0 @@
-<!DOCTYPE html>
-<html lang="zh">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>{% block title %}紫金·稷下薪火·云枢智海师生成果共创系统{% endblock %}</title>
-    <style>
-        :root {
-            --primary: #4361ee;
-            --primary-light: #4895ef;
-            --secondary: #3f37c9;
-            --accent: #f72585;
-            --light: #f8f9fa;
-            --dark: #212529;
-            --success: #4cc9f0;
-            --warning: #fcaa18;
-            --radius: 8px;
-            --shadow: 0 4px 12px rgba(0,0,0,0.1);
-            --transition: all 0.3s ease;
-        }
-
-        body {
-            font-family: 'Segoe UI', 'Microsoft YaHei', sans-serif;
-            margin: 0;
-            padding: 0;
-            background-color: #f5f7fb;
-            color: #333;
-            line-height: 1.6;
-        }
-
-        .header {
-            background: linear-gradient(135deg, var(--primary), var(--secondary));
-            color: white;
-            padding: 15px 20px;
-            box-shadow: var(--shadow);
-            position: relative;
-            overflow: hidden;
-        }
-
-        .header:before {
-            content: "";
-            position: absolute;
-            top: -50%;
-            left: -50%;
-            width: 200%;
-            height: 200%;
-            background: radial-gradient(circle, rgba(255,255,255,0.1) 0%, transparent 60%);
-            pointer-events: none;
-        }
-
-        .header h1 {
-            margin: 0;
-            display: flex;
-            align-items: center;
-            font-size: 24px;
-            position: relative;
-            z-index: 1;
-        }
-
-        .header h1 span {
-            color: #ffcc00;
-            text-shadow: 0 0 5px rgba(0,0,0,0.2);
-        }
-
-        .sidebar {
-            width: 240px;
-            height: calc(100vh - 60px);
-            float: left;
-            background: linear-gradient(to bottom, #ffffff, #f5f7fb);
-            padding: 20px 0;
-            box-shadow: 2px 0 10px rgba(0,0,0,0.05);
-            transition: var(--transition);
-        }
-
-        .sidebar a {
-            display: flex;
-            align-items: center;
-            padding: 15px 25px;
-            text-decoration: none;
-            color: var(--dark);
-            font-size: 16px;
-            transition: var(--transition);
-            border-left: 3px solid transparent;
-        }
-
-        .sidebar a:hover {
-            background-color: rgba(67, 97, 238, 0.08);
-            border-left-color: var(--primary);
-        }
-
-        .sidebar a.active {
-            background-color: rgba(67, 97, 238, 0.15);
-            border-left-color: var(--primary);
-            font-weight: 500;
-        }
-
-        .sidebar a i {
-            margin-right: 12px;
-            font-size: 18px;
-        }
-
-        .content {
-            margin-left: 240px;
-            padding: 30px;
-            background-color: white;
-            min-height: calc(100vh - 60px);
-            box-shadow: -2px 0 10px rgba(0,0,0,0.05);
-        }
-
-        .card {
-            background: white;
-            border-radius: var(--radius);
-            box-shadow: var(--shadow);
-            padding: 25px;
-            margin-bottom: 20px;
-        }
-
-        @media (max-width: 768px) {
-            .sidebar {
-                width: 100%;
-                height: auto;
-                position: fixed;
-                bottom: 0;
-                left: 0;
-                display: flex;
-                justify-content: space-around;
-                padding: 10px 0;
-                z-index: 100;
-            }
-
-            .sidebar a {
-                padding: 12px 15px;
-                border-left: none;
-                text-align: center;
-                font-size: 14px;
-            }
-
-            .sidebar a i {
-                display: block;
-                margin-right: 0;
-                margin-bottom: 5px;
-            }
-
-            .content {
-                margin-left: 0;
-                padding: 20px 15px;
-                min-height: calc(100vh - 110px);
-            }
-        }
-    </style>
-</head>
-<body>
-    <div class="header">
-        <h1><span>紫金</span> 稷下薪火·云枢智海师生成果共创系统</h1>
-    </div>
-
-    <div class="sidebar">
-        <a href="{{ url_for('index') }}" {% if request.endpoint == 'index' %}class="active"{% endif %}>
-            <i>📊</i> 录入成果
-        </a>
-        <a href="{{ url_for('results_page') }}" {% if request.endpoint == 'results_page' %}class="active"{% endif %}>
-            <i>📈</i> 查询统计
-        </a>
-        <a href="{{ url_for('show_all') }}" {% if request.endpoint == 'show_all' %}class="active"{% endif %}>
-            <i>📁</i> 数据操作
-        </a>
-    </div>
-
-    <div class="content">
-        {% block content %}
-        {% endblock %}
-    </div>
-
-    <!-- 添加字体图标库 -->
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
-</body>
-</html>

templates/edit.html

@@ -1,256 +0,0 @@
-{% extends "base.html" %}
-
-{% block title %}编辑数据 - 紫金·稷下薪火·云枢智海师生成果共创系统{% endblock %}
-
-{% block content %}
-<style>
-    /* 基础样式重置 */
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-
-    /* 容器样式 */
-    .container {
-        max-width: 800px;
-        margin: 0 auto;
-        padding: 20px;
-    }
-
-    /* 标题样式 */
-    h2 {
-        color: #2c3e50;
-        border-bottom: 2px solid #3498db;
-        padding-bottom: 8px;
-        margin-bottom: 20px;
-    }
-
-    /* 表单样式 */
-    .form-container {
-        background: white;
-        border-radius: 8px;
-        box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-        padding: 30px;
-    }
-
-    .form-group {
-        margin-bottom: 20px;
-    }
-
-    .form-group label {
-        display: block;
-        margin-bottom: 8px;
-        font-weight: 600;
-        color: #2c3e50;
-    }
-
-    .form-group input,
-    .form-group textarea {
-        width: 100%;
-        padding: 12px;
-        border: 2px solid #e1e8ed;
-        border-radius: 6px;
-        font-size: 14px;
-        transition: border-color 0.3s;
-    }
-
-    .form-group input:focus,
-    .form-group textarea:focus {
-        outline: none;
-        border-color: #3498db;
-        box-shadow: 0 0 0 3px rgba(52, 152, 219, 0.1);
-    }
-
-    .form-group textarea {
-        resize: vertical;
-        min-height: 80px;
-    }
-
-    .form-hint {
-        font-size: 12px;
-        color: #7f8c8d;
-        margin-top: 5px;
-    }
-
-    /* 按钮样式 */
-    .button-group {
-        display: flex;
-        gap: 15px;
-        margin-top: 30px;
-    }
-
-    .btn {
-        padding: 12px 24px;
-        border: none;
-        border-radius: 6px;
-        font-size: 14px;
-        font-weight: 600;
-        cursor: pointer;
-        transition: all 0.3s;
-        text-decoration: none;
-        display: inline-block;
-        text-align: center;
-    }
-
-    .btn-primary {
-        background: linear-gradient(to right, #3498db, #2980b9);
-        color: white;
-    }
-
-    .btn-primary:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(52, 152, 219, 0.3);
-    }
-
-    .btn-secondary {
-        background: linear-gradient(to right, #95a5a6, #7f8c8d);
-        color: white;
-    }
-
-    .btn-secondary:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(149, 165, 166, 0.3);
-    }
-
-    .btn-danger {
-        background: linear-gradient(to right, #e74c3c, #c0392b);
-        color: white;
-    }
-
-    .btn-danger:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(231, 76, 60, 0.3);
-    }
-
-    /* 图片预览样式 */
-    .image-preview {
-        margin-top: 10px;
-        text-align: center;
-    }
-
-    .image-preview img {
-        max-width: 200px;
-        max-height: 200px;
-        border-radius: 6px;
-        box-shadow: 0 2px 4px rgba(0,0,0,0.1);
-    }
-
-    /* 错误提示样式 */
-    .error-message {
-        color: #e74c3c;
-        font-size: 12px;
-        margin-top: 5px;
-    }
-
-    /* 必填字段标记 */
-    .required {
-        color: #e74c3c;
-    }
-</style>
-
-<div class="container">
-    <h2>编辑成果信息</h2>
-    
-    <div class="form-container">
-        <form action="{{ url_for('update_entry', doc_id=document._id) }}" method="POST" id="editForm">
-            {% if document.data %}
-                {# 从原始数据中解析字段 #}
-                {% set data_string = document.data %}
-                {% set pairs = data_string.split('|###|') %}
-                
-                {% for pair in pairs %}
-                    {% if ':' in pair %}
-                        {% set key_value = pair.split(':', 1) %}
-                        {% set field_key = key_value[0].strip() %}
-                        {% set field_value = key_value[1].strip() %}
-                        
-                        {# 处理列表格式 [item1|##|item2] #}
-                        {% if field_value.startswith('[') and field_value.endswith(']') %}
-                            {% set list_content = field_value[1:-1] %}
-                            {% set field_value = list_content.split('|##|')|join(', ') %}
-                        {% endif %}
-                        
-                        <div class="form-group">
-                            <label for="field_{{ loop.index }}">{{ field_key }} <span class="required">*</span></label>
-                            <input type="text" id="field_{{ loop.index }}" name="field_{{ loop.index }}" value="{{ field_value }}" required>
-                            <input type="hidden" name="key_{{ loop.index }}" value="{{ field_key }}">
-                        </div>
-                    {% endif %}
-                {% endfor %}
-            {% else %}
-                {# 如果没有data字段，显示提示信息 #}
-                <div class="form-group">
-                    <p style="color: #e74c3c; text-align: center;">该记录没有可编辑的数据</p>
-                </div>
-            {% endif %}
-
-            {% if document.image %}
-            <div class="form-group">
-                <label>原图片预览</label>
-                <div class="image-preview">
-                    <img src="{{ url_for('serve_image', filename=document.image) }}" alt="原图片" onerror="this.style.display='none'">
-                </div>
-                <div class="form-hint">当前关联的图片，编辑时无法修改图片</div>
-            </div>
-            {% endif %}
-
-            <div class="button-group">
-                <button type="submit" class="btn btn-primary">保存修改</button>
-                <a href="{{ url_for('show_all') }}" class="btn btn-secondary">取消返回</a>
-                <button type="button" class="btn btn-danger" onclick="confirmDelete()">删除记录</button>
-            </div>
-        </form>
-    </div>
-</div>
-
-<script>
-    // 表单验证
-    document.getElementById('editForm').addEventListener('submit', function(e) {
-        // 检查所有字段是否都有值
-        const inputs = document.querySelectorAll('input[type="text"]');
-        let hasEmptyField = false;
-        
-        inputs.forEach(input => {
-            if (!input.value.trim()) {
-                hasEmptyField = true;
-                input.style.borderColor = '#e74c3c';
-            } else {
-                input.style.borderColor = '#e1e8ed';
-            }
-        });
-        
-        if (hasEmptyField) {
-            e.preventDefault();
-            alert('所有字段都必须填写！');
-            return false;
-        }
-        
-        return true;
-    });
-
-    // 删除确认
-    function confirmDelete() {
-        if (confirm('确定要删除这条记录吗？此操作不可撤销！')) {
-            // 创建删除表单并提交
-            const form = document.createElement('form');
-            form.method = 'POST';
-            form.action = '{{ url_for("delete_entry", doc_id=document._id) }}';
-            document.body.appendChild(form);
-            form.submit();
-        }
-    }
-
-    // 自动格式化逗号分隔的值
-    document.querySelectorAll('input[type="text"]').forEach(input => {
-        input.addEventListener('blur', function(e) {
-            const value = e.target.value.trim();
-            if (value && value.includes(',')) {
-                // 格式化逗号分隔的值
-                const formatted = value
-                    .split(',')
-                    .map(item => item.trim())
-                    .filter(item => item)
-                    .join(', ');
-                e.target.value = formatted;
-            }
-        });
-    });
-</script>
-{% endblock %}

templates/index.html

@@ -1,238 +0,0 @@
-{% extends "base.html" %}
-
-{% block title %}录入成果 - 紫金·稷下薪火·云枢智海师生成果共创系统{% endblock %}
-
-{% block content %}
-<div class="card">
-    <h2 style="color: var(--primary); border-bottom: 2px solid var(--primary); padding-bottom: 10px;">
-        <i class="fas fa-cloud-upload-alt"></i> 成果录入
-    </h2>
-    <p class="mb-4">请上传包含成果信息的图片（如获奖证书、论文封面等），系统将自动识别关键信息</p>
-
-    <form id="upload-form" enctype="multipart/form-data" class="mb-4">
-        <div class="mb-3">
-            <label for="file" class="form-label">选择图片文件</label>
-            <input type="file" name="file" accept="image/*" id="file" class="form-control" required>
-            <div class="form-text">支持JPG、PNG、GIF等格式，文件大小不超过10MB</div>
-        </div>
-        <button type="submit" class="btn btn-primary btn-lg">
-            <i class="fas fa-upload"></i> 上传图片
-        </button>
-    </form>
-
-    <div id="result" class="mt-4"></div>
-</div>
-
-<script>
-    document.getElementById("upload-form").addEventListener("submit", function (e) {
-        e.preventDefault();
-        let formData = new FormData(this);
-        const resultDiv = document.getElementById("result");
-
-        // 显示上传进度动画
-        resultDiv.innerHTML = `
-            <div class="progress-container">
-                <div class="progress-bar"></div>
-                <p class="progress-text">正在处理图片，请稍候...</p>
-            </div>
-        `;
-
-        fetch("/upload", { method: "POST", body: formData })
-            .then(res => res.json())
-            .then(data => {
-                if(data.error) {
-                    resultDiv.innerHTML = `
-                        <div class="alert alert-danger">
-                            <i class="fas fa-exclamation-circle"></i> 错误: ${data.error}
-                        </div>
-                    `;
-                } else {
-                    const resultHtml = `
-                        <div class="result-card">
-                            <div class="result-header">
-                                <h3><i class="fas fa-check-circle"></i> 识别成功</h3>
-                                <p class="timestamp">${new Date().toLocaleString()}</p>
-                            </div>
-                            <div class="result-content">
-                                ${Object.entries(data.data).map(([key, value]) => `
-                                    <div class="result-item">
-                                        <span class="result-label">${key.replace(/_/g, ' ')}</span>
-                                        <span class="result-value">${value}</span>
-                                    </div>
-                                `).join('')}
-                            </div>
-                            <div class="result-footer">
-                                <p class="success-message">${data.message}</p>
-                                <button class="btn btn-outline-primary copy-btn" data-clipboard-text="${JSON.stringify(data.data)}">
-                                    <i class="fas fa-copy"></i> 复制结果
-                                </button>
-                            </div>
-                        </div>
-                    `;
-                    resultDiv.innerHTML = resultHtml;
-
-                    // 添加复制按钮功能
-                    document.querySelector('.copy-btn').addEventListener('click', function() {
-                        navigator.clipboard.writeText(this.getAttribute('data-clipboard-text'));
-                        alert('结果已复制到剪贴板！');
-                    });
-                }
-            })
-            .catch(error => {
-                resultDiv.innerHTML = `
-                    <div class="alert alert-danger">
-                        <i class="fas fa-exclamation-circle"></i> 上传失败: ${error}
-                    </div>
-                `;
-            });
-    });
-</script>
-
-<style>
-    .btn-primary {
-        background: linear-gradient(135deg, var(--primary), var(--primary-light));
-        border: none;
-        border-radius: 30px;
-        padding: 12px 24px;
-        font-weight: 500;
-        transition: var(--transition);
-        box-shadow: 0 4px 8px rgba(67, 97, 238, 0.2);
-    }
-
-    .btn-primary:hover {
-        background: linear-gradient(135deg, var(--primary-light), var(--primary));
-        transform: translateY(-2px);
-        box-shadow: 0 6px 12px rgba(67, 97, 238, 0.3);
-    }
-
-    .form-control {
-        width: 100%;
-        padding: 12px;
-        border: 1px solid #ddd;
-        border-radius: 8px;
-        font-size: 16px;
-        transition: var(--transition);
-    }
-
-    .form-control:hover {
-        border-color: var(--primary);
-    }
-
-    .progress-container {
-        background-color: #f8f9fa;
-        border-radius: 8px;
-        padding: 20px;
-        text-align: center;
-    }
-
-    .progress-bar {
-        width: 100%;
-        height: 8px;
-        background-color: #e9ecef;
-        border-radius: 4px;
-        margin-bottom: 15px;
-        position: relative;
-        overflow: hidden;
-    }
-
-    .progress-bar::after {
-        content: "";
-        position: absolute;
-        top: 0;
-        left: -100%;
-        width: 80%;
-        height: 100%;
-        background: linear-gradient(90deg, transparent, #4cc9f0, transparent);
-        animation: progress 1.5s infinite;
-    }
-
-    @keyframes progress {
-        0% { left: -100%; }
-        100% { left: 200%; }
-    }
-
-    .progress-text {
-        color: #6c757d;
-        font-size: 16px;
-    }
-
-    .alert {
-        padding: 15px;
-        border-radius: 8px;
-    }
-
-    .alert-danger {
-        background-color: #ffe3e3;
-        color: #d32f2f;
-        border-left: 4px solid #d32f2f;
-    }
-
-    .result-card {
-        background: white;
-        border-radius: 12px;
-        box-shadow: var(--shadow);
-        padding: 20px;
-        border-left: 4px solid var(--success);
-    }
-
-    .result-header {
-        display: flex;
-        justify-content: space-between;
-        align-items: center;
-        padding-bottom: 15px;
-        border-bottom: 1px solid #eee;
-    }
-
-    .result-header h3 {
-        color: var(--success);
-        margin: 0;
-    }
-
-    .timestamp {
-        color: #6c757d;
-        font-size: 14px;
-    }
-
-    .result-item {
-        display: flex;
-        justify-content: space-between;
-        padding: 12px 0;
-        border-bottom: 1px solid #f0f0f0;
-    }
-
-    .result-label {
-        font-weight: 500;
-        color: #495057;
-    }
-
-    .result-value {
-        color: #333;
-        max-width: 70%;
-        word-break: break-word;
-    }
-
-    .result-footer {
-        margin-top: 20px;
-        text-align: center;
-    }
-
-    .success-message {
-        color: var(--success);
-        font-weight: 500;
-        margin-bottom: 15px;
-    }
-
-    .btn-outline-primary {
-        border: 1px solid var(--primary);
-        color: var(--primary);
-        border-radius: 6px;
-        padding: 8px 16px;
-        transition: var(--transition);
-    }
-
-    .btn-outline-primary:hover {
-        background-color: var(--primary);
-        color: white;
-    }
-</style>
-{% endblock %}

templates/results.html

@@ -1,182 +0,0 @@
-
-
-{% extends "base.html" %}
-
-{% block title %}查询统计 - 紫金·稷下薪火·云枢智海师生成果共创系统{% endblock %}
-
-{% block content %}
-<style>
-    /* 基础样式重置 */
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-    
-    /* 主体布局 */
-    .container {
-        max-width: 1200px;
-        margin: 0 auto;
-        padding: 20px;
-    }
-    
-    /* 标题样式 */
-    h2 {
-        color: #2c3e50;
-        border-bottom: 2px solid #3498db;
-        padding-bottom: 10px;
-        margin-bottom: 20px;
-    }
-    
-    /* 搜索区域样式 */
-    .search-container {
-        background: #f8f9fa;
-        padding: 25px;
-        border-radius: 10px;
-        box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-        margin-bottom: 30px;
-    }
-    
-    .search-form {
-        display: flex;
-        gap: 10px;
-    }
-    
-    .search-input {
-        flex: 1;
-        padding: 12px 15px;
-        border: 1px solid #ddd;
-        border-radius: 6px;
-        font-size: 16px;
-        transition: border-color 0.3s;
-    }
-    
-    .search-input:focus {
-        border-color: #3498db;
-        outline: none;
-        box-shadow: 0 0 0 3px rgba(52, 152, 219, 0.2);
-    }
-    
-    .search-button {
-        padding: 12px 25px;
-        background: linear-gradient(135deg, #3498db, #1a5276);
-        color: white;
-        border: none;
-        border-radius: 6px;
-        cursor: pointer;
-        font-weight: bold;
-        transition: transform 0.2s, box-shadow 0.2s;
-    }
-    
-    .search-button:hover {
-        transform: translateY(-2px);
-        box-shadow: 0 4px 8px rgba(52, 152, 219, 0.4);
-    }
-    
-    /* 结果区域样式 */
-    .results-container {
-        min-height: 300px;
-    }
-    
-    .result-item {
-        background: white;
-        border-radius: 8px;
-        padding: 20px;
-        margin-bottom: 20px;
-        box-shadow: 0 2px 10px rgba(0,0,0,0.05);
-        border-left: 4px solid #3498db;
-        transition: transform 0.3s;
-    }
-    
-    .result-item:hover {
-        transform: translateY(-3px);
-        box-shadow: 0 5px 15px rgba(0,0,0,0.1);
-    }
-    
-    .result-item p {
-        margin-bottom: 10px;
-        line-height: 1.6;
-        color: #34495e;
-    }
-    
-    .result-item strong {
-        color: #2c3e50;
-    }
-    
-    /* 加载状态 */
-    .loading {
-        text-align: center;
-        padding: 40px;
-        color: #7f8c8d;
-        font-style: italic;
-    }
-    
-    /* 错误信息 */
-    .error {
-        color: #e74c3c;
-        padding: 20px;
-        text-align: center;
-        background: rgba(231, 76, 60, 0.1);
-        border-radius: 6px;
-    }
-</style>
-
-<div class="container">
-    <h2>奖项成果查询</h2>
-    <p>输入关键词（如姓名、奖项名等）搜索已录入的成果信息</p>
-    
-    <div class="search-container">
-        <form id="search-form" class="search-form">
-            <input type="text" name="q" class="search-input" placeholder="输入关键词（如姓名、奖项名等）" required>
-            <button type="submit" class="search-button">搜索</button>
-        </form>
-    </div>
-    
-    <div id="results" class="results-container">
-        <!-- 结果将通过JS动态加载 -->
-    </div>
-</div>
-
-<script>
-    document.getElementById("search-form").addEventListener("submit", function (e) {
-        e.preventDefault();
-        const q = this.q.value;
-        const resultsContainer = document.getElementById("results");
-        
-        // 显示加载状态
-        resultsContainer.innerHTML = '<div class="loading">正在搜索，请稍候...</div>';
-        
-        fetch(`/search?q=${encodeURIComponent(q)}`)
-            .then(res => res.json())
-            .then(data => {
-                const realData = data.hits?.hits || data;
-                
-                if (!Array.isArray(realData) || realData.length === 0) {
-                    resultsContainer.innerHTML = '<div class="error">未找到相关结果</div>';
-                    return;
-                }
-                
-                const html = realData.map(item => {
-                    const source = item._source || {};
-                    const students = Array.isArray(source.students)
-                        ? source.students.join(', ')
-                        : (source.students || '无');
-                    
-                    const teacher = Array.isArray(source.teacher)
-                        ? source.teacher.join(', ')
-                        : (source.teacher || '无');
-                    
-                    return `
-                        <div class="result-item">
-                            <p><strong>比赛/论文名称：</strong>${source.id || '无'}</p>
-                            <p><strong>项目名称：</strong>${source.name || '无'}</p>
-                            <p><strong>学生：</strong>${students}</p>
-                            <p><strong>指导老师：</strong>${teacher}</p>
-                        </div>
-                    `;
-                }).join('');
-                
-                resultsContainer.innerHTML = html;
-            })
-            .catch(err => {
-                resultsContainer.innerHTML = '<div class="error">搜索过程中发生错误</div>';
-            });
-    });
-</script>
-{% endblock %}