feat: Admin-Seite mit Passwortaenderung und Regel-Neuanwendung

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

finance/app/main.py

@@ -10,7 +10,7 @@ from app.auth import require_auth
 from app.config import get_settings
 from app.db import get_engine
 from app.models.views import create_views
-from app.routers import (accounts, categories, gui, imports, planning,
+from app.routers import (accounts, admin, categories, gui, imports, planning,
                          scenarios, transactions)
 from app.routers.gui import templates
 from app.version import get_version
@@ -33,6 +33,7 @@ app.include_router(categories.router)
 app.include_router(imports.router)
 app.include_router(planning.router)
 app.include_router(scenarios.router)
+app.include_router(admin.router)
 
 
 @app.get("/login")
@@ -44,7 +45,7 @@ def login_form(request: Request):
 def login(username: str = Form(...), password: str = Form(...)):
     s = get_settings()
     if not (hmac.compare_digest(username, s.gui_user)
-            and auth.verify_password(password, s.gui_password_hash)):
+            and auth.verify_password(password, auth.current_password_hash())):
         return HTMLResponse("Login fehlgeschlagen", status_code=401)
     resp = RedirectResponse("/", status_code=303)
     resp.set_cookie(auth.COOKIE, auth.make_session_token(), httponly=True,