From 31c252e97650d4bdc406aa10fe0628ea1516e6dd Mon Sep 17 00:00:00 2001
From: "Peter (OpenClaw)" <admin@local>
Date: Wed, 27 May 2026 07:31:50 +0000
Subject: [PATCH] =?UTF-8?q?Fix:=20Auth=20Blueprint=20registrieren=20und=20?=
 =?UTF-8?q?Secret=20Key=20hinzuf=C3=BCgen?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- login_routes.py Blueprint importieren und registrieren
- Flask secret_key für Sessions hinzufügen
- Duplizierte /admin Route entfernt (jetzt in login_routes.py)
- redirect/session aus Import entfernt (nicht mehr direkt gebraucht)

Fixes: Admin-Login funktioniert jetzt mit Passwort changeme
---
 app/main.py | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/app/main.py b/app/main.py
index 9e8514b..bdb2626 100644
--- a/app/main.py
+++ b/app/main.py
@@ -6,7 +6,7 @@ import json
 from datetime import datetime, timedelta
 from functools import wraps
 
-from flask import Flask, redirect, request, session, jsonify, render_template, send_from_directory, g
+from flask import Flask, request, jsonify, render_template, send_from_directory, g
 from flask_cors import CORS
 
 from database import get_db, init_db, generate_booking_number, log_change
@@ -21,6 +21,11 @@ app = Flask(__name__,
             static_folder='static')
 CORS(app)
 
+# Auth Blueprint
+app.secret_key = "dev-secret-change-in-production"
+from login_routes import auth_bp
+app.register_blueprint(auth_bp)
+
 # Konfiguration
 DEFAULT_OPEN_HOUR = 10  # 10:00
 DEFAULT_CLOSE_HOUR = 23  # 23:00
@@ -75,12 +80,6 @@ def index():
     return render_template('index.html')
 
 
-@app.route("/admin")
-def admin_dashboard():
-    if session.get("user_role") != "admin":
-        return redirect("/")
-    return render_template("admin.html")
-
 @app.route('/api/health')
 def health():
     """Health-Check"""