管理后台

POST /api/admin/setup
X-Setup-Key: <BLOG_ADMIN_SETUP_KEY>

{
  "password": "新管理员密码"
}

POST /api/admin/login

{
  "password": "管理员密码"
}

{
  "ok": true,
  "token": "32字节hex会话Token",
  "mustChange": false
}

POST /api/admin/logout
Authorization: Bearer <token>

PUT /api/admin/password
Authorization: Bearer <token>

{
  "currentPassword": "当前密码",
  "newPassword": "新密码"
}

Authorization: Bearer <token>