diff --git a/components.d.ts b/components.d.ts
index ae7c313..75f52ff 100644
--- a/components.d.ts
+++ b/components.d.ts
@@ -10,9 +10,16 @@ declare module 'vue' {
   export interface GlobalComponents {
     Editor: typeof import('./src/components/Editor.vue')['default']
     Editors: typeof import('./src/components/Editors.vue')['default']
+    Login: typeof import('./src/components/Login.vue')['default']
+    NAlert: typeof import('naive-ui')['NAlert']
     NButton: typeof import('naive-ui')['NButton']
     NConfigProvider: typeof import('naive-ui')['NConfigProvider']
     NFlex: typeof import('naive-ui')['NFlex']
+    NForm: typeof import('naive-ui')['NForm']
+    NFormItem: typeof import('naive-ui')['NFormItem']
+    NInput: typeof import('naive-ui')['NInput']
+    NModal: typeof import('naive-ui')['NModal']
+    NModalProvider: typeof import('naive-ui')['NModalProvider']
     NSplit: typeof import('naive-ui')['NSplit']
     NTabPane: typeof import('naive-ui')['NTabPane']
     NTabs: typeof import('naive-ui')['NTabs']
diff --git a/src/App.vue b/src/App.vue
index efdbd68..2a6fb2d 100644
--- a/src/App.vue
+++ b/src/App.vue
@@ -1,6 +1,10 @@
 <script setup lang="ts">
 import { dateZhCN, zhCN } from "naive-ui"
 import { useMagicKeys, whenever } from "@vueuse/core"
+import Login from "./components/Login.vue"
+import { onMounted, watch } from "vue"
+import { getMyProfile } from "./api"
+import { authed, username } from "./store/user"
 
 const { ctrl_s } = useMagicKeys({
   passive: false,
@@ -17,15 +21,27 @@ const { ctrl_r } = useMagicKeys({
 })
 whenever(ctrl_s, () => {})
 whenever(ctrl_r, () => {})
+
+onMounted(async () => {
+  const data = await getMyProfile()
+  username.value = data
+})
+
+watch(authed, (v) => {
+  if (v) {
+    localStorage.setItem("web-isloggedin", "true")
+  } else {
+    localStorage.removeItem("web-isloggedin")
+  }
+})
 </script>
 
 <template>
-  <n-config-provider
-    class="myContainer"
-    :locale="zhCN"
-    :date-locale="dateZhCN"
-  >
-    <router-view></router-view>
+  <n-config-provider class="myContainer" :locale="zhCN" :date-locale="dateZhCN">
+    <n-modal-provider>
+      <router-view></router-view>
+      <Login />
+    </n-modal-provider>
   </n-config-provider>
 </template>
 <style scoped>
diff --git a/src/api.ts b/src/api.ts
new file mode 100644
index 0000000..9db7ab6
--- /dev/null
+++ b/src/api.ts
@@ -0,0 +1,49 @@
+import axios from "axios"
+import { router } from "./router"
+
+const http = axios.create({
+  baseURL: "http://localhost:8000/api",
+  xsrfCookieName: "xsrfCookieName",
+  xsrfHeaderName: "X-CSRFTOKEN",
+  withCredentials: true,
+})
+
+http.interceptors.response.use(
+  (res) => {
+    return res
+  },
+  (err) => {
+    if (err.response) {
+      switch (err.response.status) {
+        case 401: // 未授权
+          localStorage.removeItem("web-isloggedin")
+          alert("未登录")
+          router.push("/")
+          break
+        case 403: // 禁止访问
+          alert("禁止访问")
+          break
+        default:
+          console.error("出现错误：", err.response.status, err.response.data)
+      }
+    } else {
+      console.error("Network error:", err.message)
+    }
+    return Promise.reject(err)
+  },
+)
+
+export async function login(username: string, password: string) {
+  const res = await http.post("/account/login", { username, password })
+  return res.data
+}
+
+export async function logout() {
+  const res = await http.post("/account/logout")
+  return res.data
+}
+
+export async function getMyProfile() {
+  const res = await http.get("/account/profile")
+  return res.data
+}
diff --git a/src/components/Editors.vue b/src/components/Editors.vue
index a1043f1..ae916cb 100644
--- a/src/components/Editors.vue
+++ b/src/components/Editors.vue
@@ -67,8 +67,10 @@
       </n-flex>
     </n-tab-pane>
     <template #suffix>
-      <n-flex class="suffix">
-        <!-- <n-button>登录</n-button> -->
+      <n-flex align="center" class="suffix">
+        <!-- <span>{{ username }}</span>
+        <n-button v-if="!authed" @click="handleLogin">登录</n-button>
+        <n-button v-else @click="handleLogout">退出</n-button> -->
       </n-flex>
     </template>
   </n-tabs>
@@ -76,7 +78,10 @@
 <script lang="ts" setup>
 import { Icon } from "@iconify/vue"
 import Editor from "./Editor.vue"
-import { css, html, js, reset, size, tab } from "../store"
+import { html, css, js, tab, size, reset } from "../store/editors"
+import { username, authed } from "../store/user"
+import { loginModal } from "../store/modal"
+import { logout } from "../api"
 
 function changeTab(name: string) {
   tab.value = name
@@ -85,6 +90,15 @@ function changeTab(name: string) {
 function changeSize(num: number) {
   size.value = num
 }
+
+function handleLogin() {
+  loginModal.value = true
+}
+
+async function handleLogout() {
+  await logout()
+  username.value = ""
+}
 </script>
 <style scoped>
 .pane {
diff --git a/src/components/Login.vue b/src/components/Login.vue
new file mode 100644
index 0000000..1d0f2ba
--- /dev/null
+++ b/src/components/Login.vue
@@ -0,0 +1,52 @@
+<template>
+  <n-modal
+    preset="card"
+    title="登录"
+    style="width: 400px"
+    v-model:show="loginModal"
+  >
+    <n-form>
+      <n-form-item label="用户名">
+        <n-input v-model:value="name"></n-input>
+      </n-form-item>
+      <n-form-item label="密码">
+        <n-input v-model:value="password"></n-input>
+      </n-form-item>
+      <n-alert
+        type="error"
+        v-if="showMeesage"
+        class="message"
+        title="登录失败"
+      ></n-alert>
+      <n-flex>
+        <n-button @click="submit">登录</n-button>
+      </n-flex>
+    </n-form>
+  </n-modal>
+</template>
+<script lang="ts" setup>
+import { ref } from "vue"
+import { login } from "../api"
+import { loginModal } from "../store/modal"
+import { username } from "../store/user"
+
+const name = ref("")
+const password = ref("")
+
+const showMeesage = ref(false)
+
+async function submit() {
+  try {
+    const data = await login(name.value, password.value)
+    username.value = data
+    loginModal.value = false
+  } catch (err) {
+    showMeesage.value = true
+  }
+}
+</script>
+<style scoped>
+.message {
+  margin-bottom: 20px;
+}
+</style>
diff --git a/src/components/Preview.vue b/src/components/Preview.vue
index 961765b..e9e94e8 100644
--- a/src/components/Preview.vue
+++ b/src/components/Preview.vue
@@ -13,7 +13,7 @@
 
 <script lang="ts" setup>
 import { watchDebounced } from "@vueuse/core"
-import { css, html, js } from "../store"
+import { html, css, js } from "../store/editors"
 import { onMounted, useTemplateRef } from "vue"
 import { Icon } from "@iconify/vue"
 
diff --git a/src/components/Tutorial.vue b/src/components/Tutorial.vue
index c0f4113..e0f8cc9 100644
--- a/src/components/Tutorial.vue
+++ b/src/components/Tutorial.vue
@@ -17,7 +17,7 @@
 </template>
 <script lang="ts" setup>
 import { Icon } from "@iconify/vue"
-import { css, html, js, tab } from "../store"
+import { html, css, js, tab } from "../store/editors"
 import { onMounted, ref, useTemplateRef, watch } from "vue"
 import { marked } from "marked"
 import { useStorage } from "@vueuse/core"
@@ -61,7 +61,7 @@ function addButton() {
     const btn = copy.children[1] as HTMLDivElement
     btn.onclick = () => {
       tab.value = lang
-      const content = pre.children[1].textContent
+      const content = pre.children[1].textContent!
       if (lang === "html") html.value = content
       if (lang === "css") css.value = content
       if (lang === "js") js.value = content
diff --git a/src/main.ts b/src/main.ts
index c2d4ea0..131d79c 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -41,10 +41,11 @@ marked.use(
 marked.use(alert({ variants: alertVariants }))
 
 const template = `<div class="markedown-body-preview">{preview}</div>`
-marked.use(preview({template}))
+marked.use(preview({ template }))
 
 const app = createApp(App)
 const naive = create()
+
 app.use(naive)
 app.use(router)
 app.mount("#app")
diff --git a/src/pages/Protected.vue b/src/pages/Protected.vue
new file mode 100644
index 0000000..59265ba
--- /dev/null
+++ b/src/pages/Protected.vue
@@ -0,0 +1 @@
+<template>秘密花园</template>
\ No newline at end of file
diff --git a/src/router.ts b/src/router.ts
index 5b8bea5..3b234cf 100644
--- a/src/router.ts
+++ b/src/router.ts
@@ -1,10 +1,30 @@
 import { createWebHistory, createRouter } from "vue-router"
+import { loginModal } from "./store/modal"
 
 import Home from "./pages/Home.vue"
+import Protected from "./pages/Protected.vue"
 
-const routes = [{ path: "/", component: Home }]
+const routes = [
+  { path: "/", component: Home },
+  {
+    path: "/protected",
+    name: "protected",
+    component: Protected,
+    meta: { requiresAuth: true },
+  },
+]
 
 export const router = createRouter({
   history: createWebHistory(),
   routes,
 })
+
+router.beforeEach((to, from, next) => {
+  const isLoggedIn = localStorage.getItem("web-isloggedin") === "true"
+  if (to.meta.requiresAuth && !isLoggedIn) {
+    loginModal.value = true
+    next(false)
+  } else {
+    next() // 允许访问
+  }
+})
diff --git a/src/store.ts b/src/store/editors.ts
similarity index 100%
rename from src/store.ts
rename to src/store/editors.ts
diff --git a/src/store/modal.ts b/src/store/modal.ts
new file mode 100644
index 0000000..679423a
--- /dev/null
+++ b/src/store/modal.ts
@@ -0,0 +1,3 @@
+import { ref } from "vue";
+
+export const loginModal = ref(false)
\ No newline at end of file
diff --git a/src/store/user.ts b/src/store/user.ts
new file mode 100644
index 0000000..e0d0fad
--- /dev/null
+++ b/src/store/user.ts
@@ -0,0 +1,4 @@
+import { computed, ref } from "vue"
+
+export const username = ref("")
+export const authed = computed(() => !!username.value)