diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e41b7fb7..2a81627fe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 3.2.2
+- Feature: 新增登录功能
 ## 3.2.1
 - Feature: 镜像新增linux/386和linux/arm/v7架构
 ## 3.2.0
diff --git a/common.props b/common.props
index 004af5dd2..10a06d561 100644
--- a/common.props
+++ b/common.props
@@ -1,7 +1,7 @@
 <Project>
   <PropertyGroup>
     <Authors>Ray</Authors>
-    <Version>3.2.1</Version>
+    <Version>3.2.2</Version>
     <NoWarn>$(NoWarn);CS1591;CS0436</NoWarn>
   </PropertyGroup>
 </Project>
diff --git a/src/Ray.BiliBiliTool.Domain/User.cs b/src/Ray.BiliBiliTool.Domain/User.cs
new file mode 100644
index 000000000..6b1545d28
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Domain/User.cs
@@ -0,0 +1,15 @@
+using System.ComponentModel.DataAnnotations;
+using System.ComponentModel.DataAnnotations.Schema;
+
+namespace Ray.BiliBiliTool.Domain;
+
+[Table("bili_user")]
+public class User
+{
+    [Key]
+    public long Id { get; set; }
+    public required string Username { get; set; }
+    public required string PasswordHash { get; set; }
+    public required string Salt { get; set; }
+    public List<string> Roles { get; set; } = [];
+}
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/BiliDbContext.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/BiliDbContext.cs
index 6cb0f8299..1e63bd848 100644
--- a/src/Ray.BiliBiliTool.Infrastructure.EF/BiliDbContext.cs
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/BiliDbContext.cs
@@ -11,6 +11,7 @@ public class BiliDbContext(IConfiguration config) : DbContext
 {
     public DbSet<ExecutionLog> ExecutionLogs { get; set; }
     public DbSet<BiliLogs> BiliLogs { get; set; }
+    public DbSet<User> Users { get; set; }
 
     protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder)
     {
@@ -69,6 +70,22 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
                 .HasIndex(x => x.FireInstanceIdComputed) // 在计算列上创建索引
                 .HasDatabaseName("IX_Logs_FireInstanceIdComputed");
         });
+
+        modelBuilder.Entity<User>(entity =>
+        {
+            entity.HasKey(e => e.Id);
+            entity.Property(e => e.Username).IsRequired().HasMaxLength(50);
+            entity.Property(e => e.PasswordHash).IsRequired();
+            entity.Property(e => e.Salt).IsRequired();
+            entity
+                .Property(e => e.Roles)
+                .HasConversion(
+                    v => string.Join(',', v),
+                    v => v.Split(',', StringSplitOptions.RemoveEmptyEntries).ToList()
+                );
+
+            entity.HasIndex(e => e.Username).IsUnique();
+        });
     }
 
     private void AddSqliteDateTimeOffsetSupport(ModelBuilder builder)
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/DbInitializer.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/DbInitializer.cs
new file mode 100644
index 000000000..61fbea14c
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/DbInitializer.cs
@@ -0,0 +1,38 @@
+using Microsoft.EntityFrameworkCore;
+using Ray.BiliBiliTool.Domain;
+using Ray.BiliBiliTool.Infrastructure.Helpers;
+
+namespace Ray.BiliBiliTool.Infrastructure.EF;
+
+public class DbInitializer(BiliDbContext context)
+{
+    private const string DefaultUserName = "admin";
+    private const string DefaultPassword = "BiliTool@2233";
+
+    public async Task InitializeAsync()
+    {
+        await context.Database.MigrateAsync();
+
+        await InitUserAsync();
+    }
+
+    private async Task InitUserAsync()
+    {
+        if (await context.Users.AnyAsync())
+        {
+            return;
+        }
+
+        var (hash, salt) = PasswordHelper.HashPassword(DefaultPassword);
+        var adminUser = new User
+        {
+            Username = DefaultUserName,
+            PasswordHash = hash,
+            Salt = salt,
+            Roles = ["Administrator"],
+        };
+
+        context.Users.Add(adminUser);
+        await context.SaveChangesAsync();
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/Extensions/ServiceCollectionExtension.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/Extensions/ServiceCollectionExtension.cs
index 896444ae6..a60c390b0 100644
--- a/src/Ray.BiliBiliTool.Infrastructure.EF/Extensions/ServiceCollectionExtension.cs
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/Extensions/ServiceCollectionExtension.cs
@@ -7,6 +7,7 @@ public static class ServiceCollectionExtension
     public static IServiceCollection AddEF(this IServiceCollection services)
     {
         services.AddDbContextFactory<BiliDbContext>();
+        services.AddScoped<DbInitializer>();
         return services;
     }
 }
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.Designer.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.Designer.cs
new file mode 100644
index 000000000..c818dee3d
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.Designer.cs
@@ -0,0 +1,722 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Ray.BiliBiliTool.Infrastructure.EF;
+
+#nullable disable
+
+namespace Ray.BiliBiliTool.Web.Migrations
+{
+    [DbContext(typeof(BiliDbContext))]
+    [Migration("20250615100041_AddUser")]
+    partial class AddUser
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder.HasAnnotation("ProductVersion", "8.0.3");
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("BLOB_DATA");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_BLOB_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("CALENDAR_NAME");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("CALENDAR");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_CALENDARS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("CRON_EXPRESSION");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("TIME_ZONE_ID");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_CRON_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("ENTRY_ID");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("FIRED_TIME");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("INSTANCE_NAME");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("IS_NONCONCURRENT");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_GROUP");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_NAME");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("PRIORITY");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("REQUESTS_RECOVERY");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("SCHED_TIME");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("STATE");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("IDX_QRTZ_FT_TRIG_INST_NAME");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("IDX_QRTZ_FT_JOB_GROUP");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("IDX_QRTZ_FT_JOB_NAME");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("IDX_QRTZ_FT_JOB_REQ_RECOVERY");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("IDX_QRTZ_FT_TRIG_GROUP");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("IDX_QRTZ_FT_TRIG_NAME");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("IDX_QRTZ_FT_TRIG_NM_GP");
+
+                    b.ToTable("QRTZ_FIRED_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_NAME");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_GROUP");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("DESCRIPTION");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("IS_DURABLE");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("IS_NONCONCURRENT");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("IS_UPDATE_DATA");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_CLASS_NAME");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("JOB_DATA");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("REQUESTS_RECOVERY");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("IDX_QRTZ_J_REQ_RECOVERY");
+
+                    b.ToTable("QRTZ_JOB_DETAILS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("LOCK_NAME");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_LOCKS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_PAUSED_TRIGGER_GRPS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("INSTANCE_NAME");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("CHECKIN_INTERVAL");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("LAST_CHECKIN_TIME");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_SCHEDULER_STATE", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("BOOL_PROP_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("BOOL_PROP_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("DEC_PROP_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("DEC_PROP_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("INT_PROP_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("INT_PROP_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("LONG_PROP_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("LONG_PROP_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("STR_PROP_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("STR_PROP_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("STR_PROP_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("TIME_ZONE_ID");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_SIMPROP_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("REPEAT_COUNT");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("REPEAT_INTERVAL");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("TIMES_TRIGGERED");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_SIMPLE_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("SCHED_NAME");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_NAME");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_GROUP");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("CALENDAR_NAME");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("DESCRIPTION");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("END_TIME");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("JOB_DATA");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_GROUP");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("JOB_NAME");
+
+                    b.Property<short?>("MisfireInstruction")
+                        .HasColumnType("smallint")
+                        .HasColumnName("MISFIRE_INSTR");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("NEXT_FIRE_TIME");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("PREV_FIRE_TIME");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("PRIORITY");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("START_TIME");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_STATE");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("TRIGGER_TYPE");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("IDX_QRTZ_T_NEXT_FIRE_TIME");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("IDX_QRTZ_T_STATE");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("IDX_QRTZ_T_NFT_ST");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_TRIGGERS", (string)null);
+                });
+
+            modelBuilder.Entity("Ray.BiliBiliTool.Domain.BiliLogs", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("INTEGER")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("TEXT")
+                        .HasColumnName("exception");
+
+                    b.Property<string>("FireInstanceIdComputed")
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("TEXT")
+                        .HasColumnName("fireInstanceIdComputed")
+                        .HasComputedColumnSql("json_extract(Properties, '$.FireInstanceId')", false);
+
+                    b.Property<string>("Level")
+                        .IsRequired()
+                        .HasColumnType("TEXT")
+                        .HasColumnName("level");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("TEXT")
+                        .HasColumnName("properties");
+
+                    b.Property<string>("RenderedMessage")
+                        .HasColumnType("TEXT")
+                        .HasColumnName("renderedMessage");
+
+                    b.Property<DateTime>("Timestamp")
+                        .HasColumnType("TEXT")
+                        .HasColumnName("timeStamp");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceIdComputed")
+                        .HasDatabaseName("IX_Logs_FireInstanceIdComputed");
+
+                    b.ToTable("bili_logs");
+                });
+
+            modelBuilder.Entity("Ray.BiliBiliTool.Domain.ExecutionLog", b =>
+                {
+                    b.Property<long>("LogId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("INTEGER");
+
+                    b.Property<long>("DateAddedUtc")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("ErrorMessage")
+                        .HasMaxLength(8000)
+                        .HasColumnType("TEXT");
+
+                    b.Property<long?>("FireTimeUtc")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<bool?>("IsException")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<bool?>("IsSuccess")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<bool?>("IsVetoed")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("JobGroup")
+                        .HasMaxLength(256)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("JobName")
+                        .HasMaxLength(256)
+                        .HasColumnType("TEXT");
+
+                    b.Property<TimeSpan?>("JobRunTime")
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("LogType")
+                        .IsRequired()
+                        .HasColumnType("varchar(20)");
+
+                    b.Property<string>("Result")
+                        .HasMaxLength(8000)
+                        .HasColumnType("TEXT");
+
+                    b.Property<int?>("RetryCount")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("ReturnCode")
+                        .HasMaxLength(28)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("RunInstanceId")
+                        .HasMaxLength(256)
+                        .HasColumnType("TEXT");
+
+                    b.Property<long?>("ScheduleFireTimeUtc")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasMaxLength(256)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("TriggerName")
+                        .HasMaxLength(256)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("LogId");
+
+                    b.HasIndex("RunInstanceId")
+                        .IsUnique();
+
+                    b.HasIndex("DateAddedUtc", "LogType");
+
+                    b.HasIndex("TriggerName", "TriggerGroup", "JobName", "JobGroup", "DateAddedUtc");
+
+                    b.ToTable("bili_execution_logs");
+                });
+
+            modelBuilder.Entity("Ray.BiliBiliTool.Domain.User", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("INTEGER")
+                        .HasColumnName("id");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Roles")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Salt")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Username")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Username")
+                        .IsUnique();
+
+                    b.ToTable("bili_User");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("Ray.BiliBiliTool.Domain.ExecutionLog", b =>
+                {
+                    b.OwnsOne("Ray.BiliBiliTool.Domain.ExecutionLogDetail", "ExecutionLogDetail", b1 =>
+                        {
+                            b1.Property<long>("LogId")
+                                .HasColumnType("INTEGER");
+
+                            b1.Property<int?>("ErrorCode")
+                                .HasColumnType("INTEGER");
+
+                            b1.Property<string>("ErrorHelpLink")
+                                .HasMaxLength(1000)
+                                .HasColumnType("TEXT");
+
+                            b1.Property<string>("ErrorStackTrace")
+                                .HasColumnType("TEXT");
+
+                            b1.Property<string>("ExecutionDetails")
+                                .HasColumnType("TEXT");
+
+                            b1.HasKey("LogId");
+
+                            b1.ToTable("bili_execution_log_details", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("LogId");
+                        });
+
+                    b.Navigation("ExecutionLogDetail");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.cs
new file mode 100644
index 000000000..7d26e5e68
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/20250615100041_AddUser.cs
@@ -0,0 +1,45 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Ray.BiliBiliTool.Web.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddUser : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "bili_user",
+                columns: table => new
+                {
+                    Id = table
+                        .Column<long>(type: "INTEGER", nullable: false)
+                        .Annotation("Sqlite:Autoincrement", true),
+                    Username = table.Column<string>(type: "TEXT", maxLength: 50, nullable: false),
+                    PasswordHash = table.Column<string>(type: "TEXT", nullable: false),
+                    Salt = table.Column<string>(type: "TEXT", nullable: false),
+                    Roles = table.Column<string>(type: "TEXT", nullable: false),
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_bili_user", x => x.Id);
+                }
+            );
+
+            migrationBuilder.CreateIndex(
+                name: "IX_bili_user_Username",
+                table: "bili_user",
+                column: "Username",
+                unique: true
+            );
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(name: "bili_user");
+        }
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/BiliDbContextModelSnapshot.cs b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/BiliDbContextModelSnapshot.cs
index 7a5a44475..ccb478f34 100644
--- a/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/BiliDbContextModelSnapshot.cs
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/Migrations/BiliDbContextModelSnapshot.cs
@@ -580,6 +580,38 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("bili_execution_logs");
                 });
 
+            modelBuilder.Entity("Ray.BiliBiliTool.Domain.User", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("INTEGER")
+                        .HasColumnName("id");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Roles")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Salt")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Username")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Username")
+                        .IsUnique();
+
+                    b.ToTable("bili_user");
+                });
+
             modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzBlobTrigger", b =>
                 {
                     b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/README.md b/src/Ray.BiliBiliTool.Infrastructure.EF/README.md
new file mode 100644
index 000000000..505a5a5ea
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/README.md
@@ -0,0 +1,12 @@
+## Add new migration
+
+```bash
+cd ./src/Ray.BiliBiliTool.Web
+dotnet ef migrations add AddUser --project ../Ray.BiliBiliTool.Infrastructure.EF
+```
+
+## Remove migration
+
+```bash
+dotnet ef migrations remove --project ../Ray.BiliBiliTool.Infrastructure.EF
+```
diff --git a/src/Ray.BiliBiliTool.Infrastructure.EF/Ray.BiliBiliTool.Infrastructure.EF.csproj b/src/Ray.BiliBiliTool.Infrastructure.EF/Ray.BiliBiliTool.Infrastructure.EF.csproj
index d551ed75b..335bdf4eb 100644
--- a/src/Ray.BiliBiliTool.Infrastructure.EF/Ray.BiliBiliTool.Infrastructure.EF.csproj
+++ b/src/Ray.BiliBiliTool.Infrastructure.EF/Ray.BiliBiliTool.Infrastructure.EF.csproj
@@ -21,5 +21,6 @@
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\Ray.BiliBiliTool.Domain\Ray.BiliBiliTool.Domain.csproj" />
+    <ProjectReference Include="..\Ray.BiliBiliTool.Infrastructure\Ray.BiliBiliTool.Infrastructure.csproj" />
   </ItemGroup>
 </Project>
diff --git a/src/Ray.BiliBiliTool.Infrastructure/Helpers/PasswordHelper.cs b/src/Ray.BiliBiliTool.Infrastructure/Helpers/PasswordHelper.cs
new file mode 100644
index 000000000..c052e3753
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Infrastructure/Helpers/PasswordHelper.cs
@@ -0,0 +1,34 @@
+using System.Security.Cryptography;
+
+namespace Ray.BiliBiliTool.Infrastructure.Helpers;
+
+public class PasswordHelper
+{
+    public static (string hash, string salt) HashPassword(string password)
+    {
+        byte[] saltBytes = RandomNumberGenerator.GetBytes(16);
+        string salt = Convert.ToBase64String(saltBytes);
+        string hash = ComputeHash(password, salt);
+        return (hash, salt);
+    }
+
+    public static bool VerifyPassword(string password, string salt, string hash)
+    {
+        string computedHash = ComputeHash(password, salt);
+        return computedHash == hash;
+    }
+
+    private static string ComputeHash(string password, string salt)
+    {
+        byte[] saltBytes = Convert.FromBase64String(salt);
+        using var pbkdf2 = new Rfc2898DeriveBytes(
+            password,
+            saltBytes,
+            100_000,
+            HashAlgorithmName.SHA256
+        );
+        byte[] hashBytes = pbkdf2.GetBytes(32);
+
+        return Convert.ToBase64String(hashBytes);
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Web/Auth/CustomAuthStateProvider.cs b/src/Ray.BiliBiliTool.Web/Auth/CustomAuthStateProvider.cs
new file mode 100644
index 000000000..e3ec068ed
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Auth/CustomAuthStateProvider.cs
@@ -0,0 +1,26 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Components.Authorization;
+
+namespace Ray.BiliBiliTool.Web.Auth;
+
+public class CustomAuthStateProvider(IHttpContextAccessor httpContextAccessor)
+    : AuthenticationStateProvider
+{
+    public override Task<AuthenticationState> GetAuthenticationStateAsync()
+    {
+        var identity = new ClaimsIdentity();
+        var user = httpContextAccessor.HttpContext?.User;
+
+        if (user?.Identity?.IsAuthenticated == true)
+        {
+            identity = new ClaimsIdentity(user.Claims, "Cookies");
+        }
+
+        return Task.FromResult(new AuthenticationState(new ClaimsPrincipal(identity)));
+    }
+
+    public void NotifyAuthenticationStateChanged()
+    {
+        NotifyAuthenticationStateChanged(GetAuthenticationStateAsync());
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Web/Components/Layout/MainLayout.razor b/src/Ray.BiliBiliTool.Web/Components/Layout/MainLayout.razor
index def638b5a..849bba5e6 100644
--- a/src/Ray.BiliBiliTool.Web/Components/Layout/MainLayout.razor
+++ b/src/Ray.BiliBiliTool.Web/Components/Layout/MainLayout.razor
@@ -1,4 +1,5 @@
-@inherits LayoutComponentBase
+@using Microsoft.AspNetCore.Components.Authorization
+@inherits LayoutComponentBase
 
 <div class="page">
     <div class="sidebar">
@@ -8,6 +9,11 @@
     <main>
         <div class="top-row px-4">
             <a href="https://github.com/RayWangQvQ/BiliBiliToolPro" target="_blank">About</a>
+            <AuthorizeView>
+                <Authorized>
+                    <a href="/auth/logout" class="nav-link">Log out</a>
+                </Authorized>
+            </AuthorizeView>
         </div>
 
         <article class="content px-4">
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor
new file mode 100644
index 000000000..b460c74b5
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor
@@ -0,0 +1,27 @@
+@page "/login"
+@rendermode InteractiveServer
+
+<form action="/auth/login" method="post">
+    <input type="hidden" name="returnUrl" value="@returnUrl" />
+
+    <MudCard Class="mx-auto my-4" Style="max-width: 500px;">
+        <MudCardHeader>
+            <MudText Typo="Typo.h5">Log in</MudText>
+        </MudCardHeader>
+        <MudCardContent>
+            <MudTextField @bind-Value="_username" Name="username" Label="User Name" Required="true" RequiredError="Username cannot be empty" />
+            <MudTextField @bind-Value="_password" Name="password" Label="Password" Required="true" RequiredError="Password cannot be empty"
+                          InputType="@_passwordInput" Adornment="Adornment.End"
+                          AdornmentIcon="@_passwordInputIcon" OnAdornmentClick="TogglePasswordVisibility" />
+        </MudCardContent>
+        <MudCardActions>
+            <MudButton ButtonType="ButtonType.Submit" Variant="Variant.Filled" Color="Color.Primary"
+                       Class="ml-auto">Log in</MudButton>
+        </MudCardActions>
+    </MudCard>
+</form>
+
+<MudThemeProvider/>
+<MudPopoverProvider/>
+<MudDialogProvider/>
+<MudSnackbarProvider/>
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.cs b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.cs
new file mode 100644
index 000000000..b041b1c4c
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.cs
@@ -0,0 +1,45 @@
+using Microsoft.AspNetCore.Components;
+using Microsoft.AspNetCore.WebUtilities;
+using MudBlazor;
+
+namespace Ray.BiliBiliTool.Web.Components.Pages;
+
+public partial class Login : ComponentBase
+{
+    [Inject]
+    private NavigationManager NavigationManager { get; set; } = null!;
+
+    private string _username = "";
+    private string _password = "";
+
+    private bool _passwordVisibility;
+    private InputType _passwordInput = InputType.Password;
+    private string _passwordInputIcon = Icons.Material.Filled.VisibilityOff;
+
+    private void TogglePasswordVisibility()
+    {
+        if (_passwordVisibility)
+        {
+            _passwordVisibility = false;
+            _passwordInputIcon = Icons.Material.Filled.VisibilityOff;
+            _passwordInput = InputType.Password;
+        }
+        else
+        {
+            _passwordVisibility = true;
+            _passwordInputIcon = Icons.Material.Filled.Visibility;
+            _passwordInput = InputType.Text;
+        }
+    }
+
+    private string? returnUrl;
+
+    protected override void OnInitialized()
+    {
+        var uri = NavigationManager.ToAbsoluteUri(NavigationManager.Uri);
+        if (QueryHelpers.ParseQuery(uri.Query).TryGetValue("returnUrl", out var param))
+        {
+            returnUrl = param.First();
+        }
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.css b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.css
new file mode 100644
index 000000000..e69de29bb
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.js b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.js
new file mode 100644
index 000000000..00ad34959
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Components/Pages/Login.razor.js
@@ -0,0 +1,5 @@
+export class Login {
+  
+}
+
+window.Login = Login;
\ No newline at end of file
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor b/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor
index 5123dffe4..186d12cb4 100644
--- a/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor
+++ b/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor
@@ -1,8 +1,10 @@
 @page "/Schedules"
+@attribute [Authorize]
 @rendermode InteractiveServer
 @attribute [StreamRendering]
 @using BlazingQuartz
 @using BlazingQuartz.Core.Models
+@using Microsoft.AspNetCore.Authorization
 @using Ray.BiliBiliTool.Web.Extensions
 
 <PageTitle>Schedules</PageTitle>
diff --git a/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor.cs b/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor.cs
index 8e8ec879b..65ff4deea 100644
--- a/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor.cs
+++ b/src/Ray.BiliBiliTool.Web/Components/Pages/Schedules/Schedules.razor.cs
@@ -8,7 +8,6 @@
 using MudBlazor;
 using Quartz;
 using Ray.BiliBiliTool.Domain;
-using Ray.BiliBiliTool.Web.Client;
 using Ray.BiliBiliTool.Web.Extensions;
 
 namespace Ray.BiliBiliTool.Web.Components.Pages.Schedules;
diff --git a/src/Ray.BiliBiliTool.Web/Components/Routes.razor b/src/Ray.BiliBiliTool.Web/Components/Routes.razor
index fd6715a38..12ddaf007 100644
--- a/src/Ray.BiliBiliTool.Web/Components/Routes.razor
+++ b/src/Ray.BiliBiliTool.Web/Components/Routes.razor
@@ -1,6 +1,25 @@
-<Router AppAssembly="typeof(Program).Assembly" AdditionalAssemblies="new[] { typeof(Client._Imports).Assembly }">
-    <Found Context="routeData">
-        <RouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)"/>
-        <FocusOnNavigate RouteData="routeData" Selector="h1"/>
-    </Found>
-</Router>
+@using Microsoft.AspNetCore.Components.Authorization
+
+<CascadingAuthenticationState>
+    <Router AppAssembly="typeof(Program).Assembly" AdditionalAssemblies="new[] { typeof(Client._Imports).Assembly }">
+        <Found Context="routeData">
+            <AuthorizeRouteView RouteData="@routeData" DefaultLayout="typeof(Layout.MainLayout)">
+                <NotAuthorized>
+                    <MudContainer MaxWidth="MaxWidth.Small" Class="my-4">
+                        <MudAlert Severity="Severity.Error">您无权访问此页面，请先登录。</MudAlert>
+                        <MudButton Variant="Variant.Filled" Color="Color.Primary" Link="/login" Class="mt-2">
+                            前往登录
+                        </MudButton>
+                    </MudContainer>
+                </NotAuthorized>
+            </AuthorizeRouteView>
+            <FocusOnNavigate RouteData="routeData" Selector="h1"/>
+        </Found>
+        <NotFound>
+            <PageTitle>Not found</PageTitle>
+            <LayoutView Layout="typeof(Layout.MainLayout)">
+                <p role="alert">Sorry, there's nothing at this address.</p>
+            </LayoutView>
+        </NotFound>
+    </Router>
+</CascadingAuthenticationState>
diff --git a/src/Ray.BiliBiliTool.Web/Controllers/AuthController.cs b/src/Ray.BiliBiliTool.Web/Controllers/AuthController.cs
new file mode 100644
index 000000000..28eddff0f
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Controllers/AuthController.cs
@@ -0,0 +1,53 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Mvc;
+using Ray.BiliBiliTool.Web.Services;
+
+namespace Ray.BiliBiliTool.Web.Controllers;
+
+[Route("auth")]
+public class AuthController(IAuthService authService) : Controller
+{
+    [HttpPost("login")]
+    public async Task<IActionResult> Login(
+        [FromForm] string username,
+        [FromForm] string password,
+        [FromForm] string? returnUrl
+    )
+    {
+        var claimsIdentity = await authService.LoginAsync(username, password);
+
+        if (claimsIdentity.IsAuthenticated)
+        {
+            var authProperties = new AuthenticationProperties
+            {
+                IsPersistent = true,
+                ExpiresUtc = DateTimeOffset.UtcNow.AddDays(30),
+                RedirectUri = returnUrl,
+            };
+
+            await HttpContext.SignInAsync(
+                CookieAuthenticationDefaults.AuthenticationScheme,
+                new ClaimsPrincipal(claimsIdentity),
+                authProperties
+            );
+
+            if (!Url.IsLocalUrl(returnUrl))
+            {
+                returnUrl = "/";
+            }
+
+            return Redirect(returnUrl ?? "/");
+        }
+
+        return Redirect($"/login?error=true&returnUrl={Uri.EscapeDataString(returnUrl ?? "/")}");
+    }
+
+    [HttpGet("logout")]
+    public async Task<IActionResult> Logout()
+    {
+        await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+        return Redirect("/login");
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Web/Extensions/ServiceCollectionExtension.cs b/src/Ray.BiliBiliTool.Web/Extensions/ServiceCollectionExtension.cs
new file mode 100644
index 000000000..312d297f9
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Extensions/ServiceCollectionExtension.cs
@@ -0,0 +1,37 @@
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Components.Authorization;
+using Ray.BiliBiliTool.Web.Auth;
+using Ray.BiliBiliTool.Web.Services;
+
+namespace Ray.BiliBiliTool.Web.Extensions;
+
+public static class ServiceCollectionExtension
+{
+    public static IServiceCollection AddWebServices(this IServiceCollection services)
+    {
+        services.AddScoped<IAuthService, AuthService>();
+
+        return services;
+    }
+
+    public static IServiceCollection AddAuthServices(this IServiceCollection services)
+    {
+        services.AddAuthenticationCore();
+        services.AddAuthorizationCore();
+        services
+            .AddAuthentication(options =>
+            {
+                options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
+            })
+            .AddCookie(options =>
+            {
+                options.Cookie.Name = "BiliToolWebAuth";
+                options.LoginPath = "/login";
+                options.ExpireTimeSpan = TimeSpan.FromDays(30);
+            });
+        services.AddHttpContextAccessor();
+        services.AddScoped<AuthenticationStateProvider, CustomAuthStateProvider>();
+
+        return services;
+    }
+}
diff --git a/src/Ray.BiliBiliTool.Web/Program.cs b/src/Ray.BiliBiliTool.Web/Program.cs
index f954d4a74..b991fa7f0 100644
--- a/src/Ray.BiliBiliTool.Web/Program.cs
+++ b/src/Ray.BiliBiliTool.Web/Program.cs
@@ -1,6 +1,5 @@
 using BlazingQuartz;
 using BlazingQuartz.Core;
-using Microsoft.EntityFrameworkCore;
 using MudBlazor.Services;
 using Quartz;
 using Quartz.Impl.AdoJobStore;
@@ -31,6 +30,7 @@
         .Services.AddRazorComponents()
         .AddInteractiveServerComponents()
         .AddInteractiveWebAssemblyComponents();
+    builder.Services.AddControllers();
 
     var sqliteConnStr = builder.Configuration.GetConnectionString("Sqlite");
 
@@ -84,20 +84,20 @@
     builder.Services.AddQuartzHostedService(q => q.WaitForJobsToComplete = true);
 
     builder
-        .Services.AddAppServices()
+        .Services.AddWebServices()
+        .AddAuthServices()
+        .AddAppServices()
         .AddDomainServices()
         .AddBiliBiliConfigs(builder.Configuration)
         .AddBiliBiliClientApi(builder.Configuration);
 
-    builder.Services.AddAppServices();
-
     var app = builder.Build();
 
     Global.ServiceProviderRoot = app.Services;
 
     using var scope = app.Services.CreateScope();
-    var databaseContext = scope.ServiceProvider.GetRequiredService<BiliDbContext>();
-    databaseContext.Database.MigrateAsync().Wait();
+    var dbInitializer = scope.ServiceProvider.GetRequiredService<DbInitializer>();
+    dbInitializer.InitializeAsync().Wait();
 
     if (app.Environment.IsDevelopment())
     {
@@ -116,6 +116,7 @@
 
     app.UseSerilogRequestLogging();
 
+    app.MapControllers();
     app.MapRazorComponents<App>()
         .AddInteractiveServerRenderMode()
         .AddInteractiveWebAssemblyRenderMode()
diff --git a/src/Ray.BiliBiliTool.Web/Ray.BiliBiliTool.Web.csproj b/src/Ray.BiliBiliTool.Web/Ray.BiliBiliTool.Web.csproj
index 28f123abd..df0678281 100644
--- a/src/Ray.BiliBiliTool.Web/Ray.BiliBiliTool.Web.csproj
+++ b/src/Ray.BiliBiliTool.Web/Ray.BiliBiliTool.Web.csproj
@@ -25,4 +25,7 @@
       Version="8.0.4"
     />
   </ItemGroup>
+  <ItemGroup>
+    <Compile Remove="Auth\JwtAuthStateProvider.cs" />
+  </ItemGroup>
 </Project>
diff --git a/src/Ray.BiliBiliTool.Web/Services/AuthService.cs b/src/Ray.BiliBiliTool.Web/Services/AuthService.cs
new file mode 100644
index 000000000..5fa6f8b9b
--- /dev/null
+++ b/src/Ray.BiliBiliTool.Web/Services/AuthService.cs
@@ -0,0 +1,36 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.EntityFrameworkCore;
+using Ray.BiliBiliTool.Infrastructure.EF;
+using Ray.BiliBiliTool.Infrastructure.Helpers;
+
+namespace Ray.BiliBiliTool.Web.Services;
+
+public interface IAuthService
+{
+    Task<ClaimsIdentity> LoginAsync(string username, string password);
+}
+
+public class AuthService(IDbContextFactory<BiliDbContext> dbFactory) : IAuthService
+{
+    public async Task<ClaimsIdentity> LoginAsync(string username, string password)
+    {
+        await using var context = await dbFactory.CreateDbContextAsync();
+        var user = await context.Users.FirstOrDefaultAsync(u => u.Username == username);
+
+        if (user != null && PasswordHelper.VerifyPassword(password, user.Salt, user.PasswordHash))
+        {
+            var claims = new List<Claim> { new(ClaimTypes.Name, username) };
+            claims.AddRange(user.Roles.Select(role => new Claim(ClaimTypes.Role, role)));
+
+            var claimsIdentity = new ClaimsIdentity(
+                claims,
+                CookieAuthenticationDefaults.AuthenticationScheme
+            );
+
+            return claimsIdentity;
+        }
+
+        return new ClaimsIdentity();
+    }
+}