🔧 Update: Enhance Guest Request Management with OTP and Name Verification

**Änderungen:**
- ✅ Hinzugefügt: Neue Methode `find_by_otp_and_name` in `GuestRequest`, um Gastanfragen anhand von OTP-Code und Name zu finden.
- ✅ API-Endpunkte in `admin_unified.py` für die Verwaltung von Gastanfragen mit OTP-Codes implementiert, einschließlich Generierung und Druck von Zugangsdaten.
- ✅ Anpassungen in `guest.py`, um die Authentifizierung von Gastanfragen mit Name und OTP-Code zu unterstützen.

**Ergebnis:**
- Verbesserte Sicherheit und Benutzerfreundlichkeit bei der Verwaltung von Gastanfragen im Offline-System.
- Klarere API-Responses und verbesserte Fehlerbehandlung für Gastanfragen.

🤖 Generated with [Claude Code](https://claude.ai/code)

backend/templates/admin_guest_otps.html

@@ -0,0 +1,574 @@
+{% extends "base.html" %}
+
+{% block title %}Gast-OTP-Verwaltung - Mercedes-Benz TBA Marienfelde{% endblock %}
+
+{% block head %}
+{{ super() }}
+<meta name="csrf-token" content="{{ csrf_token() }}">
+<style>
+.otp-card {
+    transition: all 0.3s ease;
+    border-left: 4px solid #10b981;
+}
+.otp-card.critical {
+    border-left-color: #ef4444;
+    animation: pulse 2s infinite;
+}
+.otp-card.warning {
+    border-left-color: #f59e0b;
+}
+.print-template {
+    font-family: monospace;
+    background: #f8f9fa;
+    border: 1px solid #ddd;
+    padding: 1rem;
+    margin: 1rem 0;
+    white-space: pre-line;
+}
+@keyframes pulse {
+    0%, 100% { transform: scale(1); }
+    50% { transform: scale(1.02); }
+}
+</style>
+{% endblock %}
+
+{% block content %}
+<div class="container mx-auto px-6 py-8">
+    
+    <!-- Header -->
+    <div class="mb-8">
+        <div class="flex items-center justify-between">
+            <div>
+                <h1 class="text-3xl font-bold text-gray-900 dark:text-white">
+                    🔑 Gast-OTP-Verwaltung
+                </h1>
+                <p class="text-gray-600 dark:text-gray-300 mt-2">
+                    Offline-System - OTP-Codes für Gastbenutzer verwalten
+                </p>
+            </div>
+            <div class="flex space-x-4">
+                <button onclick="loadGuestRequests()" 
+                        class="px-4 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700 transition-colors">
+                    🔄 Aktualisieren
+                </button>
+                <button onclick="showActiveOTPs()" 
+                        class="px-4 py-2 bg-green-600 text-white rounded-lg hover:bg-green-700 transition-colors">
+                    📊 Aktive OTPs
+                </button>
+            </div>
+        </div>
+    </div>
+
+    <!-- Quick Stats -->
+    <div class="grid grid-cols-1 md:grid-cols-4 gap-6 mb-8">
+        <div class="bg-white dark:bg-slate-800 rounded-xl p-6 shadow-lg">
+            <div class="flex items-center">
+                <div class="p-3 bg-blue-100 dark:bg-blue-900 rounded-full">
+                    <span class="text-2xl">📝</span>
+                </div>
+                <div class="ml-4">
+                    <p class="text-sm font-medium text-gray-600 dark:text-gray-400">Ausstehend</p>
+                    <p id="pending-count" class="text-2xl font-bold text-gray-900 dark:text-white">-</p>
+                </div>
+            </div>
+        </div>
+        
+        <div class="bg-white dark:bg-slate-800 rounded-xl p-6 shadow-lg">
+            <div class="flex items-center">
+                <div class="p-3 bg-green-100 dark:bg-green-900 rounded-full">
+                    <span class="text-2xl">✅</span>
+                </div>
+                <div class="ml-4">
+                    <p class="text-sm font-medium text-gray-600 dark:text-gray-400">Aktive OTPs</p>
+                    <p id="active-otps-count" class="text-2xl font-bold text-gray-900 dark:text-white">-</p>
+                </div>
+            </div>
+        </div>
+        
+        <div class="bg-white dark:bg-slate-800 rounded-xl p-6 shadow-lg">
+            <div class="flex items-center">
+                <div class="p-3 bg-red-100 dark:bg-red-900 rounded-full">
+                    <span class="text-2xl">⚠️</span>
+                </div>
+                <div class="ml-4">
+                    <p class="text-sm font-medium text-gray-600 dark:text-gray-400">Kritisch</p>
+                    <p id="critical-count" class="text-2xl font-bold text-gray-900 dark:text-white">-</p>
+                </div>
+            </div>
+        </div>
+        
+        <div class="bg-white dark:bg-slate-800 rounded-xl p-6 shadow-lg">
+            <div class="flex items-center">
+                <div class="p-3 bg-gray-100 dark:bg-gray-700 rounded-full">
+                    <span class="text-2xl">📋</span>
+                </div>
+                <div class="ml-4">
+                    <p class="text-sm font-medium text-gray-600 dark:text-gray-400">Gesamt</p>
+                    <p id="total-requests-count" class="text-2xl font-bold text-gray-900 dark:text-white">-</p>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <!-- Active OTPs Panel -->
+    <div id="active-otps-panel" class="mb-8 hidden">
+        <div class="bg-white dark:bg-slate-800 rounded-xl shadow-lg">
+            <div class="px-6 py-4 border-b border-gray-200 dark:border-gray-700">
+                <h2 class="text-xl font-semibold text-gray-900 dark:text-white">
+                    ⚡ Aktive OTP-Codes
+                </h2>
+                <p class="text-sm text-gray-600 dark:text-gray-400">
+                    Sofort verfügbare Codes für Gastbenutzer
+                </p>
+            </div>
+            <div id="active-otps-list" class="p-6">
+                <!-- Wird dynamisch gefüllt -->
+            </div>
+        </div>
+    </div>
+
+    <!-- Guest Requests List -->
+    <div class="bg-white dark:bg-slate-800 rounded-xl shadow-lg">
+        <div class="px-6 py-4 border-b border-gray-200 dark:border-gray-700">
+            <h2 class="text-xl font-semibold text-gray-900 dark:text-white">
+                👥 Gastanfragen
+            </h2>
+            <p class="text-sm text-gray-600 dark:text-gray-400">
+                Alle Anfragen mit OTP-Management
+            </p>
+        </div>
+        
+        <div id="guest-requests-list" class="p-6">
+            <div class="flex items-center justify-center py-12">
+                <div class="animate-spin rounded-full h-12 w-12 border-b-2 border-blue-500"></div>
+                <span class="ml-4 text-gray-600 dark:text-gray-400">Lade Gastanfragen...</span>
+            </div>
+        </div>
+    </div>
+
+    <!-- Print Modal -->
+    <div id="print-modal" class="fixed inset-0 bg-black/50 backdrop-blur-sm z-50 hidden">
+        <div class="flex items-center justify-center min-h-screen p-4">
+            <div class="bg-white dark:bg-slate-800 rounded-xl max-w-2xl w-full max-h-[90vh] overflow-y-auto">
+                <div class="px-6 py-4 border-b border-gray-200 dark:border-gray-700">
+                    <div class="flex items-center justify-between">
+                        <h3 class="text-lg font-semibold text-gray-900 dark:text-white">
+                            🖨️ Ausdruck-Vorlage
+                        </h3>
+                        <button onclick="closePrintModal()" 
+                                class="text-gray-400 hover:text-gray-600 dark:hover:text-gray-300">
+                            ✕
+                        </button>
+                    </div>
+                </div>
+                <div id="print-content" class="p-6">
+                    <!-- Wird dynamisch gefüllt -->
+                </div>
+                <div class="px-6 py-4 border-t border-gray-200 dark:border-gray-700 flex justify-end space-x-4">
+                    <button onclick="closePrintModal()" 
+                            class="px-4 py-2 text-gray-600 dark:text-gray-400 hover:text-gray-800 dark:hover:text-gray-200">
+                        Abbrechen
+                    </button>
+                    <button onclick="printTemplate()" 
+                            class="px-4 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700">
+                        🖨️ Drucken
+                    </button>
+                </div>
+            </div>
+        </div>
+    </div>
+
+</div>
+
+<script>
+// Global state
+let guestRequests = [];
+let activeOTPs = [];
+
+// CSRF Token
+const csrfToken = document.querySelector('meta[name="csrf-token"]').getAttribute('content');
+
+// Initialize page
+document.addEventListener('DOMContentLoaded', function() {
+    loadGuestRequests();
+    loadActiveOTPs();
+    
+    // Auto-refresh every 30 seconds
+    setInterval(() => {
+        loadGuestRequests();
+        loadActiveOTPs();
+    }, 30000);
+});
+
+// Load guest requests
+async function loadGuestRequests() {
+    try {
+        const response = await fetch('/api/admin/guest-requests', {
+            headers: {
+                'X-CSRFToken': csrfToken
+            }
+        });
+        
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status}`);
+        }
+        
+        const data = await response.json();
+        
+        if (data.success) {
+            guestRequests = data.requests;
+            updateStats();
+            renderGuestRequests();
+        } else {
+            showError('Fehler beim Laden der Gastanfragen');
+        }
+    } catch (error) {
+        console.error('Error loading guest requests:', error);
+        showError('Verbindungsfehler beim Laden der Gastanfragen');
+    }
+}
+
+// Load active OTPs
+async function loadActiveOTPs() {
+    try {
+        const response = await fetch('/api/admin/guest-requests/pending-otps', {
+            headers: {
+                'X-CSRFToken': csrfToken
+            }
+        });
+        
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status}`);
+        }
+        
+        const data = await response.json();
+        
+        if (data.success) {
+            activeOTPs = data.active_otps;
+            renderActiveOTPs();
+        }
+    } catch (error) {
+        console.error('Error loading active OTPs:', error);
+    }
+}
+
+// Update statistics
+function updateStats() {
+    const pending = guestRequests.filter(req => req.status === 'pending').length;
+    const activeOTPsCount = guestRequests.filter(req => req.otp_status === 'active').length;
+    const critical = activeOTPs.filter(otp => otp.urgency === 'critical').length;
+    
+    document.getElementById('pending-count').textContent = pending;
+    document.getElementById('active-otps-count').textContent = activeOTPsCount;
+    document.getElementById('critical-count').textContent = critical;
+    document.getElementById('total-requests-count').textContent = guestRequests.length;
+}
+
+// Render guest requests
+function renderGuestRequests() {
+    const container = document.getElementById('guest-requests-list');
+    
+    if (guestRequests.length === 0) {
+        container.innerHTML = `
+            <div class="text-center py-12">
+                <div class="text-6xl mb-4">📝</div>
+                <h3 class="text-xl font-semibold text-gray-900 dark:text-white mb-2">
+                    Keine Gastanfragen
+                </h3>
+                <p class="text-gray-600 dark:text-gray-400">
+                    Es sind aktuell keine Gastanfragen vorhanden.
+                </p>
+            </div>
+        `;
+        return;
+    }
+    
+    container.innerHTML = guestRequests.map(request => `
+        <div class="otp-card bg-gray-50 dark:bg-slate-700 rounded-lg p-6 mb-4 ${getUrgencyClass(request)}">
+            <div class="flex items-start justify-between">
+                <div class="flex-1">
+                    <div class="flex items-center space-x-4 mb-3">
+                        <h3 class="text-lg font-semibold text-gray-900 dark:text-white">
+                            ${request.name}
+                        </h3>
+                        <span class="px-3 py-1 rounded-full text-sm font-medium ${getStatusBadgeClass(request.status)}">
+                            ${getStatusText(request.status)}
+                        </span>
+                        ${request.otp_status === 'active' ? `
+                            <span class="px-3 py-1 bg-green-100 text-green-800 rounded-full text-sm font-medium">
+                                OTP Aktiv
+                            </span>
+                        ` : ''}
+                    </div>
+                    
+                    <div class="grid grid-cols-1 md:grid-cols-3 gap-4 text-sm">
+                        <div>
+                            <p class="text-gray-600 dark:text-gray-400">E-Mail</p>
+                            <p class="font-medium text-gray-900 dark:text-white">${request.email}</p>
+                        </div>
+                        <div>
+                            <p class="text-gray-600 dark:text-gray-400">Erstellt</p>
+                            <p class="font-medium text-gray-900 dark:text-white">
+                                ${request.created_at ? new Date(request.created_at).toLocaleString('de-DE') : '-'}
+                            </p>
+                        </div>
+                        <div>
+                            <p class="text-gray-600 dark:text-gray-400">Dauer</p>
+                            <p class="font-medium text-gray-900 dark:text-white">${request.duration_min} Min</p>
+                        </div>
+                    </div>
+                    
+                    ${request.reason ? `
+                        <div class="mt-3">
+                            <p class="text-gray-600 dark:text-gray-400 text-sm">Grund</p>
+                            <p class="text-gray-900 dark:text-white">${request.reason}</p>
+                        </div>
+                    ` : ''}
+                    
+                    ${request.otp_code && request.status === 'approved' ? `
+                        <div class="mt-4 p-4 bg-blue-50 dark:bg-blue-900/20 rounded-lg">
+                            <div class="flex items-center justify-between">
+                                <div>
+                                    <p class="text-sm font-medium text-blue-900 dark:text-blue-300">OTP-Code</p>
+                                    <p class="text-2xl font-mono font-bold text-blue-900 dark:text-blue-300">
+                                        ${request.otp_code}
+                                    </p>
+                                    <p class="text-sm text-blue-700 dark:text-blue-400">
+                                        Gültig bis: ${request.otp_expires_at ? new Date(request.otp_expires_at).toLocaleString('de-DE') : '-'}
+                                    </p>
+                                </div>
+                            </div>
+                        </div>
+                    ` : ''}
+                </div>
+                
+                <div class="flex flex-col space-y-2 ml-4">
+                    ${request.status === 'approved' ? `
+                        <button onclick="generateNewOTP(${request.id})" 
+                                class="px-3 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700 text-sm">
+                            🔄 Neuer OTP
+                        </button>
+                        <button onclick="printCredentials(${request.id})" 
+                                class="px-3 py-2 bg-green-600 text-white rounded-lg hover:bg-green-700 text-sm">
+                            🖨️ Ausdruck
+                        </button>
+                    ` : ''}
+                </div>
+            </div>
+        </div>
+    `).join('');
+}
+
+// Render active OTPs
+function renderActiveOTPs() {
+    const container = document.getElementById('active-otps-list');
+    
+    if (activeOTPs.length === 0) {
+        container.innerHTML = `
+            <p class="text-center text-gray-600 dark:text-gray-400">
+                Keine aktiven OTP-Codes vorhanden.
+            </p>
+        `;
+        return;
+    }
+    
+    container.innerHTML = activeOTPs.map(otp => `
+        <div class="flex items-center justify-between p-4 bg-gray-50 dark:bg-slate-700 rounded-lg mb-3">
+            <div class="flex items-center space-x-4">
+                <div class="p-2 bg-blue-100 dark:bg-blue-900 rounded-full">
+                    <span class="text-lg">🔑</span>
+                </div>
+                <div>
+                    <p class="font-semibold text-gray-900 dark:text-white">${otp.guest_name}</p>
+                    <p class="text-sm text-gray-600 dark:text-gray-400">
+                        Läuft ab in ${otp.hours_remaining}h
+                    </p>
+                </div>
+            </div>
+            <div class="text-right">
+                <p class="text-xl font-mono font-bold text-blue-600 dark:text-blue-400">
+                    ${otp.otp_code}
+                </p>
+                <span class="px-2 py-1 rounded text-xs font-medium ${getUrgencyBadgeClass(otp.urgency)}">
+                    ${getUrgencyText(otp.urgency)}
+                </span>
+            </div>
+        </div>
+    `).join('');
+}
+
+// Helper functions
+function getStatusText(status) {
+    const statusMap = {
+        'pending': 'Ausstehend',
+        'approved': 'Genehmigt',
+        'rejected': 'Abgelehnt'
+    };
+    return statusMap[status] || status;
+}
+
+function getStatusBadgeClass(status) {
+    const classMap = {
+        'pending': 'bg-yellow-100 text-yellow-800',
+        'approved': 'bg-green-100 text-green-800',
+        'rejected': 'bg-red-100 text-red-800'
+    };
+    return classMap[status] || 'bg-gray-100 text-gray-800';
+}
+
+function getUrgencyClass(request) {
+    if (request.otp_status === 'active') {
+        const hoursRemaining = calculateHoursRemaining(request.otp_expires_at);
+        if (hoursRemaining < 2) return 'critical';
+        if (hoursRemaining < 24) return 'warning';
+    }
+    return '';
+}
+
+function getUrgencyBadgeClass(urgency) {
+    const classMap = {
+        'critical': 'bg-red-100 text-red-800',
+        'warning': 'bg-yellow-100 text-yellow-800',
+        'normal': 'bg-green-100 text-green-800'
+    };
+    return classMap[urgency] || 'bg-gray-100 text-gray-800';
+}
+
+function getUrgencyText(urgency) {
+    const textMap = {
+        'critical': 'Kritisch',
+        'warning': 'Warnung',
+        'normal': 'Normal'
+    };
+    return textMap[urgency] || urgency;
+}
+
+function calculateHoursRemaining(expiresAt) {
+    if (!expiresAt) return 0;
+    const now = new Date();
+    const expires = new Date(expiresAt);
+    const diffMs = expires.getTime() - now.getTime();
+    return Math.max(0, Math.floor(diffMs / (1000 * 60 * 60)));
+}
+
+// Actions
+async function generateNewOTP(requestId) {
+    try {
+        const response = await fetch(`/api/admin/guest-requests/${requestId}/generate-otp`, {
+            method: 'POST',
+            headers: {
+                'X-CSRFToken': csrfToken,
+                'Content-Type': 'application/json'
+            }
+        });
+        
+        const data = await response.json();
+        
+        if (data.success) {
+            showSuccess(`Neuer OTP-Code generiert: ${data.otp_code}`);
+            loadGuestRequests();
+            loadActiveOTPs();
+        } else {
+            showError(data.error || 'Fehler beim Generieren des OTP-Codes');
+        }
+    } catch (error) {
+        console.error('Error generating OTP:', error);
+        showError('Verbindungsfehler beim Generieren des OTP-Codes');
+    }
+}
+
+async function printCredentials(requestId) {
+    try {
+        const response = await fetch(`/api/admin/guest-requests/${requestId}/print-credentials`, {
+            method: 'POST',
+            headers: {
+                'X-CSRFToken': csrfToken,
+                'Content-Type': 'application/json'
+            }
+        });
+        
+        const data = await response.json();
+        
+        if (data.success) {
+            showPrintModal(data.print_template);
+        } else {
+            showError(data.error || 'Fehler beim Erstellen des Ausdrucks');
+        }
+    } catch (error) {
+        console.error('Error creating print template:', error);
+        showError('Verbindungsfehler beim Erstellen des Ausdrucks');
+    }
+}
+
+function showActiveOTPs() {
+    const panel = document.getElementById('active-otps-panel');
+    panel.classList.toggle('hidden');
+}
+
+function showPrintModal(template) {
+    const modal = document.getElementById('print-modal');
+    const content = document.getElementById('print-content');
+    
+    content.innerHTML = `
+        <div class="print-template">
+┌─────────────────────────────────────────────────────┐
+│ ${template.title}                            │
+│ ${template.subtitle}                   │
+├─────────────────────────────────────────────────────┤
+│                                                     │
+│ 👤 GASTINFORMATIONEN:                              │
+│    Name: ${template.guest_info.name}                            │
+│    Anfrage-ID: ${template.guest_info.request_id}                     │
+│    E-Mail: ${template.guest_info.email}             │
+│    Genehmigt: ${template.guest_info.approved_at || 'N/A'}                        │
+│                                                     │
+│ 🔑 ZUGANGSDATEN:                                    │
+│    OTP-Code: ${template.access_data.otp_code}                                │
+│    Gültig bis: ${template.access_data.valid_until}                   │
+│                                                     │
+│ 🌐 SYSTEMZUGANG:                                    │
+│    Terminal vor Ort oder                           │
+│    ${template.access_data.login_url}           │
+│                                                     │
+│ 📋 NUTZUNGSREGELN:                                  │
+${template.usage_rules.map(rule => `│ • ${rule}`).join('\n')}                │
+│                                                     │
+│ 📍 ABHOLUNG SPÄTER:                                │
+│    Ort: ${template.pickup_info.location}                │
+│    Zeit: ${template.pickup_info.hours}                         │
+│    Lagerung: ${template.pickup_info.storage_days}                          │
+│                                                     │
+│ [QR-Code für System-Login]                         │
+│                                                     │
+│ 📞 Bei Fragen: Mercedes-Benz Ansprechpartner      │
+│                                                     │
+└─────────────────────────────────────────────────────┘
+
+👨‍💼 ${template.admin_note}
+        </div>
+    `;
+    
+    modal.classList.remove('hidden');
+}
+
+function closePrintModal() {
+    document.getElementById('print-modal').classList.add('hidden');
+}
+
+function printTemplate() {
+    window.print();
+    closePrintModal();
+}
+
+// Notification functions
+function showSuccess(message) {
+    // Simple success notification
+    alert('✅ ' + message);
+}
+
+function showError(message) {
+    // Simple error notification
+    alert('❌ ' + message);
+}
+</script>
+{% endblock %}