diff --git a/app/Http/Controllers/Api/UserController.php b/app/Http/Controllers/Api/UserController.php
index 8d6e885..1498c89 100644
--- a/app/Http/Controllers/Api/UserController.php
+++ b/app/Http/Controllers/Api/UserController.php
@@ -14,4 +14,13 @@ public function index(Request $request): JsonResponse
 
         return $this->success($user);
     }
+
+    public function update(Request $request): JsonResponse
+    {
+        $user = $request->user('api');
+
+        $user->update($request->only(['name']));
+
+        return $this->success($user);
+    }
 }
diff --git a/app/Http/Controllers/Web/AuthController.php b/app/Http/Controllers/Web/AuthController.php
index 0961542..bd85463 100644
--- a/app/Http/Controllers/Web/AuthController.php
+++ b/app/Http/Controllers/Web/AuthController.php
@@ -61,6 +61,21 @@ public function confirm_redirect(Request $request): View
         return view('confirm_redirect', compact('callback'));
     }
 
+    public function update(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'name' => 'required|string|max:255',
+        ]);
+
+        $user = $request->user('web');
+
+        $user->update([
+            'name' => $request->input('name'),
+        ]);
+
+        return back()->with('success', '更新成功。');
+    }
+
     public function newToken(Request $request): RedirectResponse
     {
         $request->validate([
diff --git a/resources/views/index.blade.php b/resources/views/index.blade.php
index 3e15916..9ef6b5a 100644
--- a/resources/views/index.blade.php
+++ b/resources/views/index.blade.php
@@ -33,6 +33,22 @@ class="text-decoration-underline">服务条款</a></p>
 
 
         <p>嗨, {{ auth('web')->user()->name }}
+        @php($user = auth('web')->user())
+        <form method="POST" action="{{ route('users.update') }}">
+            @csrf
+            @method('PATCH')
+            <div class="form-floating mb-2">
+                <input type="text" class="form-control" placeholder="用户名"
+                       aria-label="用户名" name="name" required maxlength="25"
+                       value="{{ $user->name }}">
+                <label>{{ __('Username') }}</label>
+            </div>
+
+            <button type="submit" class="btn btn-primary">
+                更新
+            </button>
+        </form>
+
         <p>在这里，你可以获取新的 Token 来对接其他应用程序或者访问 控制面板。</p>
 
         <form action="{{ route('token.new') }}" name="newToken" method="POST">
diff --git a/routes/api.php b/routes/api.php
index 67baf84..f778458 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -15,7 +15,8 @@
 Route::get('/birthdays', [IndexController::class, 'birthdays']);
 
 Route::get('user', [UserController::class, 'index']);
-Route::get('users', [UserController::class, 'index']);
+Route::patch('user', [UserController::class, 'update']);
+// Route::get('users', [UserController::class, 'index']);
 
 Route::resource('balances', BalanceController::class);
 
diff --git a/routes/web.php b/routes/web.php
index cc1c5e0..9b60076 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -12,7 +12,7 @@
 use App\Http\Controllers\Web\TransferController;
 use Illuminate\Support\Facades\Route;
 
-Route::get('/', [AuthController::class, 'index'])->name('index')->middleware('banned');
+Route::get('/', [AuthController::class, 'index'])->middleware('banned')->name('index');
 
 Route::prefix('auth')->group(function () {
     Route::get('login', [LoginController::class, 'showLoginForm'])->name('login');
@@ -40,25 +40,27 @@ function () {
         /* Start 账户区域 */
         Route::withoutMiddleware(['banned', 'verified'])->group(
             function () {
-                Route::view('banned', 'banned')->name('banned')->withoutMiddleware(['banned', 'verified']);
+                Route::view('banned', 'banned')->withoutMiddleware(['banned', 'verified'])->name('banned');
             }
         );
 
         Route::middleware(['real_named'])->group(
             function () {
-                Route::get('confirm_redirect', [AuthController::class, 'confirm_redirect'])->name('confirm_redirect')->middleware('real_named');
-                Route::post('newToken', [AuthController::class, 'newToken'])->name('token.new')->middleware('real_named');
+                Route::get('confirm_redirect', [AuthController::class, 'confirm_redirect'])->middleware('real_named')->name('confirm_redirect');
+                Route::post('newToken', [AuthController::class, 'newToken'])->middleware('real_named')->name('token.new');
             }
         );
 
         Route::delete('deleteAll', [AuthController::class, 'deleteAll'])->name('token.delete_all');
+
+        Route::patch('update', [AuthController::class, 'update'])->name('users.update');
         /* End 账户区域 */
 
         /* Start 财务 */
         Route::get('transactions', [BalanceController::class, 'transactions'])->name('transactions');
 
         Route::resource('balances', BalanceController::class)->except('show');
-        Route::get('/balances/{balance:order_id}', [BalanceController::class, 'show'])->name('balances.show')->withoutMiddleware('auth');
+        Route::get('/balances/{balance:order_id}', [BalanceController::class, 'show'])->withoutMiddleware('auth')->name('balances.show');
 
         Route::middleware(['real_named', 'password.confirm'])->group(
             function () {