diff --git a/book-rent/src/main/java/com/example/demo/controller/AdminLoanController.java b/book-rent/src/main/java/com/example/demo/controller/AdminLoanController.java
index 45482ec..0c53e5d 100644
--- a/book-rent/src/main/java/com/example/demo/controller/AdminLoanController.java
+++ b/book-rent/src/main/java/com/example/demo/controller/AdminLoanController.java
@@ -1,5 +1,118 @@
 package com.example.demo.controller;
 
-public class AdminLoanController {
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.SessionAttribute;
+import org.springframework.web.servlet.mvc.support.RedirectAttributes;
 
+import com.example.demo.common.BusinessException;
+import com.example.demo.common.Const;
+import com.example.demo.common.LoginUser;
+import com.example.demo.service.LoanService;
+
+/**
+ * 管理者用：LOAN-02 申請一覧、LOAN-03 承認/却下、LOAN-04 貸出中一覧、LOAN-05 返却。
+ * /admin/** は LoginCheckInterceptor で管理者以外を拒否する。
+ */
+@Controller
+public class AdminLoanController {
+    private final LoanService loanService;
+
+    public AdminLoanController(LoanService loanService) {
+        this.loanService = loanService;
+    }
+
+    // ===== LOAN-02 書籍申請一覧（承認待） =====
+    @GetMapping("/admin/applications")
+    public String applications(Model model) {
+        model.addAttribute("list", loanService.listByStatus(Const.STATUS_WAITING));
+        return "applicationList";
+    }
+
+    // ===== LOAN-03 承認／却下 =====
+    @GetMapping("/admin/applications/{id}")
+    public String approvalConfirm(@PathVariable Integer id, Model model, RedirectAttributes ra) {
+        try {
+            model.addAttribute("r", loanService.getView(id, Const.STATUS_WAITING));
+            return "approvalConfirm";
+        } catch (BusinessException e) {
+            ra.addFlashAttribute("errorMessage", e.getMessage());
+            return "redirect:/admin/applications";
+        }
+    }
+
+    @PostMapping("/admin/applications/{id}/approve")
+    public String approve(@PathVariable Integer id,
+                          @SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser admin, RedirectAttributes ra) {
+        try {
+            loanService.approve(id, admin);
+            ra.addFlashAttribute("message", "書籍貸出申請を承認しました。");
+            return "redirect:/admin/approval/complete";
+        } catch (BusinessException e) {
+            ra.addFlashAttribute("errorMessage", e.getMessage());
+            return "redirect:/admin/applications";
+        }
+    }
+
+    @PostMapping("/admin/applications/{id}/reject")
+    public String reject(@PathVariable Integer id,
+                         @SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser admin, RedirectAttributes ra) {
+        try {
+            loanService.reject(id, admin);
+            ra.addFlashAttribute("message", "書籍貸出申請を却下しました。");
+            return "redirect:/admin/approval/complete";
+        } catch (BusinessException e) {
+            ra.addFlashAttribute("errorMessage", e.getMessage());
+            return "redirect:/admin/applications";
+        }
+    }
+
+    @GetMapping("/admin/approval/complete")
+    public String approvalComplete(Model model) {
+        model.addAttribute("backUrl", "/admin/applications");
+        model.addAttribute("backLabel", "承認待ち一覧に戻る");
+        return "complete";
+    }
+
+    // ===== LOAN-04 貸出中書籍一覧 =====
+    @GetMapping("/admin/lendings")
+    public String lendings(Model model) {
+        model.addAttribute("list", loanService.listByStatus(Const.STATUS_LENDING));
+        return "lendingList";
+    }
+
+    // ===== LOAN-05 返却 =====
+    @GetMapping("/admin/lendings/{id}")
+    public String returnConfirm(@PathVariable Integer id, Model model, RedirectAttributes ra) {
+        try {
+            model.addAttribute("r", loanService.getView(id, Const.STATUS_LENDING));
+            return "returnConfirm";
+        } catch (BusinessException e) {
+            ra.addFlashAttribute("errorMessage", e.getMessage());
+            return "redirect:/admin/lendings";
+        }
+    }
+
+    @PostMapping("/admin/lendings/{id}/return")
+    public String doReturn(@PathVariable Integer id,
+                           @SessionAttribute(Const.SESSION_LOGIN_USER) LoginUser admin, RedirectAttributes ra) {
+        try {
+            loanService.returnBook(id, admin);
+            ra.addFlashAttribute("message", "書籍の返却が完了しました。");
+            return "redirect:/admin/return/complete";
+        } catch (BusinessException e) {
+            ra.addFlashAttribute("errorMessage", e.getMessage());
+            return "redirect:/admin/lendings";
+        }
+    }
+
+    @GetMapping("/admin/return/complete")
+    public String returnComplete(Model model) {
+        model.addAttribute("backUrl", "/admin/lendings");
+        model.addAttribute("backLabel", "貸出中書籍一覧に戻る");
+        return "complete";
+    }
 }