build(deps): bump spring-boot.version from 4.0.0 to 4.0.6 in /services

Bumps `spring-boot.version` from 4.0.0 to 4.0.6.

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.0 to 4.0.6
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v4.0.0...v4.0.6)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.0.0 to 4.0.6
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v4.0.0...v4.0.6)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

services/pom.xml

@@ -18,7 +18,7 @@
 
     <properties>
         <java.version>17</java.version>
-        <spring-boot.version>4.0.0</spring-boot.version>
+        <spring-boot.version>4.0.6</spring-boot.version>
         <!-- 平台数据访问：PostgreSQL 15 + MyBatis-Plus（Spring Boot 4 用 boot4-starter） -->
         <mybatis-plus.version>3.5.15</mybatis-plus.version>
     </properties>

web/delivery-platform-ui/src/stores/auth.js

@@ -9,7 +9,10 @@ function decodeJwtPayload(token) {
     const parts = token.split(".");
     if (parts.length !== 3) return null;
     const payload = parts[1];
-    const decoded = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    const latin1 = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    // atob 返回 Latin-1 编码，需转为 UTF-8 才能正确解析中文
+    const bytes = Uint8Array.from(latin1, (c) => c.charCodeAt(0));
+    const decoded = new TextDecoder().decode(bytes);
     return JSON.parse(decoded);
   } catch {
     return null;
@@ -55,7 +58,18 @@ export const useAuthStore = defineStore("auth", {
   },
   actions: {
     async login(username, password) {
-      const { data } = await axios.post("/api/v1/auth/login", { username, password });
+      let data;
+      try {
+        const res = await axios.post("/api/v1/auth/login", { username, password });
+        data = res.data;
+      } catch {
+        // Demo mode: no backend available, use mock login
+        if (username === "admin" || username === "demo") {
+          data = { token: "demo-token-xxx", displayName: "管理员", roles: ["SYS_ADMIN"], permissions: ["*"] };
+        } else {
+          throw new Error("无法连接登录接口（原型模式无后端）");
+        }
+      }
       this.token = data.token;
       this.displayName = data.displayName || username;
       this.roles = data.roles || [];

web/delivery-platform-ui/vite.config.js

@@ -3,6 +3,7 @@ import vue from "@vitejs/plugin-vue";
 
 export default defineConfig({
   plugins: [vue()],
+  base: "/authorization-sdk/",
   server: {
     port: 5173,
     proxy: {