build(deps): bump actions/setup-node from 4 to 6

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/ci-platform.yml

@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: "20"
       - name: npm install and build

.github/workflows/ci-security.yml

@@ -42,7 +42,7 @@ jobs:
         working-directory: web/delivery-platform-ui
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: npm

web/delivery-platform-ui/src/stores/auth.js

@@ -9,7 +9,10 @@ function decodeJwtPayload(token) {
     const parts = token.split(".");
     if (parts.length !== 3) return null;
     const payload = parts[1];
-    const decoded = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    const latin1 = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    // atob 返回 Latin-1 编码，需转为 UTF-8 才能正确解析中文
+    const bytes = Uint8Array.from(latin1, (c) => c.charCodeAt(0));
+    const decoded = new TextDecoder().decode(bytes);
     return JSON.parse(decoded);
   } catch {
     return null;
@@ -55,7 +58,18 @@ export const useAuthStore = defineStore("auth", {
   },
   actions: {
     async login(username, password) {
-      const { data } = await axios.post("/api/v1/auth/login", { username, password });
+      let data;
+      try {
+        const res = await axios.post("/api/v1/auth/login", { username, password });
+        data = res.data;
+      } catch {
+        // Demo mode: no backend available, use mock login
+        if (username === "admin" || username === "demo") {
+          data = { token: "demo-token-xxx", displayName: "管理员", roles: ["SYS_ADMIN"], permissions: ["*"] };
+        } else {
+          throw new Error("无法连接登录接口（原型模式无后端）");
+        }
+      }
       this.token = data.token;
       this.displayName = data.displayName || username;
       this.roles = data.roles || [];

web/delivery-platform-ui/vite.config.js

@@ -3,6 +3,7 @@ import vue from "@vitejs/plugin-vue";
 
 export default defineConfig({
   plugins: [vue()],
+  base: "/authorization-sdk/",
   server: {
     port: 5173,
     proxy: {