SNAPSHOT W7 已部署稳定态 — 凯迪ERP+OA一体化平台 (MET 73.3%)

恢复点(restore point)。别人改崩后可 git reset --hard 回到此提交。

== 此快照内容 ==
- 后端 oa-backend: 734 控制器 / 711 实体 (Spring Boot 3.2.5 + SQLite, 端口8091)
- 前端 modern-ui/app: Vue3+Vite, 约700页 (构建产物已在 oa-backend/src/main/resources/static)
- 数据库 oa-backend/data/oa.db: 含全部演示数据 (强制入库, 6.6MB)
- 交接文档 go.md + go-code-reference/endpoints/entities/database.md
- 多代理建设脚本 .claude/wf-*.js

== 状态 ==
- 对 凯迪科技ERP_20260507.xlsx 合规 MET ~73.3% (PARTIAL 75: 34可建+6种子/bug+35外部硬天花板)
- 安全: 5轮红队+5轮复检, default-deny分级鉴权, 连续零可利用
- W3~W7 累计补完436缺口; W8末轮(40缺口)为半成品(源码树可编译但未集成)
- 运行: cd oa-backend; java -jar build/libs/oa-backend-0.1.0.jar --server.port=8091; admin/123456

== 排除(gitignore, 可再生) ==
node_modules / oa-backend/build / .jdks / *.log / Backup-ERP-* / 弃用的OFBiz核心(只保留modern-ui)
完整文件夹备份见同目录 Backup-ERP-20260615-191517/ (含上述全部, 仅缺 node_modules)

时间戳: 20260615-191517

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

ofbiz-framework/plugins/modern-ui/app/src/oa/api/auth.ts

@@ -0,0 +1,37 @@
+/**
+ * Auth API — wraps /api/oa/auth/* and manages the stored Bearer token.
+ */
+import { http, setToken, clearToken, getToken } from './http'
+
+export interface OaSession {
+  token: string
+  id: number
+  loginName: string
+  displayName: string
+  deptId: number | null
+  title: string | null
+  email: string | null
+}
+
+/** POST /auth/login -> stores the token and returns the session. */
+export async function login(loginName: string, password: string): Promise<OaSession> {
+  const session = await http.post<OaSession>('/auth/login', { loginName, password })
+  if (session?.token) setToken(session.token)
+  return session
+}
+
+/** GET /auth/session -> resolves the current session from the stored token. */
+export async function fetchSession(): Promise<OaSession> {
+  return http.get<OaSession>('/auth/session')
+}
+
+/** POST /auth/logout -> clears the stored token regardless of server result. */
+export async function logout(): Promise<void> {
+  try {
+    await http.post<void>('/auth/logout')
+  } finally {
+    clearToken()
+  }
+}
+
+export { getToken, setToken, clearToken }