feat(auth): 后台登录、角色权限与会话访问策略

管理员与客服分角色登录，权限由后端判定；前端补齐登录、人员与组织管理页面。

frontend/src/__tests__/composables/useOrganizationSettings.spec.ts

@@ -0,0 +1,66 @@
+/*
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { ref } from 'vue'
+
+const updateOrganization = vi.fn()
+
+vi.mock('@/composables/useAuth', () => ({
+  useAuth: () => ({ user: ref({ organization_id: 'org-1' }) }),
+}))
+
+vi.mock('@/services/organization', () => ({
+  organizationService: {
+    getOrganization: vi.fn(),
+    getOrganizationStats: vi.fn(),
+    updateOrganization: (...args: unknown[]) => updateOrganization(...args),
+  },
+}))
+
+const { useOrganizationSettings } = await import('@/composables/useOrganizationSettings')
+
+describe('useOrganizationSettings – save errors', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('shows the API detail when the domain is already taken', async () => {
+    updateOrganization.mockRejectedValueOnce({
+      message: 'Request failed with status code 409',
+      response: { status: 409, data: { detail: 'That domain is already used by another organization.' } },
+    })
+    const settings = useOrganizationSettings()
+    settings.formData.value.domain = 'localhost'
+
+    await settings.updateOrganization()
+
+    expect(updateOrganization).toHaveBeenCalledWith('org-1', expect.objectContaining({ domain: 'localhost' }))
+    expect(settings.error.value).toBe('That domain is already used by another organization.')
+    expect(settings.message.value).toBe('')
+    expect(settings.hasChanges.value).toBe(true)
+  })
+
+  it('falls back to a generic message when there is no API detail', async () => {
+    updateOrganization.mockRejectedValueOnce({})
+    const settings = useOrganizationSettings()
+    settings.formData.value.name = 'Renamed'
+
+    await settings.updateOrganization()
+
+    expect(settings.error.value).toBe('更新组织信息失败')
+  })
+})