Update site changes

frontend/src/context/AuthContext.tsx

@@ -28,6 +28,7 @@ interface AuthContextType {
   logout: () => void;
   updateUser: (user: User) => void;
   setAuthData: (data: { user: User; token: string }) => void;
+  refreshUser: () => Promise<void>;
 }
 
 interface RegisterData {
@@ -48,6 +49,35 @@ export function AuthProvider({ children }: { children: ReactNode }) {
   const [token, setToken] = useState<string | null>(null);
   const [isLoading, setIsLoading] = useState(true);
 
+  const refreshUser = useCallback(async () => {
+    const currentToken = localStorage.getItem(TOKEN_KEY);
+    if (!currentToken) return;
+
+    try {
+      const res = await fetch(`${API_BASE}/api/auth/me`, {
+        headers: { 
+          'Authorization': `Bearer ${currentToken}`,
+          'Content-Type': 'application/json',
+        },
+      });
+
+      if (res.ok) {
+        const data = await res.json();
+        setUser(data.user);
+        localStorage.setItem(USER_KEY, JSON.stringify(data.user));
+      } else if (res.status === 401) {
+        // Token is invalid, clear auth state
+        setToken(null);
+        setUser(null);
+        localStorage.removeItem(TOKEN_KEY);
+        localStorage.removeItem(USER_KEY);
+      }
+    } catch (error) {
+      // Network error, keep using cached data
+      console.error('Failed to refresh user data:', error);
+    }
+  }, []);
+
   useEffect(() => {
     // Load auth state from localStorage
     const savedToken = localStorage.getItem(TOKEN_KEY);
@@ -56,9 +86,12 @@ export function AuthProvider({ children }: { children: ReactNode }) {
     if (savedToken && savedUser) {
       setToken(savedToken);
       setUser(JSON.parse(savedUser));
+      // Refresh user data from server to get latest role/permissions
+      refreshUser().finally(() => setIsLoading(false));
+    } else {
+      setIsLoading(false);
     }
-    setIsLoading(false);
-  }, []);
+  }, [refreshUser]);
 
   const setAuthData = useCallback((data: { user: User; token: string }) => {
     setToken(data.token);
@@ -159,6 +192,7 @@ export function AuthProvider({ children }: { children: ReactNode }) {
         logout,
         updateUser,
         setAuthData,
+        refreshUser,
       }}
     >
       {children}