v3: fixed authorization bug with stale tokens, fixed private dump access bug, various small fixes across the app

src/components/JournalCard.tsx

@@ -4,7 +4,8 @@ import { Plural, Trans } from "@lingui/react/macro";
 import type { Dump } from "../model.ts";
 import { API_URL } from "../config/api.ts";
 import { relativeTime } from "../utils/relativeTime.ts";
-import { dumpUrl } from "../utils/urls.ts";
+import { dumpFileUrl, dumpUrl } from "../utils/urls.ts";
+import { useAuth } from "../hooks/useAuth.ts";
 import { isDumpVisited, isRecent, markDumpVisited } from "../utils/visited.ts";
 import { VoteButton } from "./VoteButton.tsx";
 import { Markdown } from "./Markdown.tsx";
@@ -29,6 +30,7 @@ export function JournalCard(
     JournalCardProps,
 ) {
   const navigate = useNavigate();
+  const { token } = useAuth();
   const { play } = useContext(PlayerContext);
   const unread = !isOwner && isRecent(dump.createdAt) &&
     !isDumpVisited(dump.id);
@@ -40,7 +42,7 @@ export function JournalCard(
 
   const rawThumbnail =
     dump.kind === "file" && dump.fileMime?.startsWith("image/")
-      ? `${API_URL}/api/files/${dump.id}?v=${dump.fileSize ?? 0}`
+      ? dumpFileUrl(dump, token)
       : (dump.richContent?.thumbnailUrl ?? null);
 
   // Route external HTTP thumbnails through the server proxy to avoid