v3: added a roles/permissions system, added user management tab on user profile

src/contexts/AuthProvider.tsx

@@ -30,6 +30,13 @@ export function AuthProvider({ children }: { children: ReactNode }) {
       localStorage.removeItem("authResponse");
       return null;
     }
+    // Sessions persisted before roles existed have no `role`; the server also
+    // rejects their tokens, but discard them here so the UI never renders with
+    // a roleless user.
+    if (!parsed.user.role) {
+      localStorage.removeItem("authResponse");
+      return null;
+    }
 
     return parsed;
   });