Refresh auth session with server-authoritative current user data

[Copilot]

Refreshing a session previously rotated only the JWT, leaving AuthContext.user stale until re-login. This change makes refresh also rehydrate current user profile data so cross-device/profile updates are reflected after page reload/session refresh.

• Backend: add authenticated current-user endpoint

  • Added GET /rest/users/me in UserController.
  • Added AuthService#getCurrentUserResponse() to return the logged-in user as UserResponse (including gravatar hash logic used elsewhere).

• Frontend: refresh now updates token and user context

  • Added ApiConfig.currentUserUrl (/rest/users/me).
  • Updated AuthProvider.checkCurrentAuthUser() to:
    1. call /rest/user-sessions/refresh
    2. call /rest/users/me
    3. persist fresh user in USER_DATA and update in-memory context.

• Focused test updates

  • Extended UserControllerTest with authorized/unauthorized coverage for GET /rest/users/me.
  • Updated AuthProvider tests to mock refresh + current-user fetch sequence and assert user/localStorage refresh behavior.

// AuthProvider.tsx (refresh path)
const bearerToken = await api.getJSON(ApiConfig.refreshTokenUrl);
if (bearerToken?.token) {
  const currentUser = await api.getJSON(ApiConfig.currentUserUrl);
  const userLocal = updateUserSession(currentUser, bearerToken.token);
  if (userLocal) {
    setSigned(true);
    setUser(userLocal);
  }
}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• checkstyle.org
  • Triggering command: /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java -jar /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/xml/tools/xml-extractor.jar --fileList=/tmp/codeql-scratch-8020627fcb755699/dbs/java/working/files-to-index14157248185019752309.list --sourceArchiveDir=/tmp/codeql-scratch-8020627fcb755699/dbs/java/src --outputDir=/tmp/codeql-scratch-8020627fcb755699/dbs/java/trap/java efresh-user-data it (dns block)
• download.cypress.io
  • Triggering command: /usr/local/bin/node node dist/index.js --exec install (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)