feat(auth): tell the user when the session expired

Every 401 from Auth or Core now goes through useSessionExpired: the login page
says the session expired and returns to the last page after login. App no
longer removes a token that only the browser clock calls expired, so a backend
401 is the one signal. A 403 on the profile now shows an error instead.

src/pages/SettingsPage.jsx

@@ -17,6 +17,7 @@ import {Switch} from '@/components/ui/switch';
 import FormField from '../components/FormField.jsx';
 import {settingsSchema} from '../utils/validation.js';
 import {usePreferences} from '../context/PreferencesContext.jsx';
+import useSessionExpired from '../hooks/useSessionExpired.js';
 
 const BACKEND_ERROR_KEY = {
     STEAM_ID_ALREADY_IN_USE: 'REGISTRATION.ERROR_STEAM_ID_IN_USE',
@@ -37,6 +38,7 @@ const formatDate = (value, locale) => {
 export default function SettingsPage() {
     const {t, i18n} = useTranslation();
     const navigate = useNavigate();
+    const expireSession = useSessionExpired();
     const {isDarkMode, setDarkMode, setLanguage} = usePreferences();
 
     const [profile, setProfile] = useState(null);
@@ -71,8 +73,7 @@ export default function SettingsPage() {
                 });
 
                 if (response.status === 401) {
-                    localStorage.removeItem('tbp_jwt');
-                    navigate('/login');
+                    expireSession();
                     return;
                 }
 
@@ -98,7 +99,7 @@ export default function SettingsPage() {
         };
 
         load();
-    }, [navigate, reset, t]);
+    }, [navigate, expireSession, reset, t]);
 
     const persistSettings = async (payload) => {
         const token = localStorage.getItem('tbp_jwt');
@@ -118,8 +119,7 @@ export default function SettingsPage() {
             });
 
             if (response.status === 401) {
-                localStorage.removeItem('tbp_jwt');
-                navigate('/login');
+                expireSession();
                 return {ok: false};
             }