New button disappears after extend session dialog appears | during other activity

[amadulhaxxani]

According to current observation the NEW button in the sidebar disappears after waiting for sometime. Detailed investigation would be required to see if its caused by the session update or something else is causing it.

[amadulhaxxani]

@kosarko @kuchtiak-ufal
There will be a PR which will fix the frontend side where we a refresh the token after the click on extend button but there is definitely some problem with the backend.

so I pasting the videos before and after the extend session dialog and we can see clearly the canSubmit eps are missions permission or something.

a detailed analysis from copilot gives back:
When a Shibboleth user extends their session, the frontend correctly asks the backend for a new token. The backend issues a new token, but it strips the special groups (sg claim) because it tries to recompute them from HTTP headers that are only present during the initial login. Without those groups, the user loses submit permissions. The fix is simple: during a token refresh, copy the sg claim from the old (incoming) token into the new token. This keeps the groups intact and solves the problem. Local login is unaffected because it never relied on headers.

Before:

Recording.2026-06-09.161856.mp4

after:

Recording.2026-06-09.162142.mp4