resolve issues with new features

backend/src/controllers/auth.controller.ts

@@ -7,6 +7,7 @@ import logger from '../utils/logger';
 import auditService, { AuditAction, AuditResourceType } from '../services/audit.service';
 import { extractIp, extractUserAgent } from '../middleware/audit.middleware';
 import { getUserRole } from '../middleware/rbac.middleware';
+import pool from '../config/database';
 
 /**
  * Extract given_name and family_name from Authentik userinfo.
@@ -372,10 +373,17 @@ class AuthController {
 
       // Generate new access token
       const role = await getUserRole(user.id);
+      // Fetch groups from DB so refreshed tokens retain group info
+      const groupsResult = await pool.query(
+        'SELECT authentik_groups FROM users WHERE id = $1',
+        [user.id]
+      );
+      const groups: string[] = groupsResult.rows[0]?.authentik_groups ?? [];
       const accessToken = tokenService.generateToken({
         userId:       user.id,
         email:        user.email,
         authentikSub: user.authentik_sub,
+        groups,
         role,
       });