清理全局角色残留并修复项目权限判断

backend/app/api/v1/auth.py

@@ -11,7 +11,7 @@ from app.core.login_crypto import create_login_challenge, decrypt_login_payload,
 from app.core.security import create_access_token, decode_token_allow_expired, oauth2_scheme, verify_password
 from app.core.deps import get_current_user, get_db_session
 from app.crud import user as user_crud
-from app.models.user import UserRole, UserStatus
+from app.models.user import UserStatus
 from app.schemas.user import Token, UserRead, UserRegisterRequest, UserSelfUpdate, UserUpdate
 from fastapi.responses import FileResponse
 
@@ -57,7 +57,6 @@ def issue_user_token(db_user) -> Token:
     session_start = datetime.now(timezone.utc)
     access_token = create_access_token(
         user_id=str(db_user.id),
-        role=db_user.role.value if hasattr(db_user.role, "value") else db_user.role,
         expires_minutes=None,
         session_start=session_start,
     )
@@ -191,7 +190,6 @@ async def extend_access_token(
         session_start = datetime.now(timezone.utc)
     new_token = create_access_token(
         user_id=str(db_user.id),
-        role=db_user.role.value if hasattr(db_user.role, "value") else db_user.role,
         expires_minutes=None,
         session_start=session_start,
     )
@@ -210,7 +208,6 @@ async def unlock_session(
     session_start = datetime.now(timezone.utc)
     access_token = create_access_token(
         user_id=str(db_user.id),
-        role=db_user.role.value if hasattr(db_user.role, "value") else db_user.role,
         expires_minutes=None,
         session_start=session_start,
     )