Julian Tabel
e8ded9184b
## Summary - Add `is_admin` column to users table with Alembic migration and a `require_admin` FastAPI dependency that protects all admin-facing write endpoints (games, pokemon, evolutions, bosses, routes CRUD) - Expose admin status to frontend via user API and update AuthContext to fetch/store `isAdmin` after login - Make navigation menu auth-aware (different links for logged-out, logged-in, and admin users) and protect frontend routes with `ProtectedRoute` and `AdminRoute` components, preserving deep-linking through redirects - Fix test reliability: `drop_all` before `create_all` to clear stale PostgreSQL enums from interrupted test runs - Fix test auth: add `admin_client` fixture and use valid UUID for mock user so tests pass with new admin-protected endpoints ## Test plan - [x] All 252 backend tests pass - [ ] Verify non-admin users cannot access admin write endpoints (games, pokemon, evolutions, bosses CRUD) - [ ] Verify admin users can access admin endpoints normally - [ ] Verify navigation shows correct links for logged-out, logged-in, and admin states - [ ] Verify `/admin/*` routes redirect non-admin users with a toast - [ ] Verify `/runs/new` and `/genlockes/new` redirect unauthenticated users to login, then back after auth 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #67 Co-authored-by: Julian Tabel <juliantabel.jt@gmail.com> Co-committed-by: Julian Tabel <juliantabel.jt@gmail.com>
1.4 KiB
1.4 KiB
title, status, type, priority, created_at, updated_at, parent, blocked_by
| title | status | type | priority | created_at | updated_at | parent | blocked_by | |
|---|---|---|---|---|---|---|---|---|
| Auth-aware navigation menu | completed | task | normal | 2026-03-21T10:06:20Z | 2026-03-21T10:22:34Z | nuzlocke-tracker-ce4o |
|
Update the Layout component to show different nav links based on auth state and admin role.
Checklist
- Replace static `navLinks` array with dynamic links based on `useAuth()` state
- Logged out: Home, Runs, Genlockes, Stats (no New Run, no Admin)
- Logged in (non-admin): New Run, My Runs, Genlockes, Stats
- Logged in (admin): New Run, My Runs, Genlockes, Stats, Admin
- Update both desktop and mobile nav (they share the same `navLinks` array, so this should be automatic)
- Verify menu updates reactively on login/logout
Files to change
- `frontend/src/components/Layout.tsx` — make `navLinks` dynamic based on auth state
Summary of Changes
- Removed static
navLinksarray from module scope - Added dynamic
navLinkscomputation insideLayoutcomponent usinguseMemo - Navigation now depends on
userandisAdminfromuseAuth():- Logged out: Home, Runs, Genlockes, Stats
- Logged in (non-admin): New Run, My Runs, Genlockes, Stats
- Logged in (admin): New Run, My Runs, Genlockes, Stats, Admin
- Updated
isActivefunction to handle Home route (/) correctly - Both desktop and mobile nav automatically use the same dynamic
navLinksarray