Julian Tabel
da33c62d62
- Wrap /runs/new and /genlockes/new with ProtectedRoute (requires login) - Create AdminRoute component that checks isAdmin, redirects non-admins with a toast notification - Wrap all /admin/* routes with AdminRoute - Deep-linking preserved: unauthenticated users redirect to login, then back to the original protected route after auth Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.7 KiB
1.7 KiB
title, status, type, priority, created_at, updated_at, parent, blocked_by
| title | status | type | priority | created_at | updated_at | parent | blocked_by | |
|---|---|---|---|---|---|---|---|---|
| Protect frontend routes with ProtectedRoute and AdminRoute | completed | task | normal | 2026-03-21T10:06:20Z | 2026-03-21T10:19:22Z | nuzlocke-tracker-ce4o |
|
Use the existing `ProtectedRoute` component (currently unused) and create an `AdminRoute` component to guard routes in `App.tsx`.
Checklist
- Wrap `/runs/new` and `/genlockes/new` with `ProtectedRoute` (requires login)
- Create `AdminRoute` component that checks `isAdmin` from `useAuth()`, redirects to `/` with a toast/message if not admin
- Wrap all `/admin/*` routes with `AdminRoute`
- Ensure `/runs` and `/runs/:runId` remain accessible to everyone (public run viewing)
- Verify deep-linking works (e.g., visiting `/admin/games` while logged out redirects to login, then back to `/admin/games` after auth)
Files to change
- `frontend/src/App.tsx` — wrap routes
- `frontend/src/components/ProtectedRoute.tsx` — already exists, verify it works
- `frontend/src/components/AdminRoute.tsx` — new file
Summary of Changes
Implemented frontend route protection:
- ProtectedRoute: Wraps
/runs/newand/genlockes/new- redirects unauthenticated users to/loginwith return location preserved - AdminRoute: New component that checks
isAdminfromuseAuth(), redirects non-admins to/with a toast notification - Admin routes: Wrapped
AdminLayoutwithAdminRouteto protect all/admin/*routes - Public routes:
/runsand/runs/:runIdremain accessible to everyone - Deep-linking: Location state preserved so users return to original route after login