feat: feat: Protect home page with Angular Guards, version clean

Author: matheusandre1

timeless-api/src/main/webui/src/app/app.routes.ts

@@ -6,6 +6,7 @@ import { SignInComponent } from './pages/sign/sign-in/sign-in.component';
 import { RegisteredComponent } from './pages/sign/registered/registered.component';
 import { UserConfigComponent } from './pages/user-config/user-config.component';
 import { RecordsComponent } from './components/records/records.component';
+import { AuthGuard } from './guards/auth_guard.guard';
 
 export const routes: Routes = [
   {
@@ -29,6 +30,8 @@ export const routes: Routes = [
   {
     path: 'home',
     component: HomeComponent,
+    canActivate: [AuthGuard],
+    canActivateChild: [AuthGuard],
     children: [
       {
         path: '',

timeless-api/src/main/webui/src/app/guards/auth_guard.guard.ts

@@ -0,0 +1,40 @@
+import { Injectable } from '@angular/core';
+import {
+  CanActivate,
+  CanActivateChild,
+  Router,
+  ActivatedRouteSnapshot,
+  RouterStateSnapshot,
+  UrlTree,
+} from '@angular/router';
+import { timelessLocalStorageKey } from '../constants';
+import { TimelessApiService } from '../timeless-api.service';
+import { Observable, of } from 'rxjs';
+import { catchError, map } from 'rxjs/operators';
+
+@Injectable({ providedIn: 'root' })
+export class AuthGuard implements CanActivate, CanActivateChild {
+  constructor(
+    private readonly router: Router,
+    private readonly apiService: TimelessApiService,
+  ) {}
+
+  canActivate(
+    route: ActivatedRouteSnapshot,
+    state: RouterStateSnapshot,
+  ): Observable<boolean | UrlTree> {
+    return this.apiService.userInfo().pipe(
+      map(() => true),
+      catchError(() => {
+        return of(this.router.createUrlTree(['/']));
+      }),
+    );
+  }
+
+  canActivateChild(
+    childRoute: ActivatedRouteSnapshot,
+    state: RouterStateSnapshot,
+  ): Observable<boolean | UrlTree> {
+    return this.canActivate(childRoute, state);
+  }
+}

timeless-api/src/main/webui/src/app/timeless-api.service.ts

@@ -51,7 +51,11 @@ export class TimelessApiService {
       throw new Error();
     }
     const user = JSON.parse(data);
-    return this.httpClient.get(`/api/users/${user.id}`);
+    return this.httpClient.get(`/api/users/${user.id}`, {
+      headers: {
+        Authorization: `Bearer ${user.token}`,
+      },
+    });
   }
 
   deleteRecord(id: number) {