RouteGuard.tsx

/**
 * Copyright 2026 GitProxy Contributors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

import React, { useEffect, useState } from 'react';
import { Navigate } from 'react-router-dom';
import { useAuth } from '../../auth/AuthProvider';
import { setUIRouteAuthData } from '../../services/config';
import { UIRouteAuth } from '../../../config/generated/config';
import CircularProgress from '@material-ui/core/CircularProgress';

interface RouteGuardProps {
  component: React.ComponentType;
  fullRoutePath: string;
}

const RouteGuard = ({ component: Component, fullRoutePath }: RouteGuardProps) => {
  const { user, isLoading } = useAuth();

  const [loginRequired, setLoginRequired] = useState(false);
  const [adminOnly, setAdminOnly] = useState(false);
  const [authChecked, setAuthChecked] = useState(false);

  useEffect(() => {
    setUIRouteAuthData((uiRouteAuth: UIRouteAuth) => {
      if (uiRouteAuth?.enabled) {
        for (const rule of uiRouteAuth.rules ?? []) {
          if (new RegExp(rule.pattern ?? '').test(fullRoutePath)) {
            // Allow multiple rules to be applied according to route precedence
            // Ex: /dashboard/admin/* will override /dashboard/*
            setLoginRequired(loginRequired || rule.loginRequired || false);
            setAdminOnly(adminOnly || rule.adminOnly || false);
          }
        }
      }
      setAuthChecked(true);
    });
  }, [fullRoutePath]);

  if (!authChecked || isLoading) {
    return <CircularProgress />;
  }

  if (loginRequired && !user) {
    return <Navigate to='/login' />;
  }

  if (user?.mustChangePassword) {
    return <Navigate to='/login' />;
  }

  if (adminOnly && !user?.admin) {
    return <Navigate to='/not-authorized' />;
  }

  return <Component />;
};

export default RouteGuard;