Feature : Added server side verification for all routes .

docs/docs/auto-docs/GraphQl/Queries/Queries/variables/VERIFY_ROLE.md

@@ -0,0 +1,9 @@
+[Admin Docs](/)
+
+***
+
+# Variable: VERIFY\_ROLE
+
+> `const` **VERIFY\_ROLE**: `DocumentNode`
+
+Defined in: [src/GraphQl/Queries/Queries.ts:867](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/GraphQl/Queries/Queries.ts#L867)

docs/docs/auto-docs/components/SecuredRoute/SecuredRoute/functions/default.md

@@ -6,7 +6,7 @@
 
 > **default**(): `Element`
 
-Defined in: [src/components/SecuredRoute/SecuredRoute.tsx:16](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/SecuredRoute/SecuredRoute.tsx#L16)
+Defined in: [src/components/SecuredRoute/SecuredRoute.tsx:18](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/SecuredRoute/SecuredRoute.tsx#L18)
 
 A route guard that checks if the user is logged in and has the necessary permissions.
 

docs/docs/auto-docs/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser/functions/default.md

@@ -6,7 +6,7 @@
 
 > **default**(): `Element`
 
-Defined in: [src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx:14](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx#L14)
+Defined in: [src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx:16](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx#L16)
 
 A component that guards routes by checking if the user is logged in.
 If the user is logged in and does not have 'AdminFor' set, the child routes are rendered.

src/GraphQl/Queries/Queries.ts

@@ -864,6 +864,14 @@ export const GET_COMMUNITY_SESSION_TIMEOUT_DATA = gql`
     }
   }
 `;
+export const VERIFY_ROLE = gql`
+  query verifyRole {
+    verifyRole {
+      isAuthorized
+      role
+    }
+  }
+`;
 
 // get the list of Action Item Categories
 export { ACTION_ITEM_CATEGORY_LIST } from './ActionItemCategoryQueries';

src/components/SecuredRoute/SecuredRoute.tsx

@@ -1,4 +1,6 @@
-import React from 'react';
+import { useQuery } from '@apollo/client';
+import { VERIFY_ROLE } from 'GraphQl/Queries/Queries';
+import React, { useEffect } from 'react';
 import { Navigate, Outlet } from 'react-router-dom';
 import { toast } from 'react-toastify';
 import PageNotFound from 'screens/PageNotFound/PageNotFound';
@@ -14,14 +16,40 @@ const { getItem, setItem } = useLocalStorage();
  * @returns The JSX element representing the secured route.
  */
 const SecuredRoute = (): JSX.Element => {
-  const isLoggedIn = getItem('IsLoggedIn');
-  const adminFor = getItem('AdminFor');
-
-  return isLoggedIn === 'TRUE' ? (
-    <>{adminFor != null ? <Outlet /> : <PageNotFound />}</>
-  ) : (
-    <Navigate to="/" replace />
-  );
+  const { data, loading, error, refetch } = useQuery(VERIFY_ROLE, {
+    context: {
+      headers: {
+        Authorization: `Bearer ${getItem('token')}`,
+      },
+    },
+  });
+  useEffect(() => {
+    refetch(); // Refetch when token updates
+  }, [getItem('token')]);
+
+  if (loading) {
+    return <div> Loading.....</div>;
+  } else if (error) {
+    return <div>Error During Routing ...</div>;
+  } else {
+    const isLoggedIn = data.verifyRole.isAuthorized;
+    const role = data.verifyRole.role;
+    const restrictedRoutesForAdmin = ['/member', '/users', '/communityProfile'];
+    if (isLoggedIn) {
+      if (role == 'superAdmin') {
+        return <Outlet />;
+      } else if (role == 'admin') {
+        if (restrictedRoutesForAdmin.includes(location.pathname)) {
+          return <PageNotFound />;
+        }
+        return <Outlet />;
+      } else {
+        return <PageNotFound />;
+      }
+    } else {
+      return <Navigate to="/" replace />;
+    }
+  }
 };
 
 // Time constants for session timeout and inactivity interval

src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx

@@ -1,4 +1,6 @@
-import React from 'react';
+import { useQuery } from '@apollo/client';
+import { VERIFY_ROLE } from 'GraphQl/Queries/Queries';
+import React, { useEffect } from 'react';
 import { Navigate, Outlet } from 'react-router-dom';
 import PageNotFound from 'screens/PageNotFound/PageNotFound';
 import useLocalStorage from 'utils/useLocalstorage';
@@ -14,17 +16,34 @@
 const SecuredRouteForUser = (): JSX.Element => {
   // Custom hook to interact with local storage
   const { getItem } = useLocalStorage();
+  const { data, loading, error, refetch } = useQuery(VERIFY_ROLE, {
+    context: {
+      headers: {
+        Authorization: `Bearer ${getItem('token')}`,
+      },
+    },
+  });
+  useEffect(() => {
+    refetch(); // Refetch when token updates
+  }, [getItem('token')]);
 
-  // Check if the user is logged in and the role of the user
-  const isLoggedIn = getItem('IsLoggedIn');
-  const adminFor = getItem('AdminFor');
-
-  // Conditional rendering based on authentication status and role
-  return isLoggedIn === 'TRUE' ? (
-    <>{adminFor == undefined ? <Outlet /> : <PageNotFound />}</>
-  ) : (
-    <Navigate to="/" replace />
-  );
+  if (loading) {
+    return <div> Loading.....</div>;
+  } else if (error) {
+    return <div>Error During Routing ...</div>;
+  } else {
+    const isLoggedIn = data.verifyRole.isAuthorized;
+    const role = data.verifyRole.role;
+    if (isLoggedIn) {
+      if (role == 'user') {
+        return <Outlet />;
+      } else {
+        return <PageNotFound />;
+      }
+    } else {
+      return <Navigate to="/" replace />;
+    }
+  }
 };
 
 export default SecuredRouteForUser;