Feature : Added server side verification for all routes .

docs/docs/auto-docs/GraphQl/Queries/Queries/variables/VERIFY_ROLE.md

@@ -0,0 +1,9 @@
+[Admin Docs](/)
+
+***
+
+# Variable: VERIFY\_ROLE
+
+> `const` **VERIFY\_ROLE**: `DocumentNode`
+
+Defined in: [src/GraphQl/Queries/Queries.ts:867](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/GraphQl/Queries/Queries.ts#L867)

docs/docs/auto-docs/components/SecuredRoute/SecuredRoute/functions/default.md

@@ -6,7 +6,7 @@
 
 > **default**(): `Element`
 
-Defined in: [src/components/SecuredRoute/SecuredRoute.tsx:16](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/SecuredRoute/SecuredRoute.tsx#L16)
+Defined in: [src/components/SecuredRoute/SecuredRoute.tsx:18](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/SecuredRoute/SecuredRoute.tsx#L18)
 
 A route guard that checks if the user is logged in and has the necessary permissions.
 

docs/docs/auto-docs/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser/functions/default.md

@@ -6,7 +6,7 @@
 
 > **default**(): `Element`
 
-Defined in: [src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx:14](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx#L14)
+Defined in: [src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx:16](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/components/UserPortal/SecuredRouteForUser/SecuredRouteForUser.tsx#L16)
 
 A component that guards routes by checking if the user is logged in.
 If the user is logged in and does not have 'AdminFor' set, the child routes are rendered.

docs/docs/auto-docs/screens/MemberDetail/MemberDetail/functions/getLanguageName.md

@@ -6,7 +6,7 @@
 
 > **getLanguageName**(`code`): `string`
 
-Defined in: [src/screens/MemberDetail/MemberDetail.tsx:742](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/MemberDetail/MemberDetail.tsx#L742)
+Defined in: [src/screens/MemberDetail/MemberDetail.tsx:744](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/MemberDetail/MemberDetail.tsx#L744)
 
 ## Parameters
 

docs/docs/auto-docs/screens/MemberDetail/MemberDetail/functions/prettyDate.md

@@ -6,7 +6,7 @@
 
 > **prettyDate**(`param`): `string`
 
-Defined in: [src/screens/MemberDetail/MemberDetail.tsx:732](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/MemberDetail/MemberDetail.tsx#L732)
+Defined in: [src/screens/MemberDetail/MemberDetail.tsx:734](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/MemberDetail/MemberDetail.tsx#L734)
 
 ## Parameters
 

docs/docs/auto-docs/screens/PageNotFound/PageNotFound/functions/default.md

@@ -6,7 +6,7 @@
 
 > **default**(): `Element`
 
-Defined in: [src/screens/PageNotFound/PageNotFound.tsx:15](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/PageNotFound/PageNotFound.tsx#L15)
+Defined in: [src/screens/PageNotFound/PageNotFound.tsx:16](https://github.com/PalisadoesFoundation/talawa-admin/blob/main/src/screens/PageNotFound/PageNotFound.tsx#L16)
 
 The `PageNotFound` component displays a 404 error page when a user navigates to a non-existent route.
 It shows a message indicating that the page was not found and provides a link to redirect users back

src/App.spec.tsx

@@ -4,13 +4,14 @@ import { Provider } from 'react-redux';
 import { MockedProvider } from '@apollo/react-testing';
 import { BrowserRouter } from 'react-router-dom';
 import { I18nextProvider } from 'react-i18next';
-import { describe, it, expect, vi } from 'vitest';
+import { describe, it, expect, vi, beforeEach } from 'vitest';
 import App from './App';
 import { store } from 'state/store';
-import { CHECK_AUTH } from 'GraphQl/Queries/Queries';
+import { CHECK_AUTH, VERIFY_ROLE } from 'GraphQl/Queries/Queries';
 import i18nForTest from './utils/i18nForTest';
 import { StaticMockLink } from 'utils/StaticMockLink';
 
+// Mock external dependencies
 vi.mock('@mui/x-charts/PieChart', () => ({
   pieArcLabelClasses: vi.fn(),
   PieChart: vi.fn().mockImplementation(() => <>Test</>),
@@ -55,19 +56,45 @@ const MOCKS = [
       },
     },
   },
+  {
+    request: {
+      query: VERIFY_ROLE,
+    },
+    result: {
+      data: {
+        verifyRole: {
+          isAuthorized: false,
+          role: 'user',
+        },
+      },
+    },
+  },
 ];
 
 const link = new StaticMockLink(MOCKS, true);
-const link2 = new StaticMockLink([], true);
+const link2 = new StaticMockLink(
+  [
+    {
+      request: { query: CHECK_AUTH },
+      result: { data: { checkAuth: null } }, // Simulating logged-out state
+    },
+    {
+      request: { query: VERIFY_ROLE },
+      result: { data: { verifyRole: null } }, // Ensure verifyRole exists, even if null
+    },
+  ],
+  true,
+);
+
+const wait = (ms = 100): Promise<void> =>
+  new Promise((resolve) => setTimeout(resolve, ms));
 
-async function wait(ms = 100): Promise<void> {
-  await new Promise((resolve) => {
-    setTimeout(resolve, ms);
+describe('App Component Tests', () => {
+  beforeEach(() => {
+    window.history.pushState({}, '', '/');
   });
-}
 
-describe('Testing the App Component', () => {
-  it('Component should be rendered properly and user is logged in', async () => {
+  it('should render properly when user is logged in', async () => {
     render(
       <MockedProvider addTypename={false} link={link}>
         <BrowserRouter>
@@ -84,15 +111,16 @@ describe('Testing the App Component', () => {
 
     window.history.pushState({}, '', '/orglist');
     await wait();
+
     expect(window.location.pathname).toBe('/orglist');
     expect(
       screen.getByText(
         'An open source application by Palisadoes Foundation volunteers',
       ),
-    ).toBeTruthy();
+    ).toBeInTheDocument();
   });
 
-  it('Component should be rendered properly and user is logged out', async () => {
+  it('should render properly when user is logged out', async () => {
     render(
       <MockedProvider addTypename={false} link={link2}>
         <BrowserRouter>

src/GraphQl/Queries/Queries.ts

@@ -864,6 +864,14 @@ export const GET_COMMUNITY_SESSION_TIMEOUT_DATA = gql`
     }
   }
 `;
+export const VERIFY_ROLE = gql`
+  query verifyRole {
+    verifyRole {
+      isAuthorized
+      role
+    }
+  }
+`;
 
 // get the list of Action Item Categories
 export { ACTION_ITEM_CATEGORY_LIST } from './ActionItemCategoryQueries';

src/components/SecuredRoute/SecuredRoute.tsx

@@ -1,5 +1,7 @@
-import React from 'react';
-import { Navigate, Outlet } from 'react-router-dom';
+import { useQuery } from '@apollo/client';
+import { VERIFY_ROLE } from 'GraphQl/Queries/Queries';
+import React, { useEffect } from 'react';
+import { Navigate, Outlet, useLocation } from 'react-router-dom';
 import { toast } from 'react-toastify';
 import PageNotFound from 'screens/PageNotFound/PageNotFound';
 import useLocalStorage from 'utils/useLocalstorage';
@@ -14,14 +16,51 @@ const { getItem, setItem } = useLocalStorage();
  * @returns The JSX element representing the secured route.
  */
 const SecuredRoute = (): JSX.Element => {
-  const isLoggedIn = getItem('IsLoggedIn');
-  const adminFor = getItem('AdminFor');
-
-  return isLoggedIn === 'TRUE' ? (
-    <>{adminFor != null ? <Outlet /> : <PageNotFound />}</>
-  ) : (
-    <Navigate to="/" replace />
-  );
+  const location = useLocation();
+  const { data, loading, error, refetch } = useQuery(VERIFY_ROLE, {
+    skip: !getItem('token'),
+    context: {
+      headers: {
+        Authorization: `Bearer ${getItem('token')}`,
+      },
+    },
+  });
+  const [token, setToken] = React.useState(getItem('token'));
+
+  useEffect(() => {
+    const newToken = getItem('token');
+    if (newToken !== token) {
+      setToken(newToken);
+    }
+  }, []);
+
+  useEffect(() => {
+    refetch(); // Refetch when token updates
+  }, [token]);
+
+  if (loading) {
+    return <div> Loading.....</div>;
+  } else if (error) {
+    return <div>Error During Routing ...</div>;
+  } else {
+    const role = data?.verifyRole?.role || '';
+    const isLoggedIn = data?.verifyRole?.isAuthorized ?? false;
+    const restrictedRoutesForAdmin = ['/member', '/users', '/communityProfile'];
+    if (isLoggedIn) {
+      if (role == 'superAdmin') {
+        return <Outlet />;
+      } else if (role == 'admin') {
+        if (restrictedRoutesForAdmin.includes(location.pathname)) {
+          return <PageNotFound />;
+        }
+        return <Outlet />;
+      } else {
+        return <PageNotFound />;
+      }
+    } else {
+      return <Navigate to="/" replace />;
+    }
+  }
 };
 
 // Time constants for session timeout and inactivity interval