squidex/frontend/app/shared/guards/must-be-authenticated.guard.ts

/*
 * Squidex Headless CMS
 *
 * @license
 * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
 */

import { Injectable } from '@angular/core';
import { CanActivate, Router } from '@angular/router';
import { Observable } from 'rxjs';
import { map, take, tap } from 'rxjs/operators';

import { UIOptions } from '@app/framework';

import { AuthService } from './../services/auth.service';

@Injectable()
export class MustBeAuthenticatedGuard implements CanActivate {
    private readonly redirect: boolean;

    constructor(uiOptions: UIOptions,
        private readonly authService: AuthService,
        private readonly router: Router
    ) {
        this.redirect = uiOptions.get('redirectToLogin');
    }

    public canActivate(): Observable<boolean> {
        return this.authService.userChanges.pipe(
            take(1),
            tap(user => {
                if (!user) {
                    if (this.redirect) {
                        this.authService.loginRedirect();
                    } else {
                        this.router.navigate(['']);
                    }
                }
            }),
            map(user => !!user));
    }
}