My AuthGuard setup works flawlessly during normal navigation within the application (see code below).
Now, consider this scenario:
A user goes to /content/secured-content, which requires authentication => they are redirected to /authentication/login due to checkLogin => after successful authentication, they are redirected back to /content/secured-content => upon clicking "Logout" and logging out (checkLogin now returns false).
Here's where things get tricky: When the user revisits the secured content page using the browser's "back" button, neither canActivate, canActivateChild, nor canLoad gets triggered, allowing access to the secured content without re-authentication. I expect the user to be redirected to /authentication/login in such a case.
Could you point out my error in reasoning and suggest a proper solution?
Attachments
Routes configuration snippet:
{
path: 'secured-content',
component: SecureComponent,
canLoad: [AuthGuard]
}
auth-guard.service.ts:
import { Injectable } from '@angular/core'
import { CanActivate, CanActivateChild, CanLoad,
Router, ActivatedRouteSnapshot, RouterStateSnapshot, Route
} from '@angular/router'
import { AuthenticationService } from 'app/authentication/authentication.service'
@Injectable()
export class AuthGuard implements CanActivate, CanActivateChild, CanLoad {
constructor(
private authService: AuthenticationService,
private router: Router
) {}
canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): boolean {
if (this.checkLogin(state.url)) {
return true
}
return false
}
canActivateChild(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): boolean {
return this.canActivate(route, state)
}
canLoad(route: Route): boolean {
const url = `/${route.path}`
return this.checkLogin(url)
}
private checkLogin(url: string): boolean {
if (this.authService.isAuthenticated()) {
return true
}
this.authService.redirectUrl = url
this.router.navigate(['/authentication/login'])
return false
}
}
ng --version:
@angular/cli: 1.0.1
node: 6.10.3
os: win32 x64
@angular/common: 4.1.2
@angular/compiler: 4.1.2
@angular/core: 4.1.2
@angular/forms: 4.1.2
@angular/http: 4.1.2
@angular/platform-browser: 4.1.2
@angular/platform-browser-dynamic: 4.1.2
@angular/router: 4.1.2
@angular/cli: 1.0.1
@angular/compiler-cli: 4.1.2