Search code examples
angularangular-router-guardsangular-auth-oidc-client

Authorization based on roles

Is there a way to easily handle authorization based on roles with the lib angular-auth-oidc-client?

As soon as a user is on the site, I want to identify them, so I use the auto-login-all-routes guards, and this far everything is ok for me. But I'd like to allow access only if the userData contains a specific role, otherwise redirect to the unauthorized page.

At first I though I could just create a custom version of auto-login-all-routes.guard.ts but as most of the services used are not exported by the module, it doesn't seem to be a good idea.

Do you have any suggestions?

Solution

  • Use 2 guards.

    First one to authenticate:

    auto-login-all-routes.guard

    Then a custom guard to listen oidcSecurityService.userData$ and check for roles.