Angular Security course

Author: jhades

server/authorization.middleware.ts

@@ -12,9 +12,7 @@ import {login} from "./login.route";
 import {retrieveUserIdFromRequest} from "./get-user.middleware";
 import {checkIfAuthenticated} from "./authentication.middleware";
 import {checkCsrfToken} from "./csrf.middleware";
-import {loginAsUser} from "./login-as-user.route";
-import {checkIfAuthorized} from "./authorization.middleware";
-import * as _ from 'lodash';
+
 const bodyParser = require('body-parser');
 const cookieParser = require('cookie-parser');
 
@@ -36,15 +34,11 @@ const options = commandLineArgs(optionDefinitions);
 
 // REST API
 app.route('/api/lessons')
-    .get(checkIfAuthenticated, _.partial(checkIfAuthorized, ['STUDENT']), readAllLessons);
+    .get(checkIfAuthenticated, readAllLessons);
 
 app.route('/api/signup')
     .post(createUser);
 
-
-app.route('/api/admin')
-    .post(checkIfAuthenticated, _.partial(checkIfAuthorized, ['ADMIN']) , loginAsUser);
-
 app.route('/api/user')
     .get(getUser);
 

server/login-as-user.route.ts

@@ -9,7 +9,7 @@
         <li>
             <a routerLink="/lessons">Lessons</a>
         </li>
-        <li *rbacAllow="['ADMIN']">
+        <li>
             <a routerLink="/admin">Admin</a>
         </li>
         <li *ngIf="isLoggedOut$ | async">

server/server.ts

@@ -11,6 +11,9 @@ import {LessonsService} from "./services/lessons.service";
 import {ReactiveFormsModule} from "@angular/forms";
 
 import {AuthService} from "./services/auth.service";
+import { AdminComponent } from './admin/admin.component';
+import { RouterModule} from "@angular/router";
+
 
 import 'rxjs/add/operator/switchMap';
 import 'rxjs/add/operator/map';
@@ -20,11 +23,6 @@ import 'rxjs/add/operator/filter';
 import 'rxjs/add/operator/catch';
 import 'rxjs/add/operator/first';
 import 'rxjs/add/observable/of';
-import { AdminComponent } from './admin/admin.component';
-import {AuthorizationGuard} from "./services/auth.guard";
-import {Router, RouterModule} from "@angular/router";
-import {RbacAllow} from "./common/rbac-allow.directive";
-
 
 
 
@@ -35,8 +33,7 @@ import {RbacAllow} from "./common/rbac-allow.directive";
     LessonsComponent,
     LoginComponent,
     SignupComponent,
-    AdminComponent,
-    RbacAllow
+    AdminComponent
   ],
   imports: [
     BrowserModule,
@@ -49,15 +46,6 @@ import {RbacAllow} from "./common/rbac-allow.directive";
       ReactiveFormsModule
   ],
   providers: [
-      {
-          provide: 'adminsOnlyGuard',
-          useFactory: (authService:AuthService,
-                       router:Router) => new AuthorizationGuard(['ADMIN'], authService, router),
-          deps: [
-              AuthService,
-              Router
-          ]
-      },
       LessonsService,
       AuthService
   ],

src/app/app.component.html

@@ -19,8 +19,7 @@ export const routesConfig: Routes = [
     },
     {
         path: 'admin',
-        component: AdminComponent,
-        canActivate: ["adminsOnlyGuard"]
+        component: AdminComponent
     },
     {
         path: '',