Initial commit

Next.js + Express event management app for Hope Family Church.
2026-07-23 15:26:47 +02:00
commit 3d381944d2
246 changed files with 57565 additions and 0 deletions
@@ -0,0 +1,81 @@
+"use client";
+
+import React, { useEffect } from "react";
+import { useAuth } from "@/hooks/useAuth";
+import { usePathname, useRouter } from "next/navigation";
+import { Navbar } from "@/components/layout/Navbar";
+import { Footer } from "@/components/layout/Footer";
+import { Sidebar, MobileSidebar } from "@/components/layout/Sidebar";
+
+export default function DashboardLayout({ children }: { children: React.ReactNode }) {
+  const { user, loading } = useAuth();
+  const router = useRouter();
+  const pathname = usePathname();
+
+  // Redirect unauthenticated users to login
+  useEffect(() => {
+    if (loading) return;
+    if (!user) {
+      router.replace("/login");
+    }
+  }, [user, loading, router]);
+
+  // Role-based route guard within /dashboard
+  useEffect(() => {
+    if (loading) return;
+    if (!user) return; // handled above
+    if (!pathname || !pathname.startsWith("/dashboard")) return;
+
+    const role = user.role || "user";
+
+    // Determine allowed prefixes and default destination per role
+    let allowed: string[] = ["/dashboard/user"]; // everyone can access user dashboard
+    let dest = "/dashboard/user";
+
+    if (role === "admin") {
+      allowed = ["/dashboard/admin", "/dashboard/user"];
+      dest = "/dashboard/admin";
+    } else if (role === "supervisor") {
+      allowed = ["/dashboard/supervisor", "/dashboard/user"];
+      dest = "/dashboard/supervisor";
+    } else if (role === "staff") {
+      allowed = ["/dashboard/staff", "/dashboard/user"];
+      dest = "/dashboard/staff";
+    }
+
+    // Allow admin to access supervisor and staff subpages (but not their root dashboards)
+    const isAllowed =
+      allowed.some(prefix => pathname === prefix || pathname.startsWith(prefix + "/")) ||
+      (role === "admin" && (pathname.startsWith("/dashboard/supervisor/") || pathname.startsWith("/dashboard/staff/"))) ||
+      (role === "supervisor" && pathname.startsWith("/dashboard/staff/"));
+
+    if (!isAllowed && pathname !== dest) {
+      router.replace(dest);
+    }
+  }, [pathname, user, loading, router]);
+
+  // Don't render protected content until auth state is known
+  if (loading || !user) {
+    return (
+      <div className="min-h-screen flex items-center justify-center bg-gray-50">
+        <div className="text-sm text-gray-400">Loading…</div>
+      </div>
+    );
+  }
+
+  return (
+    <div className="min-h-screen flex flex-col">
+      <Navbar />
+      <div className="flex-1 flex flex-col md:flex-row">
+        {/* Mobile dropdown navigation */}
+        <MobileSidebar />
+        {/* Desktop sidebar */}
+        <div className="hidden md:block">
+          <Sidebar />
+        </div>
+        <main className="flex-1 p-6 bg-gray-50">{children}</main>
+      </div>
+      <Footer />
+    </div>
+  );
+}