start-os/web/projects/ui/src/app/guards/auth.guard.ts

import { Injectable } from '@angular/core'
import { Router, UrlTree } from '@angular/router'
import { map, Observable } from 'rxjs'
import { AuthService } from '../services/auth.service'

@Injectable({
  providedIn: 'root',
})
export class AuthGuard {
  constructor(
    private readonly authService: AuthService,
    private readonly router: Router,
  ) {}

  canActivate(): Observable<boolean | UrlTree> {
    return this.runAuthCheck()
  }

  canActivateChild(): Observable<boolean | UrlTree> {
    return this.runAuthCheck()
  }

  private runAuthCheck(): Observable<boolean | UrlTree> {
    return this.authService.isVerified$.pipe(
      map(verified => verified || this.router.parseUrl('/login')),
    )
  }
}