SidharthPL/Canteen-Management-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: complete security overhaul with JWT backend and authenticated frontend API

Browse Source
This commit is contained in:
Shanmuga Krishnan S M
2026-04-28 14:31:01 +05:30
parent b13ee0195b 173864176f
commit 06184a0178
28 changed files with 7077 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
frontend/src/pages/Login.tsx
View File

@@ -44,13 +44,13 @@ const Login = () => {
const user = await response.json();
// Strict Role Validation
if (user.role.toLowerCase() !== role) {
alert(`Access Denied: You are trying to login as ${role.toUpperCase()}, but your credentials belong to a ${user.role.toUpperCase()} account.`);
if ((user.role || '').toLowerCase() !== (role || '').toLowerCase()) {
alert(`Access Denied: You are trying to login as ${(role || '').toUpperCase()}, but your credentials belong to a ${(user.role || '').toUpperCase()} account.`);
return;
}
sessionStorage.setItem('isLoggedIn', 'true');
sessionStorage.setItem('userRole', user.role.toLowerCase());
sessionStorage.setItem('userRole', (user.role || '').toLowerCase());
sessionStorage.setItem('userPermissions', JSON.stringify(user.permissions || []));
// Persist user profile + JWT token for authenticated API calls