From c6d7f24542a8e75f12f9653e290c3bb05632369e Mon Sep 17 00:00:00 2001
From: "Timothy J. Baek" <timothyjrbeck@gmail.com>
Date: Fri, 2 Aug 2024 18:08:23 +0200
Subject: [PATCH] fix: block users from /workspace and /admin

---
 src/routes/(app)/admin/+layout.svelte     | 102 +++++++------
 src/routes/(app)/workspace/+layout.svelte | 169 ++++++++++++----------
 2 files changed, 147 insertions(+), 124 deletions(-)

diff --git a/src/routes/(app)/admin/+layout.svelte b/src/routes/(app)/admin/+layout.svelte
index e77c24177..0e2ede17b 100644
--- a/src/routes/(app)/admin/+layout.svelte
+++ b/src/routes/(app)/admin/+layout.svelte
@@ -1,11 +1,21 @@
 <script lang="ts">
 	import { onMount, getContext } from 'svelte';
+	import { goto } from '$app/navigation';
 
-	import { WEBUI_NAME, showSidebar } from '$lib/stores';
+	import { WEBUI_NAME, showSidebar, user } from '$lib/stores';
 	import MenuLines from '$lib/components/icons/MenuLines.svelte';
 	import { page } from '$app/stores';
 
 	const i18n = getContext('i18n');
+
+	let loaded = false;
+
+	onMount(async () => {
+		if ($user?.role !== 'admin') {
+			await goto('/');
+		}
+		loaded = true;
+	});
 </script>
 
 <svelte:head>
@@ -14,49 +24,50 @@
 	</title>
 </svelte:head>
 
-<div
-	class=" flex flex-col w-full min-h-screen max-h-screen {$showSidebar
-		? 'md:max-w-[calc(100%-260px)]'
-		: ''}"
->
-	<div class=" px-4 pt-3 mt-0.5 mb-1">
-		<div class=" flex items-center gap-1">
-			<div class="{$showSidebar ? 'md:hidden' : ''} mr-1 self-start flex flex-none items-center">
-				<button
-					id="sidebar-toggle-button"
-					class="cursor-pointer p-1 flex rounded-xl hover:bg-gray-100 dark:hover:bg-gray-850 transition"
-					on:click={() => {
-						showSidebar.set(!$showSidebar);
-					}}
-				>
-					<div class=" m-auto self-center">
-						<MenuLines />
-					</div>
-				</button>
+{#if loaded}
+	<div
+		class=" flex flex-col w-full min-h-screen max-h-screen {$showSidebar
+			? 'md:max-w-[calc(100%-260px)]'
+			: ''}"
+	>
+		<div class=" px-4 pt-3 mt-0.5 mb-1">
+			<div class=" flex items-center gap-1">
+				<div class="{$showSidebar ? 'md:hidden' : ''} mr-1 self-start flex flex-none items-center">
+					<button
+						id="sidebar-toggle-button"
+						class="cursor-pointer p-1 flex rounded-xl hover:bg-gray-100 dark:hover:bg-gray-850 transition"
+						on:click={() => {
+							showSidebar.set(!$showSidebar);
+						}}
+					>
+						<div class=" m-auto self-center">
+							<MenuLines />
+						</div>
+					</button>
+				</div>
+				<div class="flex items-center text-xl font-semibold">{$i18n.t('Admin Panel')}</div>
 			</div>
-			<div class="flex items-center text-xl font-semibold">{$i18n.t('Admin Panel')}</div>
 		</div>
-	</div>
 
-	<div class="px-4 my-1">
-		<div
-			class="flex scrollbar-none overflow-x-auto w-fit text-center text-sm font-medium rounded-xl bg-transparent/10 p-1"
-		>
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {['/admin', '/admin/'].includes($page.url.pathname)
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/admin">{$i18n.t('Dashboard')}</a
+		<div class="px-4 my-1">
+			<div
+				class="flex scrollbar-none overflow-x-auto w-fit text-center text-sm font-medium rounded-xl bg-transparent/10 p-1"
 			>
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {['/admin', '/admin/'].includes($page.url.pathname)
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/admin">{$i18n.t('Dashboard')}</a
+				>
 
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/admin/settings')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/admin/settings">{$i18n.t('Settings')}</a
-			>
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/admin/settings')
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/admin/settings">{$i18n.t('Settings')}</a
+				>
 
-			<!-- <a
+				<!-- <a
 				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/documents')
 					? 'bg-gray-50 dark:bg-gray-850'
 					: ''} transition"
@@ -71,12 +82,13 @@
 					: ''} transition"
 				href="/workspace/playground">{$i18n.t('Playground')}</a
 			> -->
+			</div>
+		</div>
+
+		<hr class=" my-2 dark:border-gray-850" />
+
+		<div class=" py-1 px-5 flex-1 max-h-full overflow-y-auto">
+			<slot />
 		</div>
 	</div>
-
-	<hr class=" my-2 dark:border-gray-850" />
-
-	<div class=" py-1 px-5 flex-1 max-h-full overflow-y-auto">
-		<slot />
-	</div>
-</div>
+{/if}
diff --git a/src/routes/(app)/workspace/+layout.svelte b/src/routes/(app)/workspace/+layout.svelte
index 794bd7ed5..f64a783d8 100644
--- a/src/routes/(app)/workspace/+layout.svelte
+++ b/src/routes/(app)/workspace/+layout.svelte
@@ -1,15 +1,20 @@
 <script lang="ts">
 	import { onMount, getContext } from 'svelte';
-
-	import { WEBUI_NAME, showSidebar, functions } from '$lib/stores';
-	import MenuLines from '$lib/components/icons/MenuLines.svelte';
+	import { WEBUI_NAME, showSidebar, functions, user } from '$lib/stores';
 	import { page } from '$app/stores';
-	import { getFunctions } from '$lib/apis/functions';
+	import { goto } from '$app/navigation';
+
+	import MenuLines from '$lib/components/icons/MenuLines.svelte';
 
 	const i18n = getContext('i18n');
 
+	let loaded = false;
+
 	onMount(async () => {
-		// functions.set(await getFunctions(localStorage.token));
+		if ($user?.role !== 'admin') {
+			await goto('/');
+		}
+		loaded = true;
 	});
 </script>
 
@@ -19,80 +24,86 @@
 	</title>
 </svelte:head>
 
-<div
-	class=" flex flex-col w-full min-h-screen max-h-screen {$showSidebar
-		? 'md:max-w-[calc(100%-260px)]'
-		: ''}"
->
-	<div class=" px-4 pt-3 mt-0.5 mb-1">
-		<div class=" flex items-center gap-1">
-			<div class="{$showSidebar ? 'md:hidden' : ''} mr-1 self-start flex flex-none items-center">
-				<button
-					id="sidebar-toggle-button"
-					class="cursor-pointer p-1 flex rounded-xl hover:bg-gray-100 dark:hover:bg-gray-850 transition"
-					on:click={() => {
-						showSidebar.set(!$showSidebar);
-					}}
-				>
-					<div class=" m-auto self-center">
-						<MenuLines />
-					</div>
-				</button>
+{#if loaded}
+	<div
+		class=" flex flex-col w-full min-h-screen max-h-screen {$showSidebar
+			? 'md:max-w-[calc(100%-260px)]'
+			: ''}"
+	>
+		<div class=" px-4 pt-3 mt-0.5 mb-1">
+			<div class=" flex items-center gap-1">
+				<div class="{$showSidebar ? 'md:hidden' : ''} mr-1 self-start flex flex-none items-center">
+					<button
+						id="sidebar-toggle-button"
+						class="cursor-pointer p-1 flex rounded-xl hover:bg-gray-100 dark:hover:bg-gray-850 transition"
+						on:click={() => {
+							showSidebar.set(!$showSidebar);
+						}}
+					>
+						<div class=" m-auto self-center">
+							<MenuLines />
+						</div>
+					</button>
+				</div>
+				<div class="flex items-center text-xl font-semibold">{$i18n.t('Workspace')}</div>
 			</div>
-			<div class="flex items-center text-xl font-semibold">{$i18n.t('Workspace')}</div>
+		</div>
+
+		<div class="px-4 my-1">
+			<div
+				class="flex scrollbar-none overflow-x-auto w-fit text-center text-sm font-medium rounded-xl bg-transparent/10 p-1"
+			>
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/models')
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/workspace/models">{$i18n.t('Models')}</a
+				>
+
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/prompts')
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/workspace/prompts">{$i18n.t('Prompts')}</a
+				>
+
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes(
+						'/workspace/documents'
+					)
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/workspace/documents"
+				>
+					{$i18n.t('Documents')}
+				</a>
+
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/tools')
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/workspace/tools"
+				>
+					{$i18n.t('Tools')}
+				</a>
+
+				<a
+					class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes(
+						'/workspace/functions'
+					)
+						? 'bg-gray-50 dark:bg-gray-850'
+						: ''} transition"
+					href="/workspace/functions"
+				>
+					{$i18n.t('Functions')}
+				</a>
+			</div>
+		</div>
+
+		<hr class=" my-2 dark:border-gray-850" />
+
+		<div class=" py-1 px-5 flex-1 max-h-full overflow-y-auto">
+			<slot />
 		</div>
 	</div>
-
-	<div class="px-4 my-1">
-		<div
-			class="flex scrollbar-none overflow-x-auto w-fit text-center text-sm font-medium rounded-xl bg-transparent/10 p-1"
-		>
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/models')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/workspace/models">{$i18n.t('Models')}</a
-			>
-
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/prompts')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/workspace/prompts">{$i18n.t('Prompts')}</a
-			>
-
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/documents')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/workspace/documents"
-			>
-				{$i18n.t('Documents')}
-			</a>
-
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/tools')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/workspace/tools"
-			>
-				{$i18n.t('Tools')}
-			</a>
-
-			<a
-				class="min-w-fit rounded-lg p-1.5 px-3 {$page.url.pathname.includes('/workspace/functions')
-					? 'bg-gray-50 dark:bg-gray-850'
-					: ''} transition"
-				href="/workspace/functions"
-			>
-				{$i18n.t('Functions')}
-			</a>
-		</div>
-	</div>
-
-	<hr class=" my-2 dark:border-gray-850" />
-
-	<div class=" py-1 px-5 flex-1 max-h-full overflow-y-auto">
-		<slot />
-	</div>
-</div>
+{/if}