holandes22
commented
9 years ago - Every unauthenticated session redirects to /login
- if you browse to /login while in a session, it disables the login form and adds a logout button
- If the user is admin, show a link in the navbar to the admin dashboard (/admin). We might need modifications in the backend to avoid an extra request (to see if the user is admin or not)
- If a regular user navigates to /admin show a permission error message
- /profile shows user details: username, isAdmin, email, name, teams
- After authentication, navbar includes user dropdown showing username and links to profile and logout