Force signout unauthorized users

.gitignore

@@ -25,6 +25,7 @@ yarn-error.log*
 *.cache
 .firebase/**
 firebase.json
+credentials.json
 firebase-debug.log
 
 .env*

firestore.rules

@@ -50,5 +50,11 @@ service cloud.firestore {
     	allow write: if isSignedIn() && isStaff();
     }
 
+    // anyone can read users database to validate accounts
+    // TODO: make this private
+    match /users/{document=**} {
+      allow read: if isSignedIn()
+    }
+
   }
 }

src/router.ts

@@ -17,7 +17,23 @@ const router = new Router({
       beforeEnter(to, from, next): void {
         firebase.auth().onAuthStateChanged((user) => {
           if (user) {
-            next("/home");
+            firebase
+              .firestore()
+              .collection("users")
+              .doc(user?.uid)
+              .get()
+              .then((doc) => {
+                if (doc.exists) {
+                  next("/home");
+                } else {
+                  console.warn("Invalid permissions");
+                  firebase.auth().signOut();
+                  next();
+                }
+              })
+              .catch((err) => {
+                console.error(`Something went wrong: ${err}`);
+              });
           } else {
             next();
           }