feat: add auth module with login and access control

web/src/router/index.js

@@ -3,6 +3,7 @@ import { createRouter, createWebHistory } from 'vue-router'
 import { checkBackendHealth } from '../composables/useBackendHealth.js'
 import { appViews } from '../composables/useNavigation.js'
 import { useSystemState } from '../composables/useSystemState.js'
+import { canAccessAppView } from '../utils/accessControl.js'
 import AppShellRouteView from '../views/AppShellRouteView.vue'
 import BackendUnavailableRouteView from '../views/BackendUnavailableRouteView.vue'
 import LoginRouteView from '../views/LoginRouteView.vue'
@@ -80,7 +81,7 @@ const router = createRouter({
 })
 
 router.beforeEach((to) => {
-  const { isInitialized, loggedIn, resolveEntryRoute, syncAuthSession } = useSystemState()
+  const { currentUser, isInitialized, loggedIn, resolveEntryRoute, syncAuthSession } = useSystemState()
   const authActive = syncAuthSession({ notify: Boolean(to.meta.requiresAuth) })
 
   if (!isInitialized.value) {
@@ -105,6 +106,10 @@ router.beforeEach((to) => {
         return resolveEntryRoute()
       }
 
+      if (ok && typeof to.meta.appView === 'string' && !canAccessAppView(currentUser.value, to.meta.appView)) {
+        return resolveEntryRoute()
+      }
+
       return true
     })
   }