S219: Docs Angular Auth Migration

Migrate docs-angular admin from DOCS_ADMIN_PASS to backend-api JWT; restrict admin to T0/T1; keep docs content open to all users

Session 219: Docs Angular Auth Migration

Goals

  1. Replace legacy DOCS_ADMIN_PASS with backend-api JWT authentication
  2. Restrict admin access to T0/T1 roles only (executives, developers, admins, system)
  3. Keep documentation content accessible to any user (based on project selection and privacy level)
  4. Fix content loading 404 in dev and login chunk load failure

Access Control Summary

Area Who Can Access Mechanism
Admin (/admin, /admin/config, etc.) Executives, developers, admins, system only docsAdminGuard + backend RolesGuard
Documentation content Any user projectSelectedGuard + AccessService (privacy)
Login (/auth/login) Unauthenticated users docsLoginPageGuard redirects if already logged in

Changes Made

Phase 1: Auth Migration

Phase 2: Configuration

Phase 3: Bugfixes

Key Files

File Purpose
apps/docs-angular/src/app/guards/docs-admin.guard.ts T0/T1 admin guard
apps/docs-angular/src/app/pages/docs-login/docs-login.component.ts Login wrapper
apps/docs-angular/src/app/services/dynamic-routes.service.ts Routes, guards
apps/docs-angular/src/environments/environment.ts Dev config
APIs/backend-docs-api/src/app/admin/admin.controller.ts RolesGuard on admin
docs/english/Docs-angular/docs-auth-implementation.md Technical doc
docs/english/Docs-angular/docs-auth-progress-timeline.md Non-developer timeline

Decisions Logged (MCP)

Decision ID Question Chosen
dev_1773498739714_yxgl509 How should docs-angular admin auth integrate? Migrate to backend-api JWT with T0/T1
dev_1773498742269_t6ldgu7 Why 404 on /api/sync/files in dev? Set docsApiUrl undefined for static files
dev_1773498744346_5003zl9 Why docs-login chunk load failure? Eager-load DocsLoginComponent

Documentation

Future Steps