allow only portal link load in iframe (#2153)

* allow only portal link load in iframe

* Update web/ui/dashboard/src/app/guards/iframe/iframe.guard.ts

Co-authored-by: Raymond Tukpe <[email protected]>

* chore: remove redundant return

---------

Co-authored-by: Raymond Tukpe <[email protected]>
Co-authored-by: Raymond Tukpe <[email protected]>

web/ui/dashboard/src/app/app-routing.module.ts

@@ -1,10 +1,12 @@
 import { NgModule } from '@angular/core';
 import { RouterModule, Routes } from '@angular/router';
+import { IframeGuard } from './guards/iframe/iframe.guard';
 
 const routes: Routes = [
 	{
 		path: '',
-		loadChildren: () => import('./private/private.module').then(m => m.PrivateModule)
+		loadChildren: () => import('./private/private.module').then(m => m.PrivateModule),
+		canActivate: [IframeGuard]
 	},
 	{
 		path: 'portal',
@@ -38,7 +40,8 @@ const routes: Routes = [
 	},
 	{
 		path: '',
-		loadChildren: () => import('./public/public.module').then(m => m.PublicModule)
+		loadChildren: () => import('./public/public.module').then(m => m.PublicModule),
+		canActivate: [IframeGuard]
 	}
 ];
 

web/ui/dashboard/src/app/guards/iframe/iframe.guard.spec.ts

@@ -0,0 +1,16 @@
+import { TestBed } from '@angular/core/testing';
+
+import { IframeGuard } from './iframe.guard';
+
+describe('IframeGuard', () => {
+  let guard: IframeGuard;
+
+  beforeEach(() => {
+    TestBed.configureTestingModule({});
+    guard = TestBed.inject(IframeGuard);
+  });
+
+  it('should be created', () => {
+    expect(guard).toBeTruthy();
+  });
+});

web/ui/dashboard/src/app/guards/iframe/iframe.guard.ts

@@ -0,0 +1,11 @@
+import { Injectable } from '@angular/core';
+import { CanActivate } from '@angular/router';
+
+@Injectable({
+	providedIn: 'root'
+})
+export class IframeGuard implements CanActivate {
+	canActivate(): boolean {
+		return window.self === window.top;
+	}
+}