[Feature 1] Authentication & Security Lead

[devPach4545]

Type

Feature

Description

Scope: Make auth production-ready, enforce role-based access

Tasks:

• Create route group layouts with proper auth guards
• Redirect unauthorized users (non-scribe on /upload, non-admin on /admin)
• Fix hardcoded OAuth callback URLs (use environment variables)
• Add session refresh/expiry handling
• Implement proper error boundaries
• Add CSRF protection if needed

Files to modify:

app/(protected)/layout.tsx (create)
app/(scribe)/layout.tsx (create)
app/(admin)/layout.tsx (create)
context/AuthContext.tsx
lib/appwrite.ts

Steps to reproduce

No response

Expected result

No response

Environment

No response

Before submitting

• I searched existing issues