Merge pull request 'Fixing bug which is showing the roles to any authenticated user. This is only relevant for developers.' (#3) from develop into main

Reviewed-on: #3

docker/Dockerfile

@@ -37,6 +37,9 @@ COPY docker/nginx.conf /etc/nginx/nginx.conf
 # Copy the static build output from the build stage to Nginx's default HTML serving directory
 COPY --chown=nginx:nginx --from=builder /app/dist/*/browser /usr/share/nginx/html
 
+# Copy logos from public folder to root for direct access (needed for i18n builds)
+COPY --chown=nginx:nginx --from=builder /app/public/logo-*.png /usr/share/nginx/html/
+
 # Expose port 8080 to allow HTTP traffic
 # Note: The default NGINX container now listens on port 8080 instead of 80
 EXPOSE 8080

docker/nginx.conf

@@ -53,6 +53,14 @@ http {
             return 301 $scheme://$http_host/de/;
         }
 
+        # Serve logos directly from root (needed for i18n builds)
+        location ~ ^/logo-(dark|light)\.png$ {
+            try_files $uri =404;
+            expires 1y;
+            access_log off;
+            add_header Cache-Control "public, immutable";
+        }
+
         # Serve each locale
         location ~ ^/(de|de-DE|en)/ {
             try_files $uri $uri/ /$1/index.html;

src/app/layout/component/app.topbar.ts

@@ -24,7 +24,7 @@ import { Tag } from 'primeng/tag';
                 <img [src]="logo" alt="App Logo" style="width: 1.3em;"/>
             </a>
 
-            @if (keycloak.authenticated) {
+            @if (keycloak.authenticated && keycloak.hasRealmRole("dev")) {
                 <p-tag severity="success" value="Authenticated" />
                 @if (keycloak) {
                     <p-tag severity="info" value="Realm: {{ keycloak.realm }}" />