Unauthorized Access to Order History Page

[Liamn0244]

🐛 Unauthorized Access to Order History Page

📝 Description

When an unauthenticated user clicks on the "Order History" link in the footer, they are granted access to the internal account dashboard layout (/us/en/account/orders). The system displays an empty skeleton navigation panel instead of blocking the request.

Critical Security/UX Rule: The system must restrict unauthorized access to authenticated routes and force a redirect to the authentication gateway.

🕹️ Steps to Reproduce

1. 🌐 Open a new Incognito/Private window to ensure no active sessions exist.
2. 🖱️ Navigate to the homepage and scroll down to the Footer.
3. 📂 Under the Account column, click on the Order History link.
4. ⚠️ Observe the rendered page and the URL block.

🎯 Expected Behavior

• The system detects the missing authentication token/session.
• The router intercepts the request via a Route Guard / Middleware.
• The user is immediately redirected to the Login / Sign In page (with a redirect_to return parameters if applicable).

❌ Actual Behavior

• The application routes the user to /us/en/account/orders.
• A generic, empty account sidebar layout (Overview, Orders, Addresses, etc.) is visible to unauthenticated visitors.

📸 Screenshots

💻 Environment Details

• Target URL: demo.spreecommerce.org/us/en/account/orders