Angular's User Authentication Tool Belt

on YouTube ↗19m

" summary

Concrete implementation of a JSON Web Token login flow: credentials exchange for a signed token, choice of localStorage vs cookie storage, and attaching the token to requests with an HTTP interceptor that clones requests, adds an Authorization header, and catches 401s to trigger a redirect. Route guards implement canActivate and canLoad checks (including role/scope checks) to prevent UI load or lazy module download. Working example repository and a MEAN-series demo exist to try these patterns.

AI-written summary · about

" chapters (4)

1. 0:00Introduction
2. 2:08Authentication characteristics
3. 3:33Single page applications
4. 10:58Route guards

" related talks

• 39mLogin and Access Control in AngularManfred Steyer · Ng-Poland 2017
• 33mMake your Angular app a max security prisonMatias Woloski, Martin Gontovnikas · ng-europe 2014
• 26mThe Science of Authenticating Angular AppsKim Maida · AngularUP 2019
• 28mA Token Walks Into a SPA...Ado Kukic · ngVikings 2018
• 25mAuthstronomy: The Science of Authenticating Angular AppsKim Maida · ngVikings 2019
• 20mAuthentication from ScratchAdam Jahr · Vue.js Amsterdam 2020
• 26mAngular Router Authentication and Authorization Real LIVE LIVE LIVE LIVE LIVE DemoShai Reznik · ng-conf 2017
• 39mAuthentication & Authorization Architecture in the MEAN StackYuri Takhteyev · Spotlight: MEAN Stack 2014