I'm making an online store, and there's an administration part from where you can track orders and modify them.
It is protected by authentication, which is done on a node server, passwords is hashed into DB etc. but I'm worried about the route guard still being bypassed.
We can use multiple route guards and then the route will only be accessible when all route guards return true. That's it!
That is called AuthGuard. AuthGuard is used to protect the routes from unauthorized access.
You should be worried.
Route guards provide exactly zero security, like anything else that you implement on the client side. Things you implement on the client side can only be for the users convenience, but not for security.
You need to enforce security on the server side.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With