Angularjs and route authentication

Question

i have a AngularJS project with Asp Web API as backend. I have a login controller in angularjs that make a signin request to web api to request a token and if the user correctly logged in i set a variable in angularjs.

Now how can i prevent to load a route if the user isn't logged in? How, in the routeProvider can i prevent to load a route based on the setted variable?

gestionale.config(
  function ($routeProvider, $locationProvider) {
     $routeProvider.
        when('/personale', {
           templateUrl: 'View/people.html',
           controller: 'mainController',
           !!What to put here????!!!
    })
 });

Thanks

Ben Felda · Accepted Answer · 2014-05-27 21:00:22Z

1

You will want to listen for the $locationChangeStart event and prevent the default behavior if the user is not authenticated.

$rootScope.$on('$locationChangeStart', function (event) {
    if (!vm.loggedIn()) {
        event.preventDefault();
    }
});

answered May 27, 2014 at 21:00

Ben Felda

1,48210 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Bunkered · Accepted Answer · 2014-05-27 21:21:56Z

0

You could use the 'resolve' property.

gestionale.config(
  function ($routeProvider, $locationProvider) {
     $routeProvider.
        when('/personale', {
           templateUrl: 'View/people.html',
           controller: 'mainController',
           resolve: userLoggedIn()
    })
 });

The userLoggedIn function would then handle the authentication promise and only resolve to the location when the promise is returned. This would also allow you to bounce them back to the login if the promise was rejected.

answered May 27, 2014 at 21:21

Bunkered

3091 gold badge4 silver badges13 bronze badges

Comments

Community · Accepted Answer · 2017-05-23 11:57:14Z

0

You usually see patterns like:

gestionale.config(
  function ($routeProvider, $locationProvider) {
     $routeProvider.
        when('/personale', {
           templateUrl: 'View/people.html',
           controller: 'mainController',
           options: {
               accessRole: 'admin'
           }
    })
 });

where control flows for 'userRole' will be handled by a User or Auth Service and then you can use Ben Felda's method above to desist access as the routes change.

edited May 23, 2017 at 11:57

CommunityBot

11 silver badge

answered May 27, 2014 at 21:11

Elise Chant

5,2153 gold badges31 silver badges37 bronze badges

Collectives™ on Stack Overflow

Angularjs and route authentication

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related