To enhance the security of your application, consider implementing an HttpInterceptor. This interceptor can monitor responses and log out a user if a 401 status is detected, redirecting them to the login page. The HttpInterceptor functions by intercepting all requests and responses, giving you the ability to perform specific actions such as checking for a 401 status code. It's important to note that the range for the interceptor is similar to how services operate; therefore, adding it to your top-level module will result in intercepting all requests and responses.
@Injectable()
export class AuthInterceptor implements HttpInterceptor {
constructor(
private authService: AuthService
) { }
intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {
return next.handle(request).pipe(
map((event: HttpEvent<any>) => event), // pass further response
catchError((error: HttpErrorResponse) => {
// handle errors from the response, specifically check for 401 status code
if (error && error.status == 401)
// perform logout action e.g. this.authService.logout()
return throwError(error);
}));
}
}
Ensure to include the interceptor in your app.httpmodule within the providers section:
providers: [
{
provide: HTTP_INTERCEPTORS,
useClass: AuthInterceptor,
multi: true
},
]
For more information, refer to angular.io docs or the angular.io guide.