title: Angular 2 Route Guard / Auth Guard Security
body: <p>I just finished an Angular 2 course on Angular 2 and Firebase at Angular-University. </p>
  
  <p>The instructor, Vasco (@angular-university) brought up that the Router Guard is not secure and you could bypass it since its a front-end framework.</p>
  
  <p>We used Firebase Auth to know if a user is authenticated and setup the security rules to prevent read/write unless a user is authenticated. So, I know the data is protected.</p>
  
  <p>However, is the route actually secure? He mentioned using a sever backend to for more security but didn't go in to any details.  </p>
  
  <p>I've been trying to search around but I haven't been able to see where anyone else has brought this up.</p>
  
  <p>At the end of the day, is the Angular 2 router guard secure on its own or do you have to implement a server to protect routes? How would a user bypass the routes anyway?</p>
  
  <p>Thanks!</p>