title: Firebase authentication implementation for a single page angular application and spring-boot backend
body: <p>I'm trying to secure my single page Angular 5 application that has a spring boot backend with firebase authentication. </p>
  
  <p>Is the following a good way to implement this.</p>
  
  <ol>
  <li>All requests that do not start with <strong>/api</strong> are forwarded to index.html with <code>forward:/index.html</code>. The AuthGuard in my Angular app will then handle whether the user has access or needs to login.</li>
  <li>All requests going to <strong>/api/**</strong> have to be authenticated. Here the firebase user token will be set in the header of the request by Angular and my custom Spring authentication filter and authentication provider vill handle it.</li>
  </ol>
  
  <p>Are there any tutorials, specifically for the spring part of the implementation, that I can look at. I haven't found any thing similar and I want to be sure that the security implementation is done correctly.</p>