delon-auth-authentication-authorization
Implement @delon Auth Access Control
Angular teams need consistent login, token, and permission patterns. This skill provides @delon/auth examples for Firebase login, route guards, ACL sync, and session cleanup.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "delon-auth-authentication-authorization" from https://skillstore.io/skills/7spade-delon-auth-authentication-authorization.md and its manifest at https://skillstore.io/api/skills/7spade-delon-auth-authentication-authorization/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "delon-auth-authentication-authorization". I need Firebase login in an Angular app that uses @delon/auth.
Expected outcome:
A structured implementation plan covering provider configuration, AuthService responsibilities, login form behavior, token refresh, and session cleanup.
Using "delon-auth-authentication-authorization". I need admin routes and task routes protected by permissions.
Expected outcome:
A route protection design with authentication guards, role checks for admin routes, permission checks for task routes, and unauthorized redirects.
Using "delon-auth-authentication-authorization". Review my Angular auth flow before release.
Expected outcome:
A focused checklist that covers token expiration, logout cleanup, permission loading, ACL synchronization, backend authorization, and error handling.
Security Audit
Medium RiskMost static findings are false positives from Markdown fences, Angular lazy imports, documentation links, and same-origin sample HTTP calls. Remaining risks are guidance issues. The examples need backend authorization, safer permission loading, and clearer JWT claim verification.
Confirmed security concerns (3)
Risk Factors
⚡ Contains scripts (4)
⚙️ External commands (25)
🌐 Network access (5)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/7spade-delon-auth-authentication-authorization/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/7spade-delon-auth-authentication-authorization?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/7spade-delon-auth-authentication-authorization?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/7spade-delon-auth-authentication-authorization/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/7spade-delon-auth-authentication-authorization.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
7Spade. (2026). delon-auth-authentication-authorization security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/7spade-delon-auth-authentication-authorization/audits/6BibTeX citation
@techreport{7spade-7spade-delon-auth-authentication-authorization-2026,
author = {7Spade},
title = {delon-auth-authentication-authorization security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/7spade-delon-auth-authentication-authorization/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "delon-auth-authentication-authorization security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "7Spade"
date-released: "2026-07-04"
url: "https://skillstore.io/skills/7spade-delon-auth-authentication-authorization/audits/6"
identifiers:
- type: other
value: "skillstore:7spade-delon-auth-authentication-authorization:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Add Angular Login
Create a Firebase-backed login and logout flow that stores tokens through @delon/auth.
Protect Application Routes
Add route guards that check authentication, roles, and permissions before navigation.
Review Access Control Patterns
Compare an Angular auth implementation against expected token refresh, guard, and ACL integration steps.
Try These Prompts
Use the delon-auth skill to add a Firebase email login and logout flow to my Angular app. Include token storage with @delon/auth.
Use the delon-auth skill to protect my dashboard, admin, and task routes. Add authentication, role, and permission guard patterns.
Use the delon-auth skill to connect my permissions to @delon/acl and show or hide task actions based on user abilities.
Use the delon-auth skill to review my Angular authentication design. Identify token, guard, permission, and backend enforcement gaps.
Best Practices
- Treat Angular guards and ACL checks as user interface controls, and enforce permissions on backend APIs.
- Replace placeholder permission logic with trusted claims or verified application data before production use.
- Test login, logout, token refresh, expiration, unauthorized access, and network error paths.
Avoid
- Do not rely on decoded client-side JWT claims as the only source of authorization truth.
- Do not ship fixed placeholder permissions that grant access to every authenticated user.
- Do not protect sensitive data only by hiding buttons or redirecting Angular routes.