如何保护我的AngularJS和Web Api应用程序

I am using AngularJS with ASP.NET Web Api server side. Seems to me like authentication has now become a breeze? Or is this too good to be true?I am using AngularJS with ASP.NET Web Api serve