title: Angular - store Token in Local Storage inject
body: <p>My question is different than is it secure to store Auth token in <code>Local Storage</code>. I'm already decided to do that. And I have <code>canActivate</code> method which guards routes that are not meant to be accessible by not logged users. 
  I simply check for token - is it present in <code>Local Storage</code>. If yes I navigate user to that route. </p>
  
  <p>My problem is what if someone injects token in my Local Storage, just some string to be present - It will automatically have access to the routes? 
  I don't have problem with contacting APIs because all of them are Authorized with token and roles. But I have problem that someone can go in all routes that are for registered users. </p>
  
  <p>I think about adding Authorized Api and on every <code>canActivate</code> I check that API is token Valid. </p>
  
  <p>Other question, where I can store Roles that are returned from API on login? Because I need them for deciding which route to open for which user. If I store it in <code>Local Storage</code> I have same problem (injecting roles), I think.</p>