Angularjs-angular do the application, PHP, if it is the rest API, how to ensure the security of the API?

Front End with ANGULARJS implementation of single page application, backend if using thinkphp to do rest API, how to ensure the security of the API?
Single page app use in the public number, click to jump to the app, no login, only openid to determine whether to register, and then will involve some personal information.

Reply content:

Front End with ANGULARJS implementation of single page application, backend if using thinkphp to do rest API, how to ensure the security of the API?
Single page app use in the public number, click to jump to the app, no login, only openid to determine whether to register, and then will involve some personal information.

After login to generate tokens, and then stored in the browser's sessionstorage, each time to get the data sent this token and the server side to do a comparison to determine whether to log in, and then get data response json and other data

See: https://segmentfault.com/a/1190000004715 ...

