在AngularJS中存储身份验证令牌、rootScope或sessionStorage是安全的

app.factory('AuthInterceptor', function($q, $window) {
  return {
    request: function(config) {
      config.headers = config.headers || {};
      var token = $window.localStorage.getItem('token');
      if (token) {
        config.headers.Authorization = 'Bearer ' + token;
      }
      return config;
    },
    responseError: function(rejection) {
      if (rejection.status === 401) {
        // 处理身份验证失败的情况
      }
      return $q.reject(rejection);
    }
  };
});

app.config(function($httpProvider) {
  $httpProvider.interceptors.push('AuthInterceptor');
});