How to protect Angular components from unauthorized user?

Question

Angular

The server gives the dist folder to the browser, and the browser stores all the interface code. But if the user is not authorized, I need to hide the interface of the application from him, and so that he cannot even get dist from the server, so that he cannot penetrate the source code in the browser. But how to display an authorization window if it is an application module that is not given to unauthorized users? And is it safe to secure an application with PassportJS cookies? (Not processing token, using Express sessions)