What is the principle of passport.js authentication in Angular 2 spa app?

Question

Angular

Good afternoon.
I am mastering node.js , namely at the moment - authentication using passport.js . For me, the theme of SPA is relevant .
After digging around in google , I came up with this option:
- on the front in Angular 2 in the route, I can use CanActivate and check the user's cookies there (whether logged in or not) - when going through the routes
- on the server using passport , I can check whether the user is logged in or no - when processing a rest request
Those. check to carry out "both there and there". Is this really the case or are there other more unified and optimal approaches?
Thank you in advance!