Angular 1 authentication

app.run.js

angular.module('mod').service('PagePermissionService', function(CurrentUser, $rootScope, $state){
    this.start = function(){
        $rootScope.$on('$stateChangeStart', stateChangeListener);
    };

    function stateChangeListener(event, toState, toParams) {
        document.title = toState.data.siteTitle;
        var roles = toState.data.roles;

        if(CurrentUser.isAuthenticated()){
            try{
                CurrentUser.authorizeSync(roles);
            } catch(e){
                event.preventDefault();
                catchAuthError(e);
            }
        } else {
            event.preventDefault();
            CurrentUser.authorize(roles)
                .then(function(){
                    $state.go(toState.name, toParams);
                })
                .catch(catchAuthError);
        }
    }

    function catchAuthError(error){
        console.info(error.message);
        if(error instanceof UserNotFoundError){
            location.href = "/login";
        } else if(error instanceof LackOfPermissionsError){
            location.href = "/login";
        }
    }
});

CurrentUser.factory.js

angular.module('mod').factory('CurrentUser', function($q, $timeout, ApiRequest){
    var _identity = null,
        deferred = null;

    return {
        isAuthenticated: function(){
            return !!_identity;
        },
        getIdentity: function(){
            return _identity;
        },
        setIdentity: function(identity) {
            _identity = identity;
        },
        setAvatar: function(avatarUrl){
            if(_identity){
                _identity.avatar = avatarUrl;
            }
        },
        getAvatar: function(){
            return _identity && _identity.avatar;
        },
        clear: function(){
            _identity = null;
            deferred = null;
        },
        isAdmin: function(){
            return !!_identity && _identity.role === 'admin';
        },
        logout: function(){
            return ApiRequest.post('auth/logout')
                .then(function(response){
                    localStorage.removeItem("sessionId");
                    location.href = "/login";
                    return response;
                });
        },
        getUser: function(){
            var self = this;

            if(deferred !== null){
                return deferred.promise;
            }
            deferred = $q.defer();
            if(this.isAuthenticated()){
                deferred.resolve(_identity);
                return deferred.promise;
            }
            ApiRequest.get('auth/identity').then(function(data){
                var user = data.user;
                user.role = user.role.name;
                self.setIdentity(user);
                deferred.resolve(_identity);
                deferred = null;
                console.info("User was successfully fetched", _identity);
            }, function(error){
                deffered.reject(new UserNotFoundError("User wasn't fetched"));
            });

            return deferred.promise;
        },
        authorize: function(roles){
            var self = this;
            return this.getUser()
                .then(function(){
                    return self.authorizeSync(roles);
                });
        },
        authorizeSync: function(roles){
            roles = roles || [];

            if(!_identity){
                throw new UserNotFoundError("User wasn't found");
            }

            if(roles.indexOf(_identity.role) === -1){
                throw new LackOfPermissionsError("You don't have enough permissions");
            }

            return true;
        }
    };
});