I’m not 100% familiar with angular. I believe it’s pure client side, which means it’ll leak your secrets.
Pure client side will limit you to Implicit auth instead
And you’d have to get permission from the user to see ALL the users subscriptions.
And this endpoint
Implicit auth will allow you to just only use a ClientID