What are the main security threats of SPAs and how to avoid them?

What are the main security threats of SPAs and how to avoid them?

How to implement authorization in SPA? For example, if an user tries to access a page for which he/she doesn't have rights, redirect user to an error page?

Thank you!