I will suggest using Web API controllers. In my current project(real world one) the workflow is like this:
Angular Service => Web API controller method => Business Method => Data Method => Database Query(using Entity framework)
We are using Entity Framework and Code First approach also.
For security, we are using JWT authentication.
Hope this is helpful to you to some extent.