Mr EnglishOriginal post
Rank 1: Thread
My website has public pages and non-public pages. Only a logged in user can access the non-public pages.
My question is: how do we prevent non logged in people from accessing those pages.
The following nodejs controller method renders the view \admin\index. What code needs to be added to prevent non logged in users from accessing the view?
exports.getIndex = async(req,res) => {
// How do I block this view from rendering if the user is not logged in?
// I.e. how do I check to see if there is a session record when this view is accessed?
Summary
To protect non-public views on a NodeJS website, developers can check if the user is logged in before rendering the view. One approach is to retrieve the current user and, if no user is found, either block the rendering of the page or redirect them to the login page. This can be implemented by ensuring authentication is required to access non-public pages. By adding a check for a session record before rendering the view, developers can prevent non-logged-in users from accessing those pages.