[Solved] You want to protect a NestJS route so only logged-in use... @Controller() export class AppController { @Get('dashboard') dashboard(@Req() req: Request, @Res() res: Response) { // What should go here? | NestJS

NestJS - Authentication

You want to protect a NestJS route so only logged-in users with a session can access it. Which approach correctly checks the session and denies access if no user is logged in?

import { Controller, Get, Req, Res } from '@nestjs/common';
import { Response, Request } from 'express';

@Controller()
export class AppController {
  @Get('dashboard')
  dashboard(@Req() req: Request, @Res() res: Response) {
    // What should go here?
  }
}

Aif (req.session.user === undefined) { throw new Error('No session'); } return 'Welcome';

Bif (!req.session.user) { return res.status(401).send('Unauthorized'); } return res.send('Welcome ' + req.session.user.name);

Cif (!req.session) { return 'Please login'; } return 'Dashboard';

Dif (req.session.user) { return 'Unauthorized'; } else { return 'Welcome'; }

Step-by-Step Solution

Solution:

Step 1: Check if user is logged in via session
We verify if req.session.user exists; if not, deny access with 401 status.
Step 2: Return welcome message if user exists
If user exists, send a welcome message with their name.
Final Answer:
if (!req.session.user) { return res.status(401).send('Unauthorized'); } return res.send('Welcome ' + req.session.user.name); -> Option B
Quick Check:
Check session user, deny if missing = A [OK]

Quick Trick: Return 401 if no session user, else welcome [OK]

Common Mistakes:

Throwing errors instead of sending HTTP response
Checking only if req.session exists, not user
Reversing logic for authorization

Master "Authentication" in NestJS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Perf

More NestJS Quizzes

You want to protect a NestJS route so only logged-in users with a session can access it. Which approach correctly checks the session and denies access if no user is logged in?

Step 1: Check if user is logged in via session

Step 2: Return welcome message if user exists

Final Answer:

Quick Check:

Want More Practice?