Protecting routes

- [Instructor] The account route that we want to change…is in server, routes, users, index.js…and way down we see here this get route for account.…We learned about middlewares before…and we know that the middleware…can call the next one in the chain or end the request.…So I'm going to add a middleware to the route…before the page is rendered.…For that I add request, response, next,…let's do the comma here already…and in this middleware function I will now simple check…if request user means this is a logged in user, return, next…and in any other case we will return res.status401…and then we will end the request.…

So this is a quite hard error, we could of course also…redirect the user then to the login form.…Let's restart application and see if this works as intended.…I reload the page with the error from before…and we see that we now get an ERROR 401.…This is a good example on how we can chain middlewares…to enforce rules that need to apply…before we call the next middleware.…Let's add a little enhancement for the sake…