title: How to secure a static route with Express and Nodejs
body: <p>I use Node (latest version) + Express, also latest Version. I have 2 folders, public and secured. The secured folder should only be accessible after login.</p>
  
  <p>I've create a login system by myself, now I wonder how I can secure the route to this "secure-folder".</p>
  
  <p>I was thining about setting a static route to my "secured" folder (like I did with the public one) and then check whether the user is logged in, but it doesn't work.</p>
  
  <p>This is what I thought should work...</p>
  
  <pre><code>(...)
  app.use(express.static(path.join(__dirname, 'public')));
  app.use(express.static(path.join(__dirname, 'secured')));
  (...)
  
  function requireLogin(req, res, next) {
    if (req.session.loggedIn) {
      next(); // allow the next route to run
    } else {
      // require the user to log in
      res.redirect("/login"); 
    }
  }
  
  app.all("/secured/*", requireLogin, function(req, res, next) {
    next(); 
  
  });
  </code></pre>