angular security course

Author: Your Name

server/read-all-lessons.route.ts

@@ -1,9 +1,19 @@
 
 import {db} from "./database";
+import {sessionStore} from "./session-store";
 
 
 export function readAllLessons(req, res) {
 
-    res.status(200).json(db.readAllLessons());
+    const sessionId = req.cookies["SESSIONID"];
+
+    const isSessionValid = sessionStore.isSessionValid(sessionId);
+
+    if (!isSessionValid) {
+        res.sendStatus(403);
+    }
+    else {
+        res.status(200).json({lessons:db.readAllLessons()});
+    }
 
 }

server/session-store.ts

@@ -15,11 +15,15 @@ class SessionStore {
 
         const session = this.sessions[sessionId];
 
-        const isSessionValid = session && session.isValid();
-
-        return isSessionValid ? session.user : undefined;
+        return this.isSessionValid(sessionId) ? session.user : undefined;
     }
 
+    isSessionValid(sessionId: string): boolean {
+
+        const session = this.sessions[sessionId];
+
+        return session && session.isValid();
+    }
 }
 
 

src/app/lessons/lessons.component.html

@@ -1,5 +1,5 @@
 
-<div class="lessons-list-container v-h-center-block-parent">
+<div class="lessons-list-container v-h-center-block-parent" *ngIf="isLoggedIn$ | async">
 
     <h2>All Lessons</h2>
 

src/app/services/lessons.service.ts

@@ -2,6 +2,7 @@
 import {Injectable} from "@angular/core";
 import {HttpClient} from "@angular/common/http";
 import {Lesson} from "../model/lesson";
+import {Observable} from "rxjs/Observable";
 
 
 @Injectable()
@@ -11,8 +12,9 @@ export class LessonsService {
 
     }
 
-    loadAllLessons() {
-        return this.http.get<Lesson[]>('/api/lessons');
+    loadAllLessons() : Observable<Lesson[]> {
+        return this.http.get<any>('/api/lessons')
+            .map(res => res.lessons);
     }
 
     findLessonById(id:number) {