Are such checks sufficient when dealing with sessions in node.js?

Question

JavaScript

Is such a simple check for the existence of a session generally acceptable? is it possible to bypass it?

module.exports.dashboard = (req, res, next) => {

    if(!req.session.userId) {
        next();
    }

    let data = {
        title: 'Тайтл'
    };

    res.render('admin/index', data);
};

Answer 1

Yes, such a check is enough. For more security, use this module .
To avoid asking such questions in the future, read this article .