diff --git a/src/pages/api/exam/[module].ts b/src/pages/api/exam/[module].ts
index 79febe03..2e85e7d1 100644
--- a/src/pages/api/exam/[module].ts
+++ b/src/pages/api/exam/[module].ts
@@ -2,10 +2,19 @@
 import type {NextApiRequest, NextApiResponse} from "next";
 import {app} from "@/firebase";
 import {getFirestore, collection, getDocs} from "firebase/firestore";
+import {withIronSessionApiRoute} from "iron-session/next";
+import {sessionOptions} from "@/lib/session";
 
 const db = getFirestore(app);
 
-export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+export default withIronSessionApiRoute(handler, sessionOptions);
+
+async function handler(req: NextApiRequest, res: NextApiResponse) {
+	if (!req.session.user) {
+		res.status(401).json({ok: false});
+		return;
+	}
+
 	const {module} = req.query as {module: string};
 
 	const snapshot = await getDocs(collection(db, module));