Attached code for reference Using provided documentation for middleware and Session If I call without access token then guard is working fine