Hi Sid
I solve this problem by uploading files to a folder located outside the public area. The very scheme of protection and access to files is described by me here on the example of images: How to display a dynamic image in nodejs?
But it works with any files.