// middleware for authentication export default async function authorize(req, res, next) { const apiToken = req.headers['x-api-token']; // set user on-success request.user = await req.db.users.findByApiKey(apiToken); // always continue to next middleware next(); }