RoutesBuilder

Adds Flexible Auth to a route. This route can be accessed without a token (while not logged in), but req.auth.get(User.self) will still return a user if one is logged in. Route handlers for these routes should not call req.auth.require(User.self). A route with no auth middleware will not auth any user and .get(User.self) will always return nil. The Basic and Token auth groups will throw an error if no user gets authenticated (specifically:User.guardMiddleware throws).

So, use this auth group for routes that can be accessed while not logged in, but which provide more (or different) data when a logged-in user accesses the route.

For routes that require HTTP Basic Auth. Tokens won’t work. Generally, this is only for the login route.

For routes that require a logged-in user. Applying this auth group to a route will make requests that don’t have a valid token fail with a HTTP 401 error.