exegesis.js

const sessionAuthenticator = ({jwt: config}) => async (pluginContext, info) => {
  try {
    const params = await pluginContext.getParams();
    const apiToken = _.get('authorization', pluginContext.req.headers);
    // Business logic for authorization
    return {type: 'success', user: pluginContext.req.user};
  } catch (err) {
    return {type: 'invalid', statusCode: 401, message: 'Invalid or missing authorization key'};
  }
};

const exegesisMiddleware = await exegesisExpress.middleware(
  path.resolve(__dirname, '../openapi.yaml'),
  {
    controllers: path.resolve(__dirname, './controllers'),
    authenticators: {
      token: sessionAuthenticator(config)
    }
  }
);

app.use(exegesisMiddleware);