gistfile1.js

function validate_auth_urls(req, path, httpMethod) {
    /*
     *  Ensure that only client API keys can access the auth urls
     */

    if (!path.startswith('/auth/')) {
        return true
    }

    //req.is_client is (correctly) set by a middleware
    return req.is_client
}

swagger.addValidator(validate_auth_urls)