Example of authenticated routes with restivus and jsonroutes in meteor

meteor-auth.js

import { Restivus } from 'meteor/nimble:restivus';
import { JsonRoutes } from 'meteor/simple:json-routes';
import { Meteor } from 'meteor/meteor';

import YourCollection from '../your-collection';

JsonRoutes.Middleware.use(
  '/api/yourCollection',
  JsonRoutes.Middleware.parseBearerToken
);

const Api = new Restivus({
  useDefaultAuth: false,
  auth: {
    user() {
      const authToken = this.request.authToken;
      const user = Meteor.users.findOne({
        'profile.token': authToken,
      });
      return {
        user,
      };
    },
  },
});

Api.addCollection(YourCollection, {
  // TODO: remove all requests methods except post
  excludedEndpoints: ['getAll', 'put', 'delete'],
  routeOptions: {
    authRequired: true,
  },
  endpoints: {
    post: {
      action() {
        // logic here
      }
  },
});