gistfile1.txt

// Ideal OAuth 2 (may be insane, impractical), also, lots of default behavior, all customizable, of course by some mechanism of your choice


app.get('/my-protected-resource',  passport.authenticate('mechanism'), function(req, res, end) {
    // Do stuff that requires to be logged in
});

// Now the middleware does all the hard work: redirect to the oauth provider of choice (or to a 'dummy' page where the user can choice theirs and then to it, handle the dance, add all the required information to the session, and finally redirect the user to /my-protected-resource when the user was eventually logged in! How does that sound?