@defra/wls-eps-web-service/src/services/authorization.js

The web service for wildlife licencing of European Protected Species

import { LOGIN } from '../uris.js'

export default (_server, _options) => ({
  // Preservers this pointer
  authenticate: async function (request, h) {
    const authorization = await request.cache().getAuthData()
    // Continue for unauthorized requests to optional routes
    if (!authorization) {
      if (request.auth.mode === 'optional') {
        return h.continue
      } else {
        return h.redirect(LOGIN.uri).takeover()
      }
    } else {
      return h.authenticated({ credentials: { user: authorization.id } })
    }
  }
})