strapi-plugin-users-permissions/config/policies/isAuthenticated.js

Protect your API with a full-authentication process based on JWT

module.exports = async (ctx, next) => {
  if (!ctx.state.user) {
    return ctx.unauthorized();
  }

  await next();
};