I think a good approach would be to check if req.auth exists already. If yes, a previous method already authenticated. ```javascript return function authMiddleware(req, res, next) { if (req.auth) return next(); ... ```