nyx/tests/fixtures/auth_analysis/koa_scoped_read_clean.js

const Router = require("@koa/router");
const koaRouter = new Router();
const requireLogin = require("./auth").requireLogin;

koaRouter.get("/projects/:projectId", requireLogin, getProject);

async function getProject(ctx) {
    const allowed = await checkOwnership(ctx.state.user.id, ctx.params.projectId);
    if (!allowed) {
        ctx.throw(403);
    }

    const project = await projectModel.findById(ctx.params.projectId);
    ctx.body = { project };
}

module.exports = { koaRouter, getProject };