Token check middleware for the API gateway
Your task
Every route on the API gateway, about 3,000 requests a second, runs behind this middleware. It accepts the tokens the company's login service issues when a user signs in, and sets req.user for the handlers behind it.
What do you flag before this ships?