gistfile1.js

router.get('/testAPI', function(req, res, next){
	//if there is a access token, proceed with bearer auth
	if(req.query.access_token) next();
	//skips this router stack
	else next('route');
}, passport.authenticate('bearer', { session: false }), 
function(req, res, next){
	res.json({ SecretData: 'abc123', Authenticated: true })
});

router.get('/testAPI', function(req, res){
	res.json({ SecretData: 'abc123', Authenticated: false });
});