app.js

// expressで/public以下だけbasic認証外したい場合
var basicAuth = express.basicAuth(user, password);
app.use(function(req, res, next) {
  if (/^\/public\//.test(req.path)) {
    next();
  }
  else {
    basicAuth(req, res, next);
  }
});