gistfile1.txt

function authenticate() {
  return function(request, response, next) {
    if (request.headers["secret"] !== "supersecretkey") {
      response.send("Must authenticate");
      return next();
    }
  };
}

app.get("/secured-api", authenticate(),function (request, response) {
  //do stuff
  response.send("your response");
});