Meteor 3.5 ships accounts-express.
Your Express routes can finally see who is logged in. The middleware reads the Meteor login token, sets req.userId and Meteor.userId(), and returns 401 on anonymous requests.
More details in the article:
Meteor.js
@meteorjs
An open-source framework for building Web, Mobile, and Desktop applications ☄️
