What is the correct way to guard group of routes with auth?

[florianmartens]

I'm using @hono/zod-openapi and thought I would be a good idea to define an authenticated router:

export const createAuthenticatedRouter = () => {
  const router = new OpenAPIHono<AuthedAppBindings>();

  router.use(`*`, async (c, next) => {
    const user = c.get("user");
    if (!user) {
      return c.json(...unauthorizedError("Unauthorized"));
    }
    await next();
  });

  return router;
};

const authRouterA = createAuthenticatedRouter() // registers the auth middleware
  .openapi(routes.routeA, handlers.handlerA);

const authRouterB = createAuthenticatedRouter() // registers the auth middleware again
  .openapi(routes.routeB, handlers.handlerB);


app.route("/v1/", authRouterA);
app.route("/v1/", authRouterB);

I since learned that this will register the middleware multiple times. This will also make it really hard to have unauthed routes. What is the correct way to do this?