Meteor 3.5 ships accounts-express.
Your Express routes can finally see who is logged in. The middleware reads the Meteor login token, sets req.userId and Meteor.userId(), and returns 401 on anonymous requests.
More details in the article:
An open-source framework for building Web, Mobile, and Desktop applications ☄️
Joined March 2012

