Demo::App.controllers :projects do
  def protect(*args)
    condition do
      unless username == 'foo' && password == 'bar'
        halt 403, 'Not Authorized'
      end
    end
  end

  get '/', protect: true do
    'Only foo can see this'
  end
end

# You can specify conditions to run for all routes:
Demo::App.controllers :projects, conditions: { protect: true } do
  def self.protect(protected)
    condition do
      halt 403, 'No secrets for you!' unless params[:key] == 's3cr3t'
    end if protected
  end

  # This route will only return "secret stuff" if the user goes to
  # `/private?key=s3cr3t`.
  get('/private') { 'secret stuff' }

  # And this one, too!
  get('/also-private') { 'secret stuff' }

  # But you can override the conditions for each route as needed.
  # This route will be publicly accessible without providing the
  # secret key.
  get :index, protect: false do
    'Welcome!'
  end
end