How to get 'ctx.state.user' in custom middleware

[sunnyson]

Yes, policies is that you need, if you create a Middleware that is applied to all routes. But policies you can attach to individual routes.