As pointed out here, the snippet provided by @branislavballon needs to be used differently with current strapi:
module.exports = {
'content-api': {
type: "content-api",
routes: [
{
method: 'POST',
path: '/sensors',
handler: 'sensor.create'
}
]
}
It`s a shame that the docs does not very much cover authentication within custom plugins