The three path conventions
Protected routes
server/src/index.ts
Public routes
server/src/index.ts
Webhook routes
server/src/index.ts
See also
Authenticate users
How to read the current user and verify incoming webhooks.
auth reference
The runtime auth API and when
auth.user is available.