My Node.js Middleware Was Running in the Wrong Order for Months. Nobody Noticed.

Express middleware order determines everything. My auth middleware ran after the request logger, leaking user tokens into plaintext logs…