One table decides what answers without a token: how I stopped re-deciding auth tool by tool

In plain words: every endpoint of a server answers one question, "may a stranger without an account use this?"