How to handle Auth per resource

if (c.req.url.endsWith("/stream")) {
    const body = await c.req.json();
    const agent = c.req.url.split('/')[c.req.url.split('/').length - 2];
    const resource = body.memory.resource;
    if (resource != `${agent}-${user.email}`) {
      return new Response(`resourceId Mismatch Expected ${agent}-${user.email}, but got ${resource}`, { status: 401 });
    }
    return await next();
  }

const mastraStream = await agent.stream("Hi", {
        memory: {
            thread: "t8",
            resource: `[email protected]`,
        }
    });