started adding authentication stack, thing that decides if we should be authenticated is in

src/Ocelot.Library/Infrastructure/Authentication/CouldNotFindConfigurationError.cs

@@ -0,0 +1,11 @@
+namespace Ocelot.Library.Infrastructure.Authentication
+{
+    using Responses;
+    public class CouldNotFindConfigurationError : Error
+    {
+        public CouldNotFindConfigurationError(string message) 
+            : base(message)
+        {
+        }
+    }
+}

src/Ocelot.Library/Infrastructure/Authentication/IRouteRequiresAuthentication.cs

@@ -0,0 +1,10 @@
+namespace Ocelot.Library.Infrastructure.Authentication
+{
+    using DownstreamRouteFinder;
+    using Responses;
+
+    public interface IRouteRequiresAuthentication
+    {
+        Response<bool> IsAuthenticated(DownstreamRoute downstreamRoute, string httpMethod);
+    }
+}

src/Ocelot.Library/Infrastructure/Authentication/RouteRequiresAuthentication.cs

@@ -0,0 +1,35 @@
+namespace Ocelot.Library.Infrastructure.Authentication
+{
+    using System;
+    using System.Collections.Generic;
+    using System.Linq;
+    using Configuration;
+    using DownstreamRouteFinder;
+    using Responses;
+
+    public class RouteRequiresAuthentication : IRouteRequiresAuthentication
+    {
+        private readonly IOcelotConfiguration _configuration;
+
+        public RouteRequiresAuthentication(IOcelotConfiguration configuration)
+        {
+            _configuration = configuration;
+        }
+
+        public Response<bool> IsAuthenticated(DownstreamRoute downstreamRoute, string httpMethod)
+        {
+            var reRoute =
+                _configuration.ReRoutes.FirstOrDefault(
+                    x =>
+                        x.DownstreamTemplate == downstreamRoute.DownstreamUrlTemplate &&
+                        string.Equals(x.UpstreamHttpMethod, httpMethod, StringComparison.CurrentCultureIgnoreCase));
+
+            if (reRoute == null)
+            {
+                return new ErrorResponse<bool>(new List<Error> {new CouldNotFindConfigurationError($"Could not find configuration for {downstreamRoute.DownstreamUrlTemplate} using method {httpMethod}")});
+            }
+
+            return new OkResponse<bool>(reRoute.IsAuthenticated);
+        }
+    }
+}

src/Ocelot.Library/Infrastructure/Configuration/OcelotConfiguration.cs

@@ -43,7 +43,9 @@ namespace Ocelot.Library.Infrastructure.Configuration
 
                 upstreamTemplate = $"{upstreamTemplate}{RegExMatchEndString}";
 
-                _reRoutes.Add(new ReRoute(reRoute.DownstreamTemplate, reRoute.UpstreamTemplate, reRoute.UpstreamHttpMethod, upstreamTemplate));
+                var isAuthenticated = !string.IsNullOrEmpty(reRoute.Authentication);
+
+                _reRoutes.Add(new ReRoute(reRoute.DownstreamTemplate, reRoute.UpstreamTemplate, reRoute.UpstreamHttpMethod, upstreamTemplate, isAuthenticated));
             }   
         }
 

src/Ocelot.Library/Infrastructure/Configuration/ReRoute.cs

@@ -2,17 +2,19 @@
 {
     public class ReRoute
     {
-        public ReRoute(string downstreamTemplate, string upstreamTemplate, string upstreamHttpMethod, string upstreamTemplatePattern)
+        public ReRoute(string downstreamTemplate, string upstreamTemplate, string upstreamHttpMethod, string upstreamTemplatePattern, bool isAuthenticated)
         {
             DownstreamTemplate = downstreamTemplate;
             UpstreamTemplate = upstreamTemplate;
             UpstreamHttpMethod = upstreamHttpMethod;
             UpstreamTemplatePattern = upstreamTemplatePattern;
+            IsAuthenticated = isAuthenticated;
         }
 
         public string DownstreamTemplate { get; private set; }
         public string UpstreamTemplate { get; private set; }
         public string UpstreamTemplatePattern { get; private set; }
         public string UpstreamHttpMethod { get; private set; }
+        public bool IsAuthenticated { get; private set; }
     }
 }

src/Ocelot.Library/Infrastructure/Configuration/Yaml/YamlReRoute.cs

@@ -5,5 +5,6 @@
         public string DownstreamTemplate { get; set; }
         public string UpstreamTemplate { get; set; }
         public string UpstreamHttpMethod { get; set; }
+        public string Authentication { get; set; }
     }
 }