Question: How to hide endpoint documentation for specific users

Of course we want something different than 'standard'. :P

We want to make the API documentation different for our users, based on what scopes their applications have. So, ideally, the user logs in with their application credentials, and only see the documentation of their endpoints. However, would it be possible to hide endpoint documentation based on some checks of us?

We found that it is possible to add a lambda function the 'hidden' property, but since this is evaluated out of context I haven't found a way to use any request parameters or session variables. Is this correct? Is there any other way to do what we wanted? We found a method with a middleware that scrubs the endpoints from the returned body, but this is kind of ugly. Any other ideas perhaps? I'm stuck after a full day trying and searching. Any help would be appreciated a lot.

No source file or test is named. Start by tracing how the hidden property and its lambda are evaluated, then check whether request parameters or session variables are available; compare that behavior with the middleware approach described. Done means documenting a supported way to hide endpoint documentation per user scope, or confirming that this is not supported.