If you add your APIs above the supertokens middleware, then when they are called, your custom APIs will be hit if the method and path match. Other calls like

/api/auth/authorisationurl

will pass through to the middleware.