Client route resolver with authorization