Reads and verifies a bearer-token session from a request's Authorization
header. The scheme match is case-insensitive and the token must be a single
non-whitespace run, so a missing or malformed header yields a failure rather
than a partial value the verifier would then reject.
Reads and verifies a bearer-token session from a request's
Authorizationheader. The scheme match is case-insensitive and the token must be a single non-whitespace run, so a missing or malformed header yields a failure rather than a partial value the verifier would then reject.