Function bearer_token

mserver/MasterService/src/http.rs:864–885

The server token from `Authorization: Bearer ` (or the `x-server-token` header).

(headers: &HeaderMap)

        .map(str::trim)
        .filter(|value| !value.is_empty())
        .unwrap_or("http");
    Some(format!("{scheme}://{host}"))
}

/// Rewrite a server-relative `download_url` (`/v1/mods/<id>/download`) to an absolute URL
/// against `base`, so clients (libcurl) get a usable URL. An already-absolute URL (a CDN
/// link) and `None` are left untouched, and the stored manifest stays host-portable.
fn absolutize_download_url(url: &mut Option<String>, base: Option<&str>) {
    let (Some(current), Some(base)) = (url.as_deref(), base) else {
        return;
    };
    if current.is_empty() || current.contains("://") {
        return;
    }
    let base = base.trim_end_matches('/');
    let path = if current.starts_with('/') {
        current.to_string()
    } else {
        format!("/{current}")
    };
    *url = Some(format!("{base}{path}"));
}

fn forwarded_ips(state: &AppState, headers: &HeaderMap) -> Option<Vec<String>> {
    let header = state.client_ip_header.as_ref()?;