Function stripBearerScheme

internal/agent/api.go:647–653

stripBearerScheme removes the "Bearer " prefix from an Authorization header value. RFC 6750 §2.1 specifies the scheme name as case- INSENSITIVE; a literal `TrimPrefix(h, "Bearer ")` would silently fail on `bearer ate2a_…` or `BEARER ate2a_…`. Returns the raw header value when no Bearer scheme was us

(h string)

// when no Bearer scheme was used (lets the legacy unprefixed API-key
// path continue to work).
func stripBearerScheme(h string) string {
	parts := strings.SplitN(h, " ", 2)
	if len(parts) == 2 && strings.EqualFold(parts[0], "Bearer") {
		return parts[1]
	}
	return h
}

// authenticateUser extracts and validates the bearer credential from
// the request, returning the owning user.