Function extractBearer

packages/server/src/middleware/auth.ts:73–79

* Extract the bearer token from the raw `Authorization` header. * * Returns `null` when the header is missing, lacks the case-sensitive * `Bearer ` prefix, or carries an empty token — all treated as 401.

(header: string | undefined)

 * `Bearer ` prefix, or carries an empty token — all treated as 401.
 */
function extractBearer(header: string | undefined): string | null {
  if (header === undefined || !header.startsWith(BEARER_PREFIX)) {
    return null;
  }
  const token = header.slice(BEARER_PREFIX.length);
  return token.length === 0 ? null : token;
}

/**
 * Build the global `onRequest` auth hook.