(headers: Headers)
| 43 | }; |
| 44 | |
| 45 | const bearerToken = (headers: Headers): string | undefined => { |
| 46 | const authorization = headers.get("authorization"); |
| 47 | if (!authorization) return undefined; |
| 48 | return authorization.toLowerCase().startsWith("bearer ") |
| 49 | ? authorization.slice(7).trim() || undefined |
| 50 | : undefined; |
| 51 | }; |
| 52 | |
| 53 | // The OAuth provider callback is hit by the user's external browser, which |
| 54 | // can't carry our bearer — the OAuth `state` (validated downstream by |
no test coverage detected