BearerChallenge (middleware/bearer_challenge.go)

Module exposing: BearerChallenge, InsufficientScopeChallenge

// Source: https://github.com/leodip/goiabada | License: MIT | Copyright 2023 Leonardo D'Ippolito (leo@goiabada.dev)
// Provided via justclaw.it.com; keep this notice with the code.
package middleware

import (
	"github.com/leodip/goiabada/authserver/internal/clientauth"
	"github.com/leodip/goiabada/core/oauth"
)

// BearerRealm is the realm every bearer challenge this server writes carries. One value, because
// /userinfo and the admin and account APIs accept the same access tokens: RFC 9110 section 11.5
// defines a protection space as the origin plus the realm, and these routes are one protection
// space. The realm is also what gives a challenge with no error an auth-param at all, which
// RFC 6750 section 3 requires of every Bearer challenge ("MUST be followed by one or more
// auth-p

... (truncated -- full source via MCP)