auth

func Bearer ¶

func Bearer(token string, next http.Handler) http.Handler

Bearer wraps next, accepting only requests whose Authorization header carries the configured bearer token. Both sides are SHA-256 hashed before the constant-time compare so the comparator always sees fixed-length input, regardless of attacker-controlled token length.