Extracts authentication credentials from an incoming HTTP request.
Reads two headers:
Authorization: Bearer <token> → extracted as token
apikey: <key> → extracted as apikey
This is a pure extraction step — no validation or verification is performed.
Pass the result to verifyCredentials to validate against allowed auth modes.
Extracts authentication credentials from an incoming HTTP request.
Reads two headers:
Authorization: Bearer <token>→ extracted astokenapikey: <key>→ extracted asapikeyThis is a pure extraction step — no validation or verification is performed. Pass the result to verifyCredentials to validate against allowed auth modes.