Authorize populates the dyno identity blocks requests where the callback fails.

AuthorizeSameSpace restricts access to tokens from the same space/issuer for the given audience.

AuthorizeSpaces populates the dyno identity and blocks any requests that aren't from one of the given spaces.

AuthorizeSpacesWithIssuer populates the dyno identity and blocks any requests that aren't from one of the given spaces and issuer.

Populate attempts to validate and parse a Token from the request for the given audience but doesn't enforce any restrictions.

returned when the `Authorization` header does not contain a Bearer token.