AuthenticationMiddleware wraps an http.Handler and checks for the presence of an 'Authorization' header with a bearer token.

AuthToken gets the auth token from the context.

NewRouter creates and returns a new APIRouter.

WithAuthToken sets the auth token into the context.

DefaultSecretRef is the name looked up if none is provided in the URL.

APIRouter is an HTTP API for accessing app configurations.