NewBearerAuth represents bearer token authentication.

NewDomainAllowList creates an allowed list from a comma-separated set of domains.

UserName retrieves the existing username, or returns an empty string.

WithUserName store the username under a well-known context key.

ErrInvalidToken authentication failure.

ErrNoCertMatch authentication failure.

AllowList describes a list of allowed TLS certificates.

Service represents a startable & stoppable service.

TokenAuth represents a way of resolving tokens to usernames.