TypeScript API / laikacms/auth / resolveBearer

Function: resolveBearer()

function resolveBearer(bearer, deps): Promise<AuthContext | null>;

The single seam every consumer (REST API, MCP endpoints, ...) should call to turn an Authorization: Bearer <token> header into { user, scopes }. A session token resolves to full scopes; a PAT resolves to its granted subset. Returns null for anything invalid, revoked, or expired, and never throws for bad input, so callers can treat null uniformly as 401.

Parameters

Parameter	Type
bearer	string | null | undefined
deps	ResolveBearerDeps

Returns

Promise<AuthContext | null>