Read Bearer Token

Allow-List Row

The server has one toy allow-list row.

highlighted = computed this step

The server has one toy allow-list row

The allow-list row stores the same token display value.

allow-list token checked\text{allow-list token checked}
Allow-list rowThe Bearer Authorization header, opaque token bytes, allow-list row, response, and checks are recomputed from pinned bytes.Allow-list row - Bearer token matches allow-list user adasectionnamevaluecheckrequest linemethodGETparsedrequest linepath/profileparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBearerparsedheaderAuthorization tokentok_7aopaque tokentokendisplaytok_7aopaquetokenexact hex746f6b5f3761pinned bytesallow-listtokentok_7astoredallow-listuser displayadaselectedallow-listmatchyesexact comparestatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBearerBearerchecktoken matchyesexactcheckselected useradaallow-listchecksent body bytes0empty

The row names user display ada

The user display is selected only if the token comparison passes.

user display=ada\text{user display}=\text{ada}
Allow-list rowThe Bearer Authorization header, opaque token bytes, allow-list row, response, and checks are recomputed from pinned bytes.Allow-list row - Bearer token matches allow-list user adasectionnamevaluecheckrequest linemethodGETparsedrequest linepath/profileparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBearerparsedheaderAuthorization tokentok_7aopaque tokentokendisplaytok_7aopaquetokenexact hex746f6b5f3761pinned bytesallow-listtokentok_7astoredallow-listuser displayadaselectedallow-listmatchyesexact comparestatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBearerBearerchecktoken matchyesexactcheckselected useradaallow-listchecksent body bytes0empty

The row is marked yes

The match row is recomputed from the request token and the allow-list token.

match=yes\text{match}=\text{yes}
Allow-list rowThe Bearer Authorization header, opaque token bytes, allow-list row, response, and checks are recomputed from pinned bytes.Allow-list row - Bearer token matches allow-list user adasectionnamevaluecheckrequest linemethodGETparsedrequest linepath/profileparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBearerparsedheaderAuthorization tokentok_7aopaque tokentokendisplaytok_7aopaquetokenexact hex746f6b5f3761pinned bytesallow-listtokentok_7astoredallow-listuser displayadaselectedallow-listmatchyesexact comparestatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBearerBearerchecktoken matchyesexactcheckselected useradaallow-listchecksent body bytes0empty

Summary

The allow-list row is ready for an exact token compare.

allow-list row checked\text{allow-list row checked}
Allow-list rowThe Bearer Authorization header, opaque token bytes, allow-list row, response, and checks are recomputed from pinned bytes.Allow-list row - Bearer token matches allow-list user adasectionnamevaluecheckrequest linemethodGETparsedrequest linepath/profileparsedrequest lineversionHTTP/1.1parsedheaderHostapi.exampleexactheaderAuthorization schemeBearerparsedheaderAuthorization tokentok_7aopaque tokentokendisplaytok_7aopaquetokenexact hex746f6b5f3761pinned bytesallow-listtokentok_7astoredallow-listuser displayadaselectedallow-listmatchyesexact comparestatusversionHTTP/1.1parsedstatusstatus200 OKokheaderContent-Length0empty bodybodybyte length0countedcheckschemeBearerBearerchecktoken matchyesexactcheckselected useradaallow-listchecksent body bytes0empty