Exact Match - Bearer Token Matches Exactly

The server compares the token exactly.

highlighted = computed this step

The token bytes are compared exactly

The request token and allow-list token must be the same byte string.

\text{request token}=\text{allow-list token}

The check row is recomputed from the two token values.

\text{token match}=\text{yes}

This toy server is not opening or decoding the token; it is comparing it.

\text{exact compare only}

Bearer succeeds here because the opaque token matches the allow-list row exactly.

\text{exact match checked}