javalin-security-opaque-token/io.github.mzlnk.javalin.security.opaquetoken/OpaqueTokenConfig/bearerChallenge

bearerChallenge

@JvmField
var bearerChallenge: Boolean

When true, failed or absent authentication includes a WWW-Authenticate: Bearer header with the 401 response (via BearerChallengeUnauthorizedHandler).

Defaults to false. When enabled, takes precedence over unauthorizedHandler.