from fastapi.security import HTTPBearer

# OpenAPI declaration only; AuthenticationMiddleware remains the single enforcement point.
bearer_scheme = HTTPBearer(scheme_name="BearerAuth", auto_error=False)