return;
}
// Inbound requests carry `Bearer <nonce>.<sessionId>`; the runtime is
// handed `<nonce>.<sessionId>` at session launch.
const auth = parseProxyBearer(req.headers, runtime.nonce);
if (!auth.valid || !auth.sessionId) {
this._writeJsonError(res, 401, 'Invalid authentication', 'authentication_error');