Raw credentials extracted from an incoming HTTP request.
Produced by core.extractCredentials from the Authorization and apikey headers.
Authorization
apikey
Bearer token from the `Authorization: Bearer ` header, or `null` if absent.
API key from the `apikey` header, or `null` if absent.