Function check 

pub async fn check(
    auth: &dyn Authenticator,
    requests: &Requests,
    report: &mut Report,
)

Run the battery every authenticator answers, whatever it verifies.

Panics

Never. A violated invariant is recorded on the report, and an implementation that unwinds is recorded too — a panic on a malformed header is a refusal spelled as a crash.