Function check_auth 

pub async fn check_auth(
    state: &AuthState,
    req: &Request,
) -> Result<(), AuthRejection>

Core authentication check, shared by both middleware variants.