fix: validate authorization schema

[dancastillo]

Checklist

This PR fixes issue where any string with same length as bearer passes validation ex: AAAAAA auth_key.
fixes #164

• run npm run test and npm run benchmark
• tests and/or benchmarks are included
• documentation is changed or added
• commit message and code follows the Developer's Certification of Origin
  and the Code of conduct

[Eomm]

Minor things

[mcollina]

lgtm

[Uzlopak]

I dont like it for the reason that it is doing over and over unnecessary string operations.

[Uzlopak]

@mcollina

Should we use @fastify/error to create FST_BEARER_AUTH_MISSING_AUTHORIZATION_HEADER and FST_BEARER_AUTH_INVALID_AUTHORIZATION_HEADER and use that instead? Would also be better passing them to the callback instead of native Node Errors?

[mcollina]

1. yes
2. as you prefer, what is there now is ok.

[Uzlopak]

I am ok with this. I would probably create a follow up PR in the few days to straighten this up.

[olivierchatry]

Is verifying authtype suppose to be case sensitive ? I'm think it should not be. Found this : lexik/LexikJWTAuthenticationBundle#411