Add tests for the BEARER mechanism. You can follow  ExternalAuthenticationMechanismTest. It is sufficient to add a test testing that the request fails when the bearer token is missing and passes when it is present and equal to the preconfigured token in the test.