[Dhairya-007]

parse returned CaseFoldedOrderedDict[Incomplete], so every challenge value came back as Any.

The value type is fully determined by one line of the implementation:

challenges[name] = (args and args[0]) or kwargs or None

It is the single token when the challenge carries one, the parsed key/value parameters otherwise, and None when the challenge is bare. Checked against www-authenticate 0.9.2:

>>> parse('Basic realm="a", Bearer, Negotiate abc==')
CaseFoldedOrderedDict([('basic', {'realm': 'a'}),
                       ('bearer', None),
                       ('negotiate', 'abc==')])

Annotated as str | dict[str, str] | None so callers can narrow the three cases:

for scheme, params in parse(header).items():
    if params is None:              # bare challenge, e.g. "Bearer"
        ...
    elif isinstance(params, str):   # single token, e.g. "Negotiate abc=="
        ...
    else:                           # key/value params, e.g. Basic/Digest
        realm = params.get("realm")

The now-unused Incomplete import is dropped. Verified with mypy --strict.

[github-actions]

According to mypy_primer, this change has no effect on the checked open source code. 🤖🎉