Struct RequestContext 

pub struct RequestContext;

Scoped identity of the current request, shared by every layer.

This is the single source of truth for “who is acting”. The HTTP adapter establishes the context before binding the request (RequestModel::bind), so the binder, the handler, middleware and the persistence layer all read the very same Arc<IdentityUser> — there is no second copy of sub and no way for audit and handler code to disagree.

Background work (IHostedService, spawned tasks, timers) has no ambient identity by default: identity() and operator_id() return None there, which audit code must treat as the System principal. A background job that acts on behalf of a user scopes that identity explicitly:

let identity = Arc::new(IdentityUser { id: "user-1".into(), ..Default::default() });
RequestContext::run(Some(identity), async move {
    // audit here sees user-1
})
.await;

Implementations

impl RequestContext

pub async fn run<F, R>(identity: Option<Arc<IdentityUser>>, f: F) -> R

where F: Future<Output = R>,

Run an async block with identity in scope.

Pass None for an anonymous request (or a system-initiated task); inside f, identity() and operator_id() then return None.

pub fn identity() -> Option<Arc<IdentityUser>>

The authenticated identity of the current request, if any.

Returns the very Arc the HTTP adapter created, so resolving the identity twice never allocates a second copy.

pub fn operator_id() -> Option<String>

The current operator id (IdentityUser::id), if authenticated.

None for anonymous requests and for background work that did not scope an identity — audit code should record those as System.