Struct RequestContext 

pub struct RequestContext<'a> {
    pub method: &'a str,
    pub path: &'a str,
    pub query: Option<&'a str>,
    pub headers: &'a HeaderMap,
    pub body: &'a [u8],
    pub extensions: &'a Extensions,
}

Everything an AuthProvider gets to see about an inbound request.

extensions is the request’s http::Extensions typemap as populated by whatever tower/axum layers ran before authentication — ConnectInfo, an mTLS peer identity, a tenant resolved upstream, a trace/session handle, etc. Before this field existed, the only way to pass such data to an AuthProvider was to smuggle it back through a header — exactly the spoofable channel the trusted-proxy work (#415/#416/#526) constrains. extensions is a legitimate trust source distinct from headers/body: those are wire-controlled and attacker-influenced, while extensions are populated in-process by layers the deployer chose to install, so an AuthProvider can trust a value found here in a way it must NOT trust the equivalent claimed via a header.

A shared reference is Copy, so adding this field does not affect the Copy derive below.

The canonical request (ADR 0021 §3)

What a provider is given is the canonical request of the operation, and a client that signs a request signs the same thing:

• method is the operation’s declared method: POST for every RPC call (unary and batch), GET for a subscription.
• path is the route CrateStack declares, relative to the router’s own root. A mount prefix never appears: a router nested under /api hands the provider /rpc/<op_id>, not /api/rpc/<op_id>, so a client signs its request path minus its base URL’s path. A REST model route carries the decoded /<id>, not its percent-encoded wire form.
• query is the raw query string where the operation reads one (REST model reads, MCP, sync) and None elsewhere (RPC, REST procedures).
• body is the exact bytes the router received, before decoding and never re-encoded; for a batch, the whole batch body, authenticated once. Behind an envelope layer it is the opened payload.

crates/cratestack-api/tests/canonical_request_{rest,rpc}.rs and crates/cratestack-sync/tests/canonical_request.rs pin it.

Fields

method: &'a str

path: &'a str

query: Option<&'a str>

headers: &'a HeaderMap

body: &'a [u8]

extensions: &'a Extensions

Trait Implementations

impl<'a> Clone for RequestContext<'a>

fn clone(&self) -> RequestContext<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for RequestContext<'a>

impl<'a> Debug for RequestContext<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.