Resolves the acting context for one API-key request. Return undefined when the request carries no acting identity — filters requiring {{Acting*}} tokens then fail closed (match nothing / deny) by design.
undefined
{{Acting*}}
The incoming HTTP request (undefined on transports without one, e.g. WebSocket connects)
The per-request session UserInfo (already cloned; safe to read, do not mutate)
The validated API key's ID
Resolves the acting context for one API-key request. Return
undefinedwhen the request carries no acting identity — filters requiring{{Acting*}}tokens then fail closed (match nothing / deny) by design.