Constants

The request-context key the session-access middleware stores the resolved SessionContext under.

Handlers read it to get the identity for the current request:

const sessionContext = requestContext.get(SessionContextRequestKey);

Set only when the handler carries access-control metadata and the provider resolved a session — under @WithSessionAccess an anonymous request leaves it unset.