Optional ReadonlyauthenticatedWhen authentication was validated
Optional ReadonlyextraConsumer-provided extra data (populated via onAuthenticated hook)
ReadonlyisWhether the session is authenticated
Optional ReadonlypermissionsFramework permission scopes (future: role-based or mapped from sdkAuthInfo.scopes)
Optional ReadonlysdkSDK auth info from transport (populated by OAuth middleware via req.auth)
Optional ReadonlyuserResolved user identity (future: mapped from sdkAuthInfo.clientId or custom resolver)
Authentication context for a session.
Wraps the SDK's
AuthInfo(from OAuth/Bearer middleware) and adds framework-level auth metadata for future user/permission systems.When no auth middleware is configured, sessions use
ANONYMOUS_AUTH.