OptionalheadersOptional Standard Schema for the credential headers this hook reads.
The schema is validated against the raw lowercase request header record
before resolve runs. On required() hooks a schema failure rejects the
request with a framework-owned 401; on optional() hooks a schema failure
skips auth resolution; public() hooks never parse headers.
OptionalnameHook name prefix used in diagnostics.
Resolve authenticated context additions for the current request.
Return null when the request is unauthenticated. Required hooks will
reject that request; optional hooks will add no auth context.
Options for route-scoped auth hooks.
Auth additions must not include
gate: the server re-attaches the gate declared by the context blueprint after every hook, so elevated identities are authorized against the updated context automatically.