.todo

GATEKEEPER (CLIENT REQUEST ACCESS CONTROL)

- Implement actual user principal retrieval validation/authentication
  Given credentials presented by client:

  Bearer token (authentication):
    - Validate token.
    - Resolve token to active principal in datastore.
    - Attach principal to session for later use by middleware.

  CSRF token (non-repudiation):
    - Validate CSRF token against last known CSRF of principal.
    - Generate new CSRF token.
    - Attach new CSRF token to response headers.

- Implement per-principal rate limiting.


FEDERATED SERVICES FRAMEWORK

- Framework for dynamic service registration. (DONE)
  - Framework should not require services to be configured before startup.
    Instead, services should be able to register one or more endpoints after
    federator startup.

- API node registration request & client service request tracking via UUID
  - Generate UUID for every request.
  - When logging request events, provide UUID to aid in monitoring and
    troubleshooting.
  - Pass UUID to proxied API nodes via HTTP header to allow federator-node
    logging.