feat: add work-level play tracking

server-rs/crates/api-server/src/auth.rs

@@ -63,9 +63,13 @@ pub async fn require_bearer_auth(
         && let Some(claims) = try_build_internal_forwarded_claims(&state, request.headers())
     {
         request
+            .extensions_mut()
+            .insert(AuthenticatedAccessToken::new(claims.clone()));
+        let mut response = next.run(request).await;
+        response
             .extensions_mut()
             .insert(AuthenticatedAccessToken::new(claims));
-        return Ok(next.run(request).await);
+        return Ok(response);
     }
 
     let bearer_token = extract_bearer_token(request.headers())?;
@@ -114,10 +118,15 @@ pub async fn require_bearer_auth(
     }
 
     request
+        .extensions_mut()
+        .insert(AuthenticatedAccessToken::new(claims.clone()));
+
+    let mut response = next.run(request).await;
+    response
         .extensions_mut()
         .insert(AuthenticatedAccessToken::new(claims));
 
-    Ok(next.run(request).await)
+    Ok(response)
 }
 
 pub async fn inspect_auth_claims(