ClientContext

What one request says about the client behind it, read through GetClientContext. Both values are a snapshot rather than a live read, so the record can be handed to a background job or an audit record after the request has ended. UserAgent is the header exactly as sent, unparsed; call GetUserAgent when the browser or device is what matters.

WARNING

Neither value identifies a caller: an address is shared by everyone behind a proxy and a User-Agent is whatever the client typed, so this belongs in a log or an audit trail rather than in an authorization decision.

IpAddress comes from HttpContext.Connection.RemoteIpAddress and never from a request header. A header such as X-Forwarded-For is trivially forged by the client, and this value is persisted for audit by other packages.

For an application behind a proxy, configure forwarded headers with AddCloudflareHeaders and app.UseForwardedHeaders(). That rewrites the connection address from a trusted proxy only, so this value stays accurate without becoming forgeable.

Fields

IpAddress: string?
The client IP address from the connection, or null when it is not available.

UserAgent: string?
The raw User-Agent header value.

Type signature

public sealed record ClientContext
{
    public required string? IpAddress { get; init; }
    public required string? UserAgent { get; init; }
}