The ctx.state key under which http-security-plugin's
ipSecurityMiddleware publishes the resolved client IP, and from which
auth-plugin's rateLimitMiddleware reads it back.
Exported from common so the two packages agree on the value byte-for-byte
instead of each hardcoding the literal — the validatedStateKey precedent.
Before this constant existed both sides spelled 'clientIp' inline, where a
typo on one side is a silent miss rather than a compile error.
The
ctx.statekey under whichhttp-security-plugin'sipSecurityMiddlewarepublishes the resolved client IP, and from whichauth-plugin'srateLimitMiddlewarereads it back.Exported from
commonso the two packages agree on the value byte-for-byte instead of each hardcoding the literal — thevalidatedStateKeyprecedent. Before this constant existed both sides spelled'clientIp'inline, where a typo on one side is a silent miss rather than a compile error.