When requests from OpenSearch -> Extension arrive there should be a payload that includes the identity of the current user. Given a request there should be a way to extract this information. When requests are made from Extension -> OpenSearch this information should be included.

• Extract a JWT token through the transport interface on an incoming request
• Include properties
  • identifier
  • expiration
• Outbound requests to OpenSearch include the identity information.