fix(core): Eliminate mapping race condition

[gtema]

The ephemeral authentication path in authenticate_ephemeral returned
AuthenticationResult without authorization, forcing a second storage
read via get_mapping_provider().get_virtual_user(). Since get_by_key
does not enforce Raft linearizability for tier-0 data, the read could
return stale state under concurrent requests.

Derive AuthzInfo directly from match_result.authorizations and attach
it to the authentication result, eliminating the second read entirely.

Signed-off-by: Artem Goncharov artem.goncharov@gmail.com

[github-actions]

🦢 Load Test Results

Goose Attack Report

Plan Overview

Action	Started	Stopped	Elapsed	Users
Increasing	26-06-29 16:02:38	26-06-29 16:02:40	00:00:02	0 → 4
Maintaining	26-06-29 16:02:40	26-06-29 16:03:10	00:00:30	4
Decreasing	26-06-29 16:03:10	26-06-29 16:03:10	00:00:00	0 ← 4

Request Metrics

Method	Name	# Requests	# Fails	Average (ms)	Min (ms)	Max (ms)	RPS	Failures/s
GET		7680	0	15.13	9	32	256.00	0.00
	Aggregated	7680	0	15.13	9	32	256.00	0.00

Response Time Metrics

Method	Name	50%ile (ms)	60%ile (ms)	70%ile (ms)	80%ile (ms)	90%ile (ms)	95%ile (ms)	99%ile (ms)	100%ile (ms)
GET		13	15	19	19	20	21	23	32
	Aggregated	13	15	19	19	20	21	23	32

Status Code Metrics

Method	Name	Status Codes
GET		7,680 [200]
	Aggregated	7,680 [200]

Transaction Metrics

Transaction	# Times Run	# Fails	Average (ms)	Min (ms)	Max (ms)	RPS	Failures/s
ListUsers
0.0	0	0	0.00	0	0	0.00	0.00
0.1	4688	0	12.34	9	21	156.27	0.00
ValidateToken
1.0	0	0	0.00	0	0	0.00	0.00
1.1	2992	0	19.61	16	32	99.73	0.00
Aggregated	7680	0	15.13	9	32	256.00	0.00

Scenario Metrics

Transaction	# Users	# Times Run	Average (ms)	Min (ms)	Max (ms)	Scenarios/s	Iterations
ListUsers	2	4686	12.34	9	21	156.20	2343.00
ValidateToken	2	2990	19.61	16	33	99.67	1495.00
Aggregated	4	7676	15.17	9	33	255.87	3838.00

View full report

[github-actions]

Bencher Report

Branch	mapping_race
Testbed	ubuntu-latest

Click to view all benchmark results

Benchmark	Latency	Benchmark Result nanoseconds (ns) (Result Δ%)	Upper Boundary nanoseconds (ns) (Limit %)
Command_Serde/apply/remove	📈 view plot 🚷 view threshold	128,170.00 ns (-35.91%) Baseline: 199,973.62 ns	945,215.25 ns (13.56%)
Command_Serde/apply/set	📈 view plot 🚷 view threshold	137,280.00 ns (-29.88%) Baseline: 195,779.95 ns	848,693.45 ns (16.18%)
Command_Serde/pack/delete	📈 view plot 🚷 view threshold	129.07 ns (+7.72%) Baseline: 119.82 ns	143.40 ns (90.01%)
Command_Serde/pack/delete_index	📈 view plot 🚷 view threshold	113.31 ns (+2.50%) Baseline: 110.55 ns	133.50 ns (84.87%)
Command_Serde/pack/set	📈 view plot 🚷 view threshold	202.57 ns (+4.83%) Baseline: 193.23 ns	235.20 ns (86.13%)
Command_Serde/pack/set_index	📈 view plot 🚷 view threshold	113.79 ns (+2.79%) Baseline: 110.71 ns	133.51 ns (85.23%)
Command_Serde/unpack/delete	📈 view plot 🚷 view threshold	191.59 ns (+0.98%) Baseline: 189.73 ns	234.51 ns (81.70%)
Command_Serde/unpack/delete_index	📈 view plot 🚷 view threshold	154.95 ns (-4.40%) Baseline: 162.08 ns	202.60 ns (76.48%)
Command_Serde/unpack/set	📈 view plot 🚷 view threshold	277.98 ns (+10.82%) Baseline: 250.85 ns	309.75 ns (89.74%)
Command_Serde/unpack/set_index	📈 view plot 🚷 view threshold	165.40 ns (+3.16%) Baseline: 160.34 ns	199.15 ns (83.05%)
Payload_encryption/pack/remove_cmd	📈 view plot 🚷 view threshold	118.59 ns (+0.03%) Baseline: 118.55 ns	152.36 ns (77.84%)
Payload_encryption/pack/set_cmd	📈 view plot 🚷 view threshold	206.15 ns (-3.55%) Baseline: 213.73 ns	285.39 ns (72.23%)
Payload_encryption/unpack/remove_cmd	📈 view plot 🚷 view threshold	207.10 ns (+3.10%) Baseline: 200.87 ns	249.66 ns (82.95%)
Payload_encryption/unpack/set_cmd	📈 view plot 🚷 view threshold	311.93 ns (+18.61%) Baseline: 262.99 ns	325.41 ns (95.86%)
Raft_1Node_Latency/prefix/1node	📈 view plot 🚷 view threshold	2,472,600.00 ns (-23.76%) Baseline: 3,243,248.12 ns	6,674,180.65 ns (37.05%)
Raft_1Node_Latency/read/1node	📈 view plot 🚷 view threshold	1,476.60 ns (+98.59%) Baseline: 743.54 ns	1,588.43 ns (92.96%)
Raft_1Node_Latency/remove/1node	📈 view plot 🚷 view threshold	367,410.00 ns (-24.61%) Baseline: 487,366.88 ns	2,112,518.74 ns (17.39%)
Raft_1Node_Latency/write/1node	📈 view plot 🚷 view threshold	389,300.00 ns (-15.39%) Baseline: 460,118.12 ns	1,561,936.46 ns (24.92%)
build_snapshot/default	📈 view plot 🚷 view threshold	114,970.00 ns (+17.30%) Baseline: 98,017.05 ns	168,300.54 ns (68.31%)
fernet token/project	📈 view plot 🚷 view threshold	1,422.00 ns (+1.98%) Baseline: 1,394.37 ns	1,619.01 ns (87.83%)
get_data_keyspace	📈 view plot 🚷 view threshold	0.31 ns (-1.75%) Baseline: 0.32 ns	0.38 ns (83.07%)
get_db	📈 view plot 🚷 view threshold	0.31 ns (-1.42%) Baseline: 0.32 ns	0.38 ns (83.40%)
get_fernet_token_timestamp/project	📈 view plot 🚷 view threshold	158.19 ns (+8.57%) Baseline: 145.70 ns	178.38 ns (88.68%)
get_keyspace	📈 view plot 🚷 view threshold	4.37 ns (-12.39%) Baseline: 4.99 ns	10.06 ns (43.41%)

🐰 View full continuous benchmarking report in Bencher