We have an app that does some processing, and then it might need to call lower level services. Any webservice could be a consumer of another webservice etc, we want to maintain authorization info of the original client, so we need to attach the original request headers, to any outbound httpclient calls.

Is there a recommended approach? Should we fill the httpclient instance in a middleware? Should we make a HttpClient service that takes in an HttpContext object? Is there some other pipeline that has been provided for us to use?