the examples have been copied from the original doc and this is explained above (you are in an authentication provider so you would need to extract yourself the credentials from the request if needed)