[#1096] tree: Make verifyClient fill ape request with user claim tags

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>

pkg/services/tree/options.go

@@ -4,6 +4,7 @@ import (
 	"crypto/ecdsa"
 	"time"
 
+	"git.frostfs.info/TrueCloudLab/frostfs-contract/frostfsid/client"
 	"git.frostfs.info/TrueCloudLab/frostfs-node/pkg/core/container"
 	"git.frostfs.info/TrueCloudLab/frostfs-node/pkg/core/netmap"
 	"git.frostfs.info/TrueCloudLab/frostfs-node/pkg/local_object_storage/pilorama"
@@ -11,8 +12,13 @@ import (
 	cid "git.frostfs.info/TrueCloudLab/frostfs-sdk-go/container/id"
 	policyengine "git.frostfs.info/TrueCloudLab/policy-engine/pkg/engine"
 	"github.com/nspcc-dev/neo-go/pkg/crypto/keys"
+	"github.com/nspcc-dev/neo-go/pkg/util"
 )
 
+type FrostfsidSubjectProvider interface {
+	GetSubject(util.Uint160) (*client.Subject, error)
+}
+
 type ContainerSource interface {
 	container.Source
 
@@ -25,13 +31,14 @@ type ContainerSource interface {
 }
 
 type cfg struct {
-	log        *logger.Logger
-	key        *ecdsa.PrivateKey
-	rawPub     []byte
-	nmSource   netmap.Source
-	cnrSource  ContainerSource
-	eaclSource container.EACLSource
-	forest     pilorama.Forest
+	log                      *logger.Logger
+	key                      *ecdsa.PrivateKey
+	rawPub                   []byte
+	nmSource                 netmap.Source
+	cnrSource                ContainerSource
+	frostfsidSubjectProvider FrostfsidSubjectProvider
+	eaclSource               container.EACLSource
+	forest                   pilorama.Forest
 	// replication-related parameters
 	replicatorChannelCapacity int
 	replicatorWorkerCount     int
@@ -55,6 +62,12 @@ func WithContainerSource(src ContainerSource) Option {
 	}
 }
 
+func WithFrostfsidSubjectProvider(provider FrostfsidSubjectProvider) Option {
+	return func(c *cfg) {
+		c.frostfsidSubjectProvider = provider
+	}
+}
+
 // WithEACLSource sets a eACL table source for a tree service.
 // This option is required.
 func WithEACLSource(src container.EACLSource) Option {