In WebApi2 it was common to put arbitrary objects into HttRequestMessage.Properties. Usually it was doing with extension-methods like request.SetUserRight
HttRequestMessage.Properties
request.SetUserRight
HttpContext class has Items property which you can use for this purpose.