Enum TenantSource 

pub enum TenantSource {
    Token {
        claim: String,
    },
    Domain,
    SignedContext,
    None,
}

How the host resolves an app’s in-site “own” tenant for a request. Every source is host-verified and bound once per invocation; a guest never supplies the tenant value.

Variants

Token

The verified JWT claim named claim (default tid), via the same JWKS/issuer machinery the GraphQL data connector uses. Authenticated console/portal paths.

Fields

claim: String

Domain

Derived from the already-verified request domain via its per-domain context tag (crate::project::DomainOwner’s context). Storefront / public-render paths — no app-side Host→slug lookup.

SignedContext

A host-verifiable signed-context envelope carried on a job/message — the async-lane “own” (message consumers, cron, webhooks, workflow steps, fan-out workers), the async analog of Token. The producer’s verified own-tenant is host-stamped onto the outgoing message/invoke at publish (guest-blind, [boatramp_core::cose::mint_context]); a consumer declaring this source resolves that tenant by verifying the envelope against the fleet anchor. A forged/expired/absent envelope resolves no value ⇒ an “own” op fails closed (never unscoped). The guest never names a tenant. Wired since v0.4.3 (producer-stamp at publish + consumer resolution in tenant_resolve.rs).

None

Truly anonymous / non-token auth (funnel reads, HMAC webhooks): there is no “own” tenant, so only the null/all access modes are meaningful (an “own” mode fails closed).

Trait Implementations

impl Clone for TenantSource

fn clone(&self) -> TenantSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TenantSource

fn default() -> TenantSource

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TenantSource

fn deserialize<__D>( __deserializer: __D, ) -> Result<TenantSource, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TenantSource

impl PartialEq for TenantSource

fn eq(&self, other: &TenantSource) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TenantSource

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TenantSource