Enum TenantStrategy 

#[non_exhaustive]
pub enum TenantStrategy {
    Subdomain,
    Header,
    Parameter,
}

Strategy used to extract the active tenant ID from an incoming request.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Subdomain

Select a tenant from the request host subdomain (e.g. tenant.example.com). The selection is accepted only when authenticated membership allows it.

Header

Select a tenant from a custom HTTP header. The header is an untrusted hint and is accepted only when authenticated membership allows it.

Parameter

Extract the tenant ID from query parameters.

Security Warning

Using query parameters (?tenant_id=...) can cause tenant IDs to leak in:

• Server access logs (clear-text)
• Browser history
• Referer headers sent to third-party assets
• CDN/proxy cache headers

For sensitive or regulated tenant IDs, prefer TenantStrategy::Header or TenantStrategy::Subdomain. Every strategy still requires a trusted crate::security::TenantMembership request extension from authentication middleware.

Trait Implementations

impl Clone for TenantStrategy

fn clone(&self) -> TenantStrategy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TenantStrategy

impl Debug for TenantStrategy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for TenantStrategy

impl PartialEq for TenantStrategy

fn eq(&self, other: &TenantStrategy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TenantStrategy