Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
Functions ¶
Types ¶
type Context ¶
Context is the resolved tenant scope for one authenticated request.
func FromContext ¶
FromContext returns the resolved tenant scope when present.
func Resolve ¶
func Resolve(externalIdentityID string, memberships []Membership) (*Context, error)
Resolve converts memberships for one external identity into a single tenant scope. Multiple memberships are allowed only when they all belong to the same tenant. Roles are deduplicated and sorted. Any ambiguity fails closed.
type Membership ¶
Membership is the provider-neutral membership input used during resolution.
Click to show internal directories.
Click to hide internal directories.