Authentication¶
Authentication/authorization are inherited from the Base Template. Metering adds SaaS tenant scoping.
Tenant context¶
Resolved via TenantResolutionStrategy (ConfigurationFirstThenJwtThenHeaders): JWT tid, HTTP X-Tenant-Id, messaging tenant-id. Meters are keyed by (TenantId, Dimension) and scoped by the SaasTenantFilter. Inbound provisioning/quota events are tenant-scoped (ITenantScopedMessage), so sagas provision and quota meters in the correct partition.