Authentication

Authentication/authorization are inherited from the Base Template. Catalog adds SaaS tenant scoping.

Tenant context

Resolved via TenantResolutionStrategy (ConfigurationFirstThenJwtThenHeaders): JWT tid, HTTP X-Tenant-Id, messaging tenant-id. The resolved tenant feeds the SaasTenantFilter so products/editions/peer catalogs are tenant-scoped, and propagates over gRPC metadata (ADR-0100) and outbound events.

Catalog data is authored per tenant; slug uniqueness (UQ_Products_TenantId_Slug) is enforced within the tenant partition.

See also

• Configuration
• Base Template