coulomb/tenant-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Send a projected flex-auth caller token on every check
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 1m7s
Details

Browse source 
TENANT_ENGINE_FLEX_AUTH_TOKEN_FILE is read per request so hourly
projection rotation needs no restart. Missing or unreadable file fails
closed as a local deny and never calls flex-auth. Needed before
flex-auth-tenant-engine can enforce (FLEX-WP-0015-T02).
This commit is contained in:
tegwick 2026-08-19 14:31:39 +02:00
parent 0809af063c
commit 2063470ac8
4 changed files with 38 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/tenant_engine/app.py
View file

@ -760,6 +760,7 @@ def _build_authorizer(settings: Settings) -> WriteAuthorizer:
client = FlexAuthCheckClient(
base_url=settings.flex_auth_base_url,
timeout_seconds=settings.flex_auth_timeout_seconds,
bearer_token_file=settings.flex_auth_token_file,
)
return FlexAuthWriteAuthorizer(client=client)