Tenant context.
also: tenant context propagation · tenant_id propagationKnowing which tenant a request belongs to and carrying that tenant ID through every service, query, event and background job.
the two-minute refresher
- Extract the tenant once, at the edge (subdomain, token claim, header).
- Propagate it in request context, message headers and job payloads.
- Every query filters by it: one missing WHERE tenant_id leaks data across customers.
- Background jobs and event consumers are where it most often gets lost.