Cascadiq

Multi-Tenant API

project · Level 3 · 45 min

Description

Design an API where every request is scoped to a tenant (e.g. via header or subdomain). Data isolation and auth per tenant.

Requirements

  • Identify tenant from request (header/subdomain)
  • All data access scoped by tenant
  • Describe auth (API key per tenant, JWT with tenant claim, etc.)

Constraints

In-memory or pseudocode. Clear tenant boundary.

Deliverables

API design and middleware for tenant resolution.

Tags

APIMulti-TenancySecurity