kai/ColaFlow
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix(backend): Use tenant_id claim name in MCP API Key authentication

Browse Source 
Fixed TenantId claim name mismatch between McpApiKeyAuthenticationHandler
and ITenantContext implementations. Changed claim name from "TenantId" to
"tenant_id" to match what TenantContext.GetCurrentTenantId() expects.

This fixes the "TenantId cannot be empty" error when MCP SDK Resources
attempt to retrieve the tenant ID after API Key authentication.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Yaojia Wang
2025-11-23 15:32:04 +01:00
parent b38a9d16fa
commit a55006b810
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
colaflow-api/src/Modules/Mcp/ColaFlow.Modules.Mcp.Infrastructure/Authentication/McpApiKeyAuthenticationHandler.cs
View File

@@ -48,11 +48,12 @@ public class McpApiKeyAuthenticationHandler : AuthenticationHandler<McpApiKeyAut
} }
// Create claims from validation result // Create claims from validation result
// Note: Use "tenant_id" to match ITenantContext implementations that look for this claim name
var claims = new List<Claim> var claims = new List<Claim>
{ {
new(ClaimTypes.NameIdentifier, validationResult.UserId.ToString()), new(ClaimTypes.NameIdentifier, validationResult.UserId.ToString()),
new("ApiKeyId", validationResult.ApiKeyId.ToString()), new("ApiKeyId", validationResult.ApiKeyId.ToString()),
new("TenantId", validationResult.TenantId.ToString()), new("tenant_id", validationResult.TenantId.ToString()),
new("UserId", validationResult.UserId.ToString()), new("UserId", validationResult.UserId.ToString()),
}; };