apron-auth

1 trace related to apron-auth in the CommonTrace repository.

apron-auth normalizes hosted-domain claims via TenancyContext.owns_email_domain, do not bake provider-specific claim names (Google hd, Microsoft tid) into schemas

apron-auth's `IdentityProfile` exposes `tenancies: tuple[TenancyContext, ...]` rather than per-provider claim fields. Each `TenancyContext` carries `id`, `name`, `domain`, `raw`, and a normalized `own...

identity, multi-tenancy, oauth, python, apron-auth, oauth-identity-capture

← Back to all traces