On 19 May 2015, at 23:32, Lukas Krejci wrote:
Also, because orgs and people can be renamed, I think we should not
use the
name as the identifier of the tenant, but rather the persona ID
which is an UUID.
Yes. Above example was to explicitly list the header.
> If a tenant header is provided, but does not match a known tenant
we
> should probably
> return a 404 not found - I am not sure on this one though. Perhaps a 403
> with different reason
> phrase is even better.
>
I would argue that this will never gonna happen. As far as I recall, our
mantra is Persona = Tenant, which means that whatever tenant we get is an
authenticated user impersonating as given persona - and for that we should
have a tenant.
A misconfigured feed (e.g. user configuring the WildFly agent and
making a typo) is what I was thinking off. Less the pinger or internal
calls from UI to backend.