Allow tenant header for bearer-authenticated requests

2026-05-11 16:02:16 +05:00
parent 0f1d59c9dd
commit ebba6c3f82
2 changed files with 47 additions and 1 deletions
@@ -131,7 +131,7 @@ def get_actor(
        payload = decode_app_token(value.strip())
        tenant_id = str(payload.get("tenant_id") or "").strip()
        tenant_source = "token" if tenant_id else None
-        if not tenant_id and legacy_header_auth_allowed():
+        if not tenant_id:
            tenant_id = str(x_tenant_id or "").strip()
            tenant_source = "header" if tenant_id else None
        return {