Multi-tenant Connection

[ParamThakkar]

I want to use DAB for our Multi-tenant solution where we have a separate database per tenant. For which I want DAB to switch Connection String based on the request headers.

Is it possible in DAB?

[FelipeA]

Hey, I need the samething. But I'm trying to adjust the code to allow it, but the it's more complex then I expected.

[aaronburtle]

I want to use DAB for our Multi-tenant solution where we have a separate database per tenant. For which I want DAB to switch Connection String based on the request headers.

Is it possible in DAB?

Hey, I need the samething. But I'm trying to adjust the code to allow it, but the it's more complex then I expected.

Hi there @ParamThakkar and @FelipeA , thanks for raising this issue. Have you tried using the support we have for multiple data-source to make this work? You could have a database with an associated data-source in the config file, 1 for each tenant. DAB will automatically find the right database through the entity that the tenants are trying to access, and use the correct connection string for that database. Then if you setup authorization policies so that each tenant is only able to access the entities from their respective databases, everything should work as you would like.

This would also make it possible for you to define tenants that can access multiple databases, depending on how you setup their authorization.

[aaronburtle]

Also just wanted to be clear, with using multiple data-sources you will have multiple config files, where each additional file holds a data-source and then the entities associated with that data-source from that file. It is in those new files where you would need to have unique entity names and you could prefix those entity names with something unique to each tenant. We don't support multiple data-source or entities associated with other data-sources all in 1 file, you will need to split the data-source and entities into their respective files.

[aaronburtle]

This is the intial changes that I'm doing. 92fe814

It's not working but I'd like to check if this is the correct path.

Thanks in advance!

I will take a look at this later and see if I can give some suggestions on how to proceed, but I would recommend utilizing the multiple data source support that we have, since this will effectively accomplish the same overall functionality, just with unique entity names rather than each tenant using the same entity names and having that route to different data-sources through the tenant field youve introduced.

[FelipeA]

@aaronburtle thanks, but could you hold on for while. I'm changing the approach and let you know when I have a new version.

[FelipeA]

Hey @aaronburtle, could you take a look on the following commit?

Commit: 14accf6

I did some tests using Rest and GraphQL, I tested the config format file to verifiy if all configurations and format will not break and seems everything is working as expected.
The strategy that I'm using to resolve tenant is provide a JWT via header (X-Tenant-ID) with the tenant id inside. I decided to provide a JWT token just to not pass explicit the tenantid, try to add some sort of security.
I'm not totally satisfied how the tenant id is being provided, fell free to suggest a better approach.

JWT format:

Algorithm: HS256
{
  "TenantId": "tenant2"
}

The config file should looks like this:
{ "$schema": "https://github.com/Azure/data-api-builder/releases/download/vmajor.minor.patch/dab.draft.schema.json", "data-source": { "database-type": "mssql", "connection-string": "...", "options": { "set-session-context": true } }, "tenants": { "tenant1": { "database-type": "mssql", "connection-string": "...", "options": { "set-session-context": true } }, "tenant2": { "database-type": "mssql", "connection-string": "....", "options": { "set-session-context": true } } }, "runtime": { "rest": { ... }, "graphql": { ... }, "multi-tenancy": { "enabled": true, "tenant-encrypt-key": "0c3f55db-776a-4fc4-835c-7d4c9beb2e9b" }, "host": { .... }, "entities": { ..... } }

Feel free to add comment, sugestion and make questions.
Thanks in advance!

[FelipeA]

@ParamThakkar This is my fork for enable muti-tenancy.
Feel free to use and provide any comments, feedback and improvements.

Repo: https://github.com/FelipeA/data-api-builder-multitenant