improve secondary auth claims utilization

Author: pitabwire

datastore/scopes/tenancy.go

@@ -18,7 +18,11 @@ func TenancyPartition(ctx context.Context) func(db *gorm.DB) *gorm.DB {
 
 		skipTenancyChecksOnClaims := security.IsTenancyChecksOnClaimSkipped(ctx)
 		if skipTenancyChecksOnClaims {
-			return db
+
+			authClaim = security.SecondaryClaimsFromContext(ctx)
+			if authClaim == nil {
+				return db
+			}
 		}
 
 		// Safely retrieve the table name (fallback to empty string if nil)

go.mod

@@ -49,7 +49,7 @@ require (
 )
 
 require (
-	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20251209175733-2a1774d88802.1 // indirect
+	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20251209175733-2a1774d88802.1 // indirect
 	cel.dev/expr v0.25.1 // indirect
 	dario.cat/mergo v1.0.2 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
@@ -139,7 +139,7 @@ require (
 	golang.org/x/sys v0.39.0 // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
 	google.golang.org/api v0.257.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251213004720-97cd9d5aeac2 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )