OIDC TenantResolver based on annotation presents on REST endpoints

[Eng-Fouad]

This is a feature request, but instead of opening a new issue, I am not sure if it is possible to be implemented.

Instead of creating custom TenantResolver, one can specify the OIDC tenant on JAX-RS resource via annotation, something like:

@Tenant("foo")
@Authenticated
@GET
@Path("/abc/def")
public String helloWorld() {
    return "Hello World";
}

What do you think? @sberyozkin @pedroigor

[sberyozkin]

@Eng-Fouad We have it supported like this:

https://quarkus.io/guides/security-openid-connect-multitenancy#resolving-tenant-identifiers-with-annotations

[Eng-Fouad]

Wow, that's great. Thanks for your answer.

[sberyozkin]

We can probably simplify it further, so that one can write

@Interceptor
@HrTenant
public class HrTenantInterceptor extends TenantInterceptor {
    public  HrTenantInterceptor() {
        super("hr");
    }
}

[sberyozkin]

@Eng-Fouad Np, @Tenant("123") would be ok, but I suspect it would be very complex to do right, we'd have to keep some model in memory, trace what method has been invoked, etc

[sberyozkin]

@Eng-Fouad I'll have a look at the suggested simplification, it would be very simple indeed once it is done

[Eng-Fouad]

It seems that HrTenantInterceptor is called after authentication, hence it never get called as the authentication fails because it gets configuration of wrong tenant :(