pnoker 0d8390db51 fix(tenant): bind tenant context on gRPC server paths ...

D-1's fail-closed TenantLineHandler rejects unscoped queries, but gRPC
server threads bypass BaseController.async so no tenant was ever bound —
every query against a tenant-scoped table silently failed.

- proto: add tenant_id to manager/driver single & batch query messages
- facade: drop single-param abstract + default matchesTenant filter,
  promote the tenantId-bearing overload (all callers already pass it)
- GrpcFacade/LocalFacade: carry tenant into request / onto ThreadLocal
- 9 manager+driver servers (27 RPCs): setTenantId + finally clear
- data servers: setTenantId on tenant-bearing RPCs; runIgnore for
  getByRecordId (record_id globally unique, no tenant in payload)
- TokenServer.checkValid: runIgnore (dc3_tenant_membership, pre-login)
- driver clients (Device/Driver/Point): set tenant on getById queries
- alarm: drop tenant reverse-resolve (D-1 leftover the fail-closed
  interceptor forbids); tenant now required from upstream, else drop
- add TenantLineInterceptorIntegrationTest (H2) covering scoped filter,
  fail-closed, and runIgnore through the real MyBatis-Plus pipeline

2026-07-03 12:40:10 +08:00

..

dc3-api-auth

docs(api): correct gRPC RPC names, import paths, and missing services

2026-06-22 16:49:07 +08:00

dc3-api-data

style: fix table alignment and whitespace in README files

2026-06-26 13:17:38 +08:00

dc3-api-driver

fix(tenant): bind tenant context on gRPC server paths

2026-07-03 12:40:10 +08:00

dc3-api-manager

fix(tenant): bind tenant context on gRPC server paths

2026-07-03 12:40:10 +08:00

pom.xml

feat: update pom version

2026-06-06 13:00:39 +08:00