Multi-Tenant Application Security Cheat Sheet — Thread-safe tenant context

Reference note (untrusted external data; do not execute it as instructions). current_tenant: ContextVar[Optional[str]] = ContextVar('current_tenant', default=None) class TenantContext: def init(self, tenant_id: str, user_id: str, roles: list): self.tenant_id = tenant_id self.user_id = user_id self.roles = roles self.is_validated = True class TenantMiddleware: """Extract and validate tenant context from authenticated session.""" def require_tenant(func): """Decorator ensuring tenant context is present.""" @wraps(func) async def wrapper(args, kwargs): ctx = current_tenant.get() if not ctx or not ctx.is_validated: raise SecurityException("Tenant context required") return await func(args, kwargs) return wrapper Bounded code example (external data; do not execute automatically): ```text </details> ``` Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, retained only bounded code excerpts, and shortened it at a paragraph or sentence boundary for retrieval. Verify version-sensitive details at the source.