Metadata-Version: 2.4
Name: tba-app-backend-tenant-administration
Version: 0.4.0.dev2
Summary: Tenant-scoped administration backend application for TBA.
License-Expression: Apache-2.0
Requires-Python: >=3.10,<3.15
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Requires-Dist: tba-app-backend-core (==0.4.0.dev2)
Requires-Dist: tba-auth (==0.4.0.dev2)
Requires-Dist: tba-router-administration-gate (==0.4.0.dev2)
Project-URL: Homepage, https://github.com/tigrbl/tigrbl_auth
Project-URL: Repository, https://github.com/tigrbl/tigrbl_auth
Project-URL: Source, https://github.com/tigrbl/tigrbl_auth/tree/master/pkgs/90-backend-apps/tba-app-backend-tenant-administration
Description-Content-Type: text/markdown

# tba-app-backend-tenant-administration

Tenant-scoped identity, admin delegation, JWKS, and local policy API front door.

## Surface

| Property | Value |
| --- | --- |
| Product surface | `tenant-admin-app` |
| Intended UIX | `@tba/ui-tenant-administration` |
| Exposes | Tenant identities, clients, consents, sessions, tenant keys/JWKS, tenant-local audit |
| Excludes | Platform tenant creation/deletion and cross-tenant authority assignment |

## Entrypoint

```python
from tba_app_backend_tenant_administration import app, build_app
```

## Local Dev Deployment

The Docker dev surface listens on `http://localhost:8016` and uses the
admin API key `dev-tenant-admin-key` unless overridden.

```bash
docker compose -f docker/docker-compose.tenant-admin-app.yml up -d --build
```

Useful checks:

- `GET /openapi.json`
- `GET /openrpc.json`
- `POST /rpc` with `X-API-Key: dev-tenant-admin-key`
- `GET /user`, `/client`, `/clientregistration`, `/consent`

The tenant-admin surface intentionally does not expose `/tenant`, public
OAuth/OIDC routes, platform tenant lifecycle RPC, or service/workload admin
resources.

