ilpanich / axiam-java-sdk / 29678143217

91%

push

github

fix(examples,docs): supply organization context for login/refresh (CONTRACT §5.1) (#19)

A tenant slug is only unique within an organization, so the login and
refresh endpoints require organization context in addition to tenant
context. The server rejects a login body without an org identifier with
HTTP 400 "must provide org_id or org_slug". Update every example, README
snippet, and doc that constructs a client and calls login/refresh to
supply organization context via .orgSlug(...):

- examples/login-mfa, rest-authz, grpc-checkaccess: read AXIAM_ORG_SLUG
  (default "acme") alongside AXIAM_TENANT_ID and pass .orgSlug(orgSlug)
  on the builder; update the Run javadoc lines.
- README quick-start: add .orgSlug("acme") and document the §5.1
  requirement.
- Re-sync vendored CONTRACT.md from the main repo (adds §5.1).

Unchanged (correctly): the Spring Boot example app and its IT tests are
resource-server / token-verification only (AxiamAuthenticationFilter +
AxiamAuthorizationInterceptor) and never call login/refresh; the AMQP
consumer example does not construct a client; the README mTLS snippet
authenticates by client certificate without login/refresh.


Claude-Session: https://claude.ai/code/session_01NLne4MVNrTAPorNno4PZdD

Co-authored-by: Claude <noreply@anthropic.com>

384 of 451 branches covered (85.14%)

Branch coverage included in aggregate %.

1051 of 1122 relevant lines covered (93.67%)

4.07 hits per line