​

Authentication System

​

Overview

​

Auth Flow

Login Request
  → Validate credentials
    → Resolve default tenant (resolveDefaultTenant)
      → Build auth domain info (buildAuthDomainInfo)
        → Issue JWT with tenant context

​

Key Components

​

Tenant Resolution Priority

1. ADMIN — Admin always goes to admin context
2. URL tenant — If accessing via specific tenant URL
3. Last tenant — User’s most recent tenant
4. Single — If user has only one membership
5. Email match — Match by email domain
6. Picker — Show tenant picker
7. Pending — Pending membership flow
8. Onboarding — New user onboarding

​

JWT Structure

{
  "actorId": "actor_123",
  "centerId": "center_456",
  "role": "ADMIN",
  "authorizedDomains": ["slowpace.co.kr", "center.cronozen.com"],
  "domainRoles": {
    "slowpace.co.kr": "ADMIN"
  },
  "exp": 1234567890
}

​

Actor Family

• Center switching without re-login
• Cross-center visibility for parents
• Unified session across services

const familyIds = await findActorFamilyIds(actorId);
// Returns all actor IDs sharing the same email/phone