Download the PHP package labor-digital/factory-multitenant-api without Composer
On this page you can find all versions of the php package labor-digital/factory-multitenant-api. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download labor-digital/factory-multitenant-api
More information about labor-digital/factory-multitenant-api
Files in labor-digital/factory-multitenant-api
Package factory-multitenant-api
Short Description HTTP API for the LABOR.digital Factory shared-tenant TYPO3 — create tenants, update capabilities live, and report deployed factory-core version. Opt-in: only install on shared-tenant deployments. Off-by-default at runtime.
License GPL-2.0-or-later
Homepage https://github.com/labor-digital/lab-factory/tree/main/factory-core/typo3-multitenant-api
Informations about the package factory-multitenant-api
Factory Multitenant API
HTTP API for the LABOR.digital Factory shared-tenant TYPO3. Wraps factory-core's tenant primitives so the pipeline-app (and other tooling) can create tenants and update their capabilities without a redeploy.
Opt-in. Single-tenant Factory installs should NOT install this extension. It exposes shared-tenant operations that don't apply to dedicated stacks.
Endpoints
All routes live under /api/multitenant. JSON in, JSON out. Bearer auth.
| Method | Path | Description |
|---|---|---|
GET |
/version |
Deployed factory_core + factory_multitenant_api + TYPO3 versions plus the supported seed-schema range. |
GET |
/tenants |
List all tenants (anything with a config/sites/<slug>/factory.json). |
GET |
/tenants/{slug} |
One tenant. |
POST |
/tenants |
Create a tenant. Wraps factory:tenant:provision. |
PATCH |
/tenants/{slug} |
Update capabilities (active_components, active_record_types, settings). Atomic rewrite of factory.json + cache invalidate; takes effect immediately on the worker handling the PATCH. |
Activation
The middleware is off by default. To turn the API on, set both:
Without both env vars, every /api/multitenant/* request returns 404. With them set, requests must present Authorization: Bearer <token>.
The deploy repo (labor-factory-multitenant) injects both via AWS Secrets Manager. See its private docs for the exact wiring.
Hardening checklist (production)
- ALB rule for
/api/multitenant/*restricted to a CIDR allowlist (LABOR offices + Bitbucket Pipelines egress). - Bearer token rotated quarterly.
- CloudWatch log filter on
factory_multitenant_api rejected→ ops alert. FACTORY_MULTITENANT_API_ENABLEDleft unset on any non-shared-tenant deploy.
See also
- Design Log #013 — Multitenant API & Live Capability Updates
- Design Log #011 — Multi-Tenant TYPO3
labor-digital/factory-core— the underlying tenant primitives