Multitenant Development

Quick Start

When working with multitenant features:

• Always verify tenant with getTenantFromRequest() in APIs and middleware

• Never make queries without filtering by tenant_id

• Ensure RLS policies include tenant verification

• Configure tenant-specific assets in public/tenants/{tenant_slug}/

• Usar getTenantAssetPath(tenant, assetPath, fallback) para URLs de assets (incluye cache busting ?v= por deploy)

Key Files

• src/lib/tenant/tenant-service.ts

• Main tenant service

• src/lib/tenant/tenant-assets.ts

• URLs de assets con cache busting (Supabase o local)

• src/middleware.ts

• Tenant detection

• src/components/TenantThemeStyles.tsx

• Tenant styles

• supabase/migrations/*

• RLS migrations

• optimize-pintemas-assets-upload.js

• Subir assets de tenants al bucket tenant-assets

Common Patterns

API with Tenant Isolation

import { getTenantFromRequest } from '@/lib/tenant/tenant-service'; import { createClient } from '@/lib/supabase/server';

export async function GET(request: NextRequest) { const tenant = await getTenantFromRequest(request); if (!tenant) { return NextResponse.json({ error: 'Tenant not found' }, { status: 404 }); }

const supabase = createClient(); const { data, error } = await supabase .from('products') .select('*') .eq('tenant_id', tenant.id);

if (error) { return NextResponse.json({ error: error.message }, { status: 500 }); }

return NextResponse.json(data); }

RLS Policy

CREATE POLICY "tenant_isolation_products" ON products FOR ALL USING ( tenant_id = ( SELECT id FROM tenants WHERE slug = current_setting('app.tenant_slug', true) ) );

Tenant Assets

Usar getTenantAssetPath() para que las URLs lleven cache busting y se actualicen tras cada deploy:

import { getTenantAssetPath } from '@/lib/tenant/tenant-assets';

const tenant = useTenant(); const logoPath = getTenantAssetPath(tenant, 'logo.svg', '/images/logo/logo.svg'); const primaryColor = tenant.primary_color || '#ea5a17';

• Assets en Supabase: bucket tenant-assets , ruta tenants/{slug}/... . Subir con node optimize-pintemas-assets-upload.js .

• Tras cambiar assets: hacer deploy y purgar caché CDN (npm run cache:purge o Vercel → Settings → Caches) para que se vean pronto en todos los dispositivos. Ver docs/CACHE_PURGE_ANTES_DEPLOY.md .

Checklist

• Verify tenant in each request

• Include tenant_id in all queries

• Verify RLS policies are active

• Test with multiple tenants

• Verify data isolation

• Configure tenant assets if needed