The reserved session key holding the tenant id a session was minted under,
sealed by SessionPlugin({ tenantBinding: true }) (the default).
Exported from common because two packages must agree on the value
byte-for-byte: session-plugin seals and compares it, and
multi-tenancy-plugin's tenant middleware reads it for the tenant-binding
compare that runs on whichever side sees the tenant second (M101c, V8-7).
Application code must not read or write this key — clear() and
regenerate() drop it and the next commit re-binds it, which is correct
because a regenerated session is a new session and should adopt the current
tenant.
The reserved session key holding the tenant id a session was minted under, sealed by
SessionPlugin({ tenantBinding: true })(the default).Exported from
commonbecause two packages must agree on the value byte-for-byte:session-pluginseals and compares it, andmulti-tenancy-plugin's tenant middleware reads it for the tenant-binding compare that runs on whichever side sees the tenant second (M101c, V8-7).Application code must not read or write this key —
clear()andregenerate()drop it and the next commit re-binds it, which is correct because a regenerated session is a new session and should adopt the current tenant.