Multitenant Development

Quick Start

When working with multitenant features:

1. Always verify tenant with getTenantFromRequest() in APIs and middleware
2. Never make queries without filtering by tenant_id
3. Ensure RLS policies include tenant verification
4. Configure tenant-specific assets in public/tenants/{tenant_slug}/
5. Usar getTenantAssetPath(tenant, assetPath, fallback) para URLs de assets (incluye cache busting ?v= por deploy)

Key Files

• src/lib/tenant/tenant-service.ts – Main tenant service
• src/lib/tenant/tenant-assets.ts – URLs de assets con cache busting (Supabase o local)
• src/middleware.ts – Tenant detection
• src/components/TenantThemeStyles.tsx – Tenant styles
• supabase/migrations/* – RLS migrations
• optimize-pintemas-assets-upload.js – Subir assets de tenants al bucket tenant-assets

Common Patterns

API with Tenant Isolation

import { getTenantFromRequest } from '@/lib/tenant/tenant-service';
import { createClient } from '@/lib/supabase/server';

export async function GET(request: NextRequest) {
  const tenant = await getTenantFromRequest(request);
  if (!tenant) {
    return NextResponse.json({ error: 'Tenant not found' }, { status: 404 });
  }
  
  const supabase = createClient();
  const { data, error } = await supabase
    .from('products')
    .select('*')
    .eq('tenant_id', tenant.id);
  
  if (error) {
    return NextResponse.json({ error: error.message }, { status: 500 });
  }
  
  return NextResponse.json(data);
}

RLS Policy

CREATE POLICY "tenant_isolation_products" ON products
  FOR ALL
  USING (
    tenant_id = (
      SELECT id FROM tenants 
      WHERE slug = current_setting('app.tenant_slug', true)
    )
  );

Tenant Assets

Usar getTenantAssetPath() para que las URLs lleven cache busting y se actualicen tras cada deploy:

import { getTenantAssetPath } from '@/lib/tenant/tenant-assets';

const tenant = useTenant();
const logoPath = getTenantAssetPath(tenant, 'logo.svg', '/images/logo/logo.svg');
const primaryColor = tenant.primary_color || '#ea5a17';

• Assets en Supabase: bucket tenant-assets, ruta tenants/{slug}/.... Subir con node optimize-pintemas-assets-upload.js.
• Tras cambiar assets: hacer deploy y purgar caché CDN (npm run cache:purge o Vercel → Settings → Caches) para que se vean pronto en todos los dispositivos. Ver docs/CACHE_PURGE_ANTES_DEPLOY.md.

Checklist

• Verify tenant in each request
• Include tenant_id in all queries
• Verify RLS policies are active
• Test with multiple tenants
• Verify data isolation
• Configure tenant assets if needed