Skip to content
Aurora Catalyst

Authenticated account query

Auto-generated from the source archive. Do not edit by hand — rerun catalyst-changelog-sync instead.

What changed

Section titled “What changed”
  • Adds the iamMeAccount query (REST + GraphQL) that returns the single authenticated account from request context — name, email, roles, permissions and tenants — without a database re-fetch.
  • It is authenticated-only (valid JWT, no iam.account.get permission gate), so reading your own profile never requires account-admin rights, and it is strategy-agnostic: the same contract works under local-provider and aurora-hub.

Why it matters

Section titled “Why it matters”

The access token only carries aci (the account id), and there was no working “my account” read — the admin sidebar showed a hardcoded user. The frontend now resolves the real logged-in user through one query, regardless of OAUTH_STRATEGY. Satellites in hub mode call the same iamMeAccount query against the hub to hydrate the account.

View original proposal