NestJS · Authorization · Tech Lead · Architecture
Lead: multi-tenant authorization architecture for Nest?
Short Interview Answer
Tenant context in ALS/JWT claims, row-level filters enforced in repos, and automated tests for cross-tenant access.
Detailed Explanation
Assume IDOR attempts. Pentest tenancy. Deny by default.