Tenants & Admin

• File: Features/Tenants/TenantController.cs, Controllers/AdminController.cs, Controllers/UploadController.cs, Services/Keycloak.cs

Overview

Tenant configuration and a handful of back-office/admin endpoints live in hvc-api. Tenants are provisioned (Keycloak realm + client + DB migration) by hvc-admin-api; hvc-api serves the tenant's runtime config to its clients and provides a migration hook used during onboarding.

Tenant config — REST (api/tenant/...)

Endpoint	Purpose
GET /api/tenant/ping	Liveness for the tenant's API
GET /api/tenant/startrecording?eventId=&userId=	Request recording start for an event

GraphQL:

• tenantConfig — the tenant's runtime configuration (TenantConfig).
• basicTenantInfo — basic tenant identity (used by clients to resolve tenant).
• generatePrivateServerConfig / generatePrivateServerConfigQrCode — private-server (standalone) onboarding config + QR code.

Admin helpers — REST (api/admin/...)

Endpoint	Purpose
GET /api/admin/lastSeen/{contactId}	Last-seen time for a contact
GET /api/admin/lastSeen/{tenant}/{username}	Last-seen by tenant + username
GET /api/admin/isOnline/{tenant}/{username}	Online status
GET /api/admin/user/{tenant}/{username}	Connectivity/user info
POST /api/admin/migrate/{tenantName}?code=	Trigger DB migration for a tenant (used by hvc-admin-api during onboarding)

Bulk user upload — REST (api/uploads/...)

Endpoint	Purpose
POST /api/uploads/pendingUsers	Upload a spreadsheet of pending users (Excel)

This powers the web admin's bulk user import.

Security config

• tenantSecurityRules (GraphQL) — the tenant's security rules (PIN policy, lockout, session rules). Managed from the web admin UI.

Related

• Admin console — tenant onboarding/provisioning.
• Web admin (embedded) — tenant-level admin UI inside hvc-web.
• Auth — Keycloak integration for tenants.