update

http-api/auth.py

@@ -35,6 +35,7 @@ from aws_lambda_powertools.utilities.data_classes.api_gateway_authorizer_event i
 from aws_lambda_powertools.utilities.typing import LambdaContext
 from botocore.endpoint_provider import Enum
 from layercake.dynamodb import DynamoDBCollection, DynamoDBPersistenceLayer, KeyPair
+from layercake.funcs import pick
 
 from boto3clients import dynamodb_client
 from cognito import get_user
@@ -100,7 +101,16 @@ def _authorizer(bearer: BearerToken) -> Authorizer:
                 return Authorizer(True, {'user': user})
             case TokenType.API_KEY:
                 apikey = collect.get_item(KeyPair('apikey', bearer.token))
-                return Authorizer(True, {'tenant': apikey['tenant']})
+                return Authorizer(
+                    True,
+                    pick(
+                        (
+                            'user',
+                            'tenant',
+                        ),
+                        apikey,
+                    ),
+                )
     except Exception:
         return Authorizer()