Table of Contents

Orleans.Lattice.Api.Replication.Grpc configuration

The package has one public options type, LatticeReplicationApiGrpcOptions, bound through AddLatticeReplicationApiGrpc(configure) and resolvable via IOptions<LatticeReplicationApiGrpcOptions>. The peer-status service that AddLatticeReplicationStatusApiGrpc() adds takes no options of its own: it is governed by the same instance, so RequireAuthorization, the credential headers, and ActiveTenantHeaderName apply to GetPeerStatus exactly as to the control RPCs.

LatticeReplicationApiGrpcOptions

Property Type Default Meaning
RequireAuthorization bool true Whether the authorization interceptor enforces ILatticeReplicationApiAuthorizer on every inbound operation RPC. Default-deny: the binding fails closed unless a host registers a permissive authorizer or explicitly turns enforcement off. Set to false only when an outer authentication boundary already guards the endpoint.
CredentialHeaderName string "authorization" The inbound request-header (gRPC metadata) name carrying the caller's credential token, bridged into the ambient Lattice credential so the access gate can resolve the caller's subject. The header is read on every operation RPC, but the bridged credential only affects the outcome when auth-backed replication control is active (an authorization add-on such as Orleans.Lattice.Auth supplies the access gate); with only the core no-op gate registered it is never evaluated. When it is evaluated, the subject it resolves to is also what the tenancy add-on (which requires Orleans.Lattice.Auth) validates an asserted active tenant against. Set to null or an empty string to bridge no credential.
CredentialScheme string "Bearer" The authentication scheme stamped on the bridged credential, matched by a registered ILatticeCredentialAuthenticator. A case-insensitive scheme prefix on the header value (for example "Bearer ") is stripped before the remaining token is used.
ActiveTenantHeaderName string lattice-active-tenant (LatticeActiveTenantAssertion.DefaultHeaderName) The inbound request-header (gRPC metadata) name carrying the tenant the caller is acting as, lifted onto the ambient active-tenant scope for the duration of the call so replication verbs resolve tree names in that tenant's namespace. Set to null or an empty string to disable header-based tenant selection. The asserted tenant is a caller claim the tenancy add-on re-validates against the caller's own membership; with no tenancy add-on registered it resolves to the reserved default tenant and changes nothing.
AdvertisedAuthSchemes IList<AuthSchemeDescriptor> empty The auth schemes the endpoint advertises from its unauthenticated GetAuthScheme RPC, in preference order. Empty by default. Each descriptor must carry only public configuration - never a secret.

Transport policy lives on the caller

Address, TLS, retries, deadlines, and client credentials are not configured here: they belong to the caller's GrpcChannel / CallInvoker. This package configures only what the server-side binding needs to authorize and marshal.

What is configured elsewhere

The control semantics - which trees may be enabled, the merge modes, the fail-closed access gate - are the facade's and engine's concern, configured on Orleans.Lattice.Api.Replication and Orleans.Lattice.Replication.