API Key authentication và multi-tenant trong NestJS?

@Injectable()
export class ApiKeyGuard implements CanActivate {
  constructor(private apiKeysService: ApiKeysService) {}

  async canActivate(context: ExecutionContext): Promise<boolean> {
    const request = context.switchToHttp().getRequest();
    const apiKey = request.headers['x-api-key'];
    if (!apiKey) throw new UnauthorizedException('API key required');

    const keyRecord = await this.apiKeysService.validateKey(apiKey);
    if (!keyRecord) throw new UnauthorizedException('Invalid API key');

    request.tenant = keyRecord.tenant;  // Attach tenant context
    return true;
  }
}

// REQUEST scope — instance riêng mỗi request
@Injectable({ scope: Scope.REQUEST })
export class TenantContext {
  constructor(@Inject(REQUEST) private req: Request) {}

  get tenantId(): string {
    return (this.req as any).tenant?.id;
  }
}