title: Is Passing Tenant ID in JWT Token a good practice?
body: <p>I'm building a multi tenant web app where I will have 1 app and 1 database for all my tenants. </p>
  
  <p>I have been reading about the different techniques to pass the tenant ID from server to client and viceversa for my REST requests/responses and it seems that the one that could fit better for me is passing the tennat id in the JWT Token because I won't have differnt domains for my tenants and passing it in a X-TENANT-ID seems insecure because anyone could change it(Any information on this will be greatly appreciated).</p>
  
  <p>So, is it a good practice to pass the tenant id in the JWT Token? Beside the other alternative (Passing the tenant id in a X-TENANT-ID header) are there any better ways to do it?</p>