From af5aa2e4ba0fe2b2e6a30def2deb16ee7dac958c Mon Sep 17 00:00:00 2001
From: Max Peintner <peintnerm@gmail.com>
Date: Wed, 29 Jan 2025 11:03:48 +0100
Subject: [PATCH] either system or other token

---
 apps/login/src/lib/service.ts | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/apps/login/src/lib/service.ts b/apps/login/src/lib/service.ts
index 3665e6f185..dd261e0b22 100644
--- a/apps/login/src/lib/service.ts
+++ b/apps/login/src/lib/service.ts
@@ -21,7 +21,18 @@ export async function createServiceForHost<T extends ServiceClass>(
   service: T,
   serviceUrl: string,
 ) {
-  const token = await systemAPIToken();
+  let token;
+
+  // if we are running in a multitenancy context, use the system user token
+  if (
+    process.env.AUDIENCE &&
+    process.env.SYSTEM_USER_ID &&
+    process.env.SYSTEM_USER_PRIVATE_KEY
+  ) {
+    token = await systemAPIToken();
+  } else if (process.env.ZITADEL_SERVICE_USER_TOKEN) {
+    token = process.env.ZITADEL_SERVICE_USER_TOKEN;
+  }
 
   if (!serviceUrl || !token) {
     throw new Error("No instance url or token found");