Worked identity and org-context samples

const res = await fetch("https://api.orbit.devotel.io/api/v1/me", {
  headers: { "X-API-Key": process.env.ORBIT_API_KEY! },
});
const { data } = await res.json();

// Branch on the caller's role before any write path.
const membership = data.organizations.find((o) => o.slug === data.tenant.slug);
const role = membership?.role ?? "member";
if (role !== "admin" && role !== "owner") {
  console.warn(`Role "${role}" cannot manage this resource — expect 403 on write paths`);
}

import os, requests

r = requests.get(
    "https://api.orbit.devotel.io/api/v1/me",
    headers={"X-API-Key": os.environ["ORBIT_API_KEY"]},
)
data = r.json()["data"]

# Branch on the caller's role before any write path.
membership = next(
    (o for o in data["organizations"] if o["slug"] == data["tenant"]["slug"]),
    None,
)
role = membership["role"] if membership else "member"
if role not in ("admin", "owner"):
    print(f'Role "{role}" cannot manage this resource — expect 403 on write paths')

using System.Net.Http.Json;

using var http = new HttpClient();
http.DefaultRequestHeaders.Add("X-API-Key", Environment.GetEnvironmentVariable("ORBIT_API_KEY"));
var me = await http.GetFromJsonAsync<JsonElement>("https://api.orbit.devotel.io/api/v1/me");
var data = me.GetProperty("data");

// Branch on the caller's role before any write path.
var role = data.GetProperty("user").GetProperty("role").GetString() ?? "member";
if (role is not ("admin" or "owner"))
{
    Console.WriteLine($"Role \"{role}\" cannot manage this resource — expect 403 on write paths");
}