Fixed API calls on governance page

Enforced multitenancy

PostFundManagement.ConsoleUI/src/services/httpClient.ts

@@ -1,6 +1,6 @@
 import axios, { InternalAxiosRequestConfig } from 'axios';
 import { getApiBaseUrl } from '../config';
-import { triggerSessionExpired, isUserSyncEndpoint } from './sessionExpiration';
+import { triggerSessionExpired, isUserSyncEndpoint, isTenantEndpoint } from './sessionExpiration';
 import { isUserSyncedInBrowser, isActivationPending, syncUserAccount } from './userSyncService';
 
 export const BASE_API_URL = getApiBaseUrl();
@@ -25,10 +25,10 @@ apiClient.interceptors.request.use(
       config.headers.Authorization = `Bearer ${token}`;
     }
 
-    // User Sync Guard:
+    // User Sync & Tenant Lifecycle Guard:
     // All API calls require an authenticated and enabled user in the backend system.
-    const isSyncRequest = isUserSyncEndpoint(config.url);
-    if (token && !isSyncRequest) {
+    const isLifecycleRequest = isUserSyncEndpoint(config.url) || isTenantEndpoint(config.url);
+    if (token && !isLifecycleRequest) {
       // If user account is flagged as pending administrator activation, block downstream API calls
       if (isActivationPending()) {
         return Promise.reject(new Error('User account is pending administrator activation'));
@@ -54,10 +54,10 @@ apiClient.interceptors.response.use(
   (error) => {
     if (error?.response?.status === 401) {
       const requestUrl = error.config?.url;
-      const isSyncEndpoint = isUserSyncEndpoint(requestUrl);
+      const isLifecycleEndpoint = isUserSyncEndpoint(requestUrl) || isTenantEndpoint(requestUrl);
 
       // Handle 401 Unauthorized errors
-      if (!isSyncEndpoint) {
+      if (!isLifecycleEndpoint) {
         // Working endpoint returned HTTP 401: trigger session expiration prompt
         const detailMsg =
           error?.response?.data?.detail ||