How to access user claims in python application code when using build-in authentication for container app

Question

I have a container app which is developed in Python with streamlit. I enabled Azure build-in Authentication ("Easy Auth") with Microsoft Entra ID. The authentication part works fine. However, I want to enable some custom authorization implementation based on logged in user's group. How can I get user claims (such a X-MS-CLIENT-PRINCIPAL-NAME, X-MS-CLIENT-PRINCIPAL-ID, etc headers) in my Python code?

Answer 1

I figured it out. It all depends on what architecture host app is using. In my specific case, I am using streamlit app, so this link does the job.