applyEngineAuthEnv populates config.Env with AWF_AUTH_* environment variables derived from config.Auth. Existing config.Env values take precedence so users can explicitly override auth-derived values via engine.env.
(config *EngineConfig)
| 644 | // derived from config.Auth. Existing config.Env values take precedence so users |
| 645 | // can explicitly override auth-derived values via engine.env. |
| 646 | func applyEngineAuthEnv(config *EngineConfig) { |
| 647 | if config == nil || config.Auth == nil { |
| 648 | return |
| 649 | } |
| 650 | if config.Env == nil { |
| 651 | config.Env = make(map[string]string) |
| 652 | } |
| 653 | |
| 654 | if config.Auth.Type != "" { |
| 655 | if _, exists := config.Env["AWF_AUTH_TYPE"]; !exists { |
| 656 | config.Env["AWF_AUTH_TYPE"] = config.Auth.Type |
| 657 | } |
| 658 | } |
| 659 | if config.Auth.Audience != "" { |
| 660 | if _, exists := config.Env["AWF_AUTH_OIDC_AUDIENCE"]; !exists { |
| 661 | config.Env["AWF_AUTH_OIDC_AUDIENCE"] = config.Auth.Audience |
| 662 | } |
| 663 | } |
| 664 | if config.Auth.AzureTenantID != "" { |
| 665 | if _, exists := config.Env["AWF_AUTH_AZURE_TENANT_ID"]; !exists { |
| 666 | config.Env["AWF_AUTH_AZURE_TENANT_ID"] = config.Auth.AzureTenantID |
| 667 | } |
| 668 | } |
| 669 | if config.Auth.AzureClientID != "" { |
| 670 | if _, exists := config.Env["AWF_AUTH_AZURE_CLIENT_ID"]; !exists { |
| 671 | config.Env["AWF_AUTH_AZURE_CLIENT_ID"] = config.Auth.AzureClientID |
| 672 | } |
| 673 | } |
| 674 | if config.Auth.AzureScope != "" { |
| 675 | if _, exists := config.Env["AWF_AUTH_AZURE_SCOPE"]; !exists { |
| 676 | config.Env["AWF_AUTH_AZURE_SCOPE"] = config.Auth.AzureScope |
| 677 | } |
| 678 | } |
| 679 | if config.Auth.AzureCloud != "" { |
| 680 | if _, exists := config.Env["AWF_AUTH_AZURE_CLOUD"]; !exists { |
| 681 | config.Env["AWF_AUTH_AZURE_CLOUD"] = config.Auth.AzureCloud |
| 682 | } |
| 683 | } |
| 684 | if config.Auth.Provider != "" { |
| 685 | if _, exists := config.Env["AWF_AUTH_PROVIDER"]; !exists { |
| 686 | config.Env["AWF_AUTH_PROVIDER"] = config.Auth.Provider |
| 687 | } |
| 688 | } |
| 689 | if config.Auth.AnthropicFederationRuleID != "" { |
| 690 | if _, exists := config.Env["AWF_AUTH_ANTHROPIC_FEDERATION_RULE_ID"]; !exists { |
| 691 | config.Env["AWF_AUTH_ANTHROPIC_FEDERATION_RULE_ID"] = config.Auth.AnthropicFederationRuleID |
| 692 | } |
| 693 | } |
| 694 | if config.Auth.AnthropicOrganizationID != "" { |
| 695 | if _, exists := config.Env["AWF_AUTH_ANTHROPIC_ORGANIZATION_ID"]; !exists { |
| 696 | config.Env["AWF_AUTH_ANTHROPIC_ORGANIZATION_ID"] = config.Auth.AnthropicOrganizationID |
| 697 | } |
| 698 | } |
| 699 | if config.Auth.AnthropicServiceAccountID != "" { |
| 700 | if _, exists := config.Env["AWF_AUTH_ANTHROPIC_SERVICE_ACCOUNT_ID"]; !exists { |
| 701 | config.Env["AWF_AUTH_ANTHROPIC_SERVICE_ACCOUNT_ID"] = config.Auth.AnthropicServiceAccountID |
| 702 | } |
| 703 | } |