fix: add access token env checks in existing auth flow

Relates to STACKITTPR-761

Author: SerseusWasTaken

internal/pkg/auth/auth.go

@@ -134,6 +134,9 @@ func UserSessionExpired() (bool, error) {
 }
 
 func GetAccessToken() (string, error) {
+	if accessToken := os.Getenv(envAccessTokenName); accessToken != "" {
+		return accessToken, nil
+	}
 	accessToken, err := GetAuthField(ACCESS_TOKEN)
 	if err != nil {
 		return "", fmt.Errorf("get %s: %w", ACCESS_TOKEN, err)

internal/pkg/auth/auth_test.go

@@ -335,3 +335,68 @@ func TestInitKeyFlow(t *testing.T) {
 		})
 	}
 }
+
+func TestGetAccessToken_EnvVar(t *testing.T) {
+	const envValue = "token-from-env"
+	const storedValue = "stored-token"
+
+	tests := []struct {
+		description   string
+		envToken      string
+		storedToken   string
+		expectedToken string
+		isValid       bool
+	}{
+		{
+			description:   "env var set and no stored token",
+			envToken:      envValue,
+			expectedToken: envValue,
+			isValid:       true,
+		},
+		{
+			description:   "env var set and stored token present",
+			envToken:      envValue,
+			storedToken:   storedValue,
+			expectedToken: envValue,
+			isValid:       true,
+		},
+		{
+			description:   "env var not set and stored token present",
+			storedToken:   storedValue,
+			expectedToken: storedValue,
+			isValid:       true,
+		},
+		{
+			description: "env var not set and no stored token",
+			isValid:     false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.description, func(t *testing.T) {
+			keyring.MockInit()
+			if tt.envToken != "" {
+				t.Setenv(envAccessTokenName, tt.envToken)
+			}
+			if tt.storedToken != "" {
+				if err := SetAuthField(ACCESS_TOKEN, tt.storedToken); err != nil {
+					t.Fatalf("Failed to set stored token: %v", err)
+				}
+				if err := SetAuthFlow(AUTH_FLOW_SERVICE_ACCOUNT_TOKEN); err != nil {
+					t.Fatalf("Failed to set auth flow: %v", err)
+				}
+			}
+
+			got, err := GetAccessToken()
+			if err != nil {
+				if !tt.isValid {
+					return
+				}
+				t.Fatalf("unexpected error: %v", err)
+			}
+			if tt.expectedToken != got {
+				t.Errorf("expected token %q, got %q", tt.expectedToken, got)
+			}
+		})
+	}
+}

internal/pkg/auth/storage.go

@@ -234,6 +234,9 @@ func GetAuthFieldMap(keyMap map[authFieldKey]string) error {
 }
 
 func GetAuthFlow() (AuthFlow, error) {
+	if accessToken := os.Getenv(envAccessTokenName); accessToken != "" {
+		return AUTH_FLOW_SERVICE_ACCOUNT_TOKEN, nil
+	}
 	value, err := GetAuthField(authFlowType)
 	return AuthFlow(value), err
 }

internal/pkg/auth/storage_test.go

@@ -1216,3 +1216,64 @@ func TestAuthorizeDeauthorizeUserProfileAuth(t *testing.T) {
 		})
 	}
 }
+
+func TestGetAuthFlow_EnvVar(t *testing.T) {
+	const envValue = "some-token"
+
+	tests := []struct {
+		description  string
+		envToken     string
+		storedFlow   AuthFlow
+		expectedFlow AuthFlow
+		isValid      bool
+	}{
+		{
+			description:  "env var set and no stored flow",
+			envToken:     envValue,
+			expectedFlow: AUTH_FLOW_SERVICE_ACCOUNT_TOKEN,
+			isValid:      true,
+		},
+		{
+			description:  "env var set and different flow stored",
+			envToken:     envValue,
+			storedFlow:   AUTH_FLOW_USER_TOKEN,
+			expectedFlow: AUTH_FLOW_SERVICE_ACCOUNT_TOKEN,
+			isValid:      true,
+		},
+		{
+			description:  "env var not set and stored flow present",
+			storedFlow:   AUTH_FLOW_SERVICE_ACCOUNT_KEY,
+			expectedFlow: AUTH_FLOW_SERVICE_ACCOUNT_KEY,
+			isValid:      true,
+		},
+		{
+			description: "env var not set and no stored flow",
+			isValid:     false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.description, func(t *testing.T) {
+			keyring.MockInit()
+			if tt.envToken != "" {
+				t.Setenv(envAccessTokenName, tt.envToken)
+			}
+			if tt.storedFlow != "" {
+				if err := SetAuthFlow(tt.storedFlow); err != nil {
+					t.Fatalf("Failed to set stored auth flow: %v", err)
+				}
+			}
+
+			got, err := GetAuthFlow()
+			if err != nil {
+				if !tt.isValid {
+					return
+				}
+				t.Fatalf("unexpected error: %v", err)
+			}
+			if tt.expectedFlow != got {
+				t.Errorf("expected flow %q, got %q", tt.expectedFlow, got)
+			}
+		})
+	}
+}