feat: add interactive OAuth authentication to dev server

Implements PKCE-based OAuth flow matching the Python SDK's
`uipath auth` CLI command. A temporary callback server receives
the token from the browser, resolves tenants, and writes
credentials to .env and os.environ. Includes session persistence
across restarts, automatic token expiry detection with re-auth
support, and a configurable flag to disable auth in deployments.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: cristipufu

Dockerfile

@@ -9,5 +9,6 @@ RUN chmod +x start.sh
 
 ENV UIPATH_DEV_SERVER_PORT=80
 ENV UIPATH_DEV_SERVER_HOST=0.0.0.0
+ENV UIPATH_AUTH_ENABLED=false
 
 CMD ["/bin/sh", "/app/start.sh"]

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "uipath-dev"
-version = "0.0.56"
+version = "0.0.57"
 description = "UiPath Developer Console"
 readme = { file = "README.md", content-type = "text/markdown" }
 requires-python = ">=3.11"

src/uipath/dev/server/app.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import logging
+import os
 from pathlib import Path
 
 from fastapi import FastAPI
@@ -129,13 +130,31 @@ async def _favicon_svg_route():
     # Store server reference on app state for route access
     app.state.server = server
 
+    auth_enabled = os.environ.get("UIPATH_AUTH_ENABLED", "true").lower() not in (
+        "false",
+        "0",
+        "no",
+    )
+
+    # Config endpoint — tells the frontend which features are available
+    @app.get("/api/config", include_in_schema=False)
+    async def _config():
+        return {"auth_enabled": auth_enabled}
+
     # Register routes
     from uipath.dev.server.routes.entrypoints import router as entrypoints_router
     from uipath.dev.server.routes.graph import router as graph_router
     from uipath.dev.server.routes.reload import router as reload_router
     from uipath.dev.server.routes.runs import router as runs_router
     from uipath.dev.server.ws.handler import router as ws_router
 
+    if auth_enabled:
+        from uipath.dev.server.auth import restore_session
+        from uipath.dev.server.routes.auth import router as auth_router
+
+        app.include_router(auth_router, prefix="/api")
+        restore_session()
+
     app.include_router(entrypoints_router, prefix="/api")
     app.include_router(runs_router, prefix="/api")
     app.include_router(graph_router, prefix="/api")