feat: move auth service to platform by radu-mocanu · Pull Request #1417 · UiPath/uipath-python

radu-mocanu · 2026-03-06T15:11:56Z

Summary

Move auth service from uipath to uipath-platform as a standalone service.

Changes

New AuthService in platform — OAuth2 PKCE flow, token refresh, tenant discovery
New StudioWebService (more methods will be added in a future PR, overwrites resolution, resources creation, project locking etc.)
Keep CLI-only concerns (update_env_file, _find_free_port, http-server) in uipath lib
Renamed CLI's auth class to AuthHandler
Rewrote platform and CLI auth tests
Added mkdocs API docs for AuthService

ToDo:

bump versions

Development Packages

uipath

[project]
dependencies = [
  # Exact version:
  "uipath==2.10.11.dev1014175252",

  # Any version from PR
  "uipath>=2.10.11.dev1014170000,<2.10.11.dev1014180000"
]

[[tool.uv.index]]
name = "testpypi"
url = "https://test.pypi.org/simple/"
publish-url = "https://test.pypi.org/legacy/"
explicit = true

[tool.uv.sources]
uipath = { index = "testpypi" }

uipath-platform

[project]
dependencies = [
  # Exact version:
  "uipath-platform==0.0.18.dev1014175252",

  # Any version from PR
  "uipath-platform>=0.0.18.dev1014170000,<0.0.18.dev1014180000"
]

[[tool.uv.index]]
name = "testpypi"
url = "https://test.pypi.org/simple/"
publish-url = "https://test.pypi.org/legacy/"
explicit = true

[tool.uv.sources]
uipath-platform = { index = "testpypi" }

radugheo · 2026-03-10T13:52:59Z

packages/uipath/src/uipath/_cli/_auth/_auth_service.py


-    def _authenticate_client_credentials(self):
+    async def _authenticate_client_credentials(self):
        assert self._client_id and self._client_secret, (


i think we can remove assert from here and replace it with a check

radugheo · 2026-03-10T13:53:56Z

packages/uipath/src/uipath/_cli/cli_auth.py

+            tenant=tenant,
+            scope=scope,
+        )
+    except ValueError as e:


should we raise an AuthenticationError instead of logging and letting the error pass?

radugheo · 2026-03-10T13:55:52Z

packages/uipath-platform/src/uipath/platform/auth/_errors.py

@@ -0,0 +1,4 @@
+class AuthenticationError(Exception):


should we name it UiPathAuthenticationError for consistency with the runtime erros?

radugheo · 2026-03-10T14:06:02Z

packages/uipath-platform/src/uipath/platform/auth/_auth_service.py

+        if exp is not None and float(exp) > time.time():
+            return token_data
+
+        if not token_data.refresh_token:


nitpick: we could move this check to the beginning of the method to have an early exit mechanism, since if token_data doesn't have a refresh_token, then we don't need to parse it and get its exp time.

radugheo · 2026-03-10T14:10:24Z

packages/uipath-platform/src/uipath/platform/auth/_auth_service.py

+
+        return TokenData.model_validate(response.json())
+
+    async def ensure_valid_token(self, token_data: TokenData) -> TokenData:


nitpick: since this method actually returns the a TokenData object, I think naming it ensure_valid_token might be a bit misleading.
maybe get_valid_token, validate_and_refresh_token or something like this would better communicate what this method does.

radugheo · 2026-03-10T14:14:14Z

packages/uipath-platform/src/uipath/platform/auth/_auth_service.py

+            raw = json.load(f)
+        return AuthConfig(client_id=raw["client_id"], scope=raw["scope"])
+
+    def get_authorization_url(self, redirect_uri: str) -> AuthorizationRequest:


nitpick: we could name this method get_authorization_request since it returns more than just the url

radugheo · 2026-03-10T14:17:52Z

packages/uipath-platform/src/uipath/platform/auth/_oidc_utils.py

+    if version is None:
+        return "auth_config_cloud.json"
+
+    if version.startswith("25.10"):


since we return "auth_config_cloud.json" for any other version besides "25.10", we could simplify this by removing:

if version is None: return "auth_config_cloud.json"

radugheo · 2026-03-10T14:23:09Z

packages/uipath/src/uipath/_cli/_auth/_auth_service.py

+    return redirect_uri, port
+
+
+def update_env_file(env_contents: dict[str, Any]) -> None:


this method has a duplicate in packages\uipath\src\uipath\_utils\_auth.py

radugheo · 2026-03-10T14:23:32Z

packages/uipath-platform/src/uipath/platform/auth/_utils.py

+from ._models import AccessTokenData
+
+
+def parse_access_token(access_token: str) -> AccessTokenData:


this method has a duplicate in packages\uipath\src\uipath\_utils\_auth.py

radu-mocanu force-pushed the feat/move-auth-to-platform branch from 8127534 to ea1ad2e Compare March 6, 2026 15:13

github-actions bot added test:uipath-langchain Triggers tests in the uipath-langchain-python repository test:uipath-llamaindex Triggers tests in the uipath-llamaindex-python repository labels Mar 6, 2026

radu-mocanu self-assigned this Mar 6, 2026

radu-mocanu added test:uipath-langchain Triggers tests in the uipath-langchain-python repository and removed test:uipath-langchain Triggers tests in the uipath-langchain-python repository labels Mar 6, 2026

radu-mocanu force-pushed the feat/move-auth-to-platform branch 2 times, most recently from ff4c74a to 79fbbd9 Compare March 9, 2026 16:11

radu-mocanu added the build:dev Create a dev build from the pr label Mar 10, 2026

feat: move auth service to platform

d500f71

radu-mocanu force-pushed the feat/move-auth-to-platform branch from 79fbbd9 to d500f71 Compare March 10, 2026 13:22

radugheo reviewed Mar 10, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: move auth service to platform#1417

feat: move auth service to platform#1417
radu-mocanu wants to merge 1 commit intomainfrom
feat/move-auth-to-platform

radu-mocanu commented Mar 6, 2026 •

edited by github-actions bot

Loading

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

radugheo Mar 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants


		return TokenData.model_validate(response.json())

		async def ensure_valid_token(self, token_data: TokenData) -> TokenData:

		return redirect_uri, port


		def update_env_file(env_contents: dict[str, Any]) -> None:

		from ._models import AccessTokenData


		def parse_access_token(access_token: str) -> AccessTokenData:

Conversation

radu-mocanu commented Mar 6, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

ToDo:

Development Packages

uipath

uipath-platform

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

radu-mocanu commented Mar 6, 2026 •

edited by github-actions bot

Loading