feat(auth): add support for custom urls

Author: ionmincu

src/uipath/_cli/_auth/_oidc_utils.py

@@ -65,5 +65,8 @@ def get_auth_url(domain: str) -> tuple[str, str, str]:
     }
 
     query_string = urlencode(query_params)
-    url = f"https://{domain}.uipath.com/identity_/connect/authorize?{query_string}"
+    if domain.startswith("http"):
+        url = f"{domain}/identity_/connect/authorize?{query_string}"
+    else:
+        url = f"https://{domain}.uipath.com/identity_/connect/authorize?{query_string}"
     return url, code_verifier, state

src/uipath/_cli/_auth/_portal_service.py

@@ -65,7 +65,10 @@ def get_tenants_and_organizations(self) -> TenantsAndOrganizationInfoResponse:
         if self._client is None:
             raise RuntimeError("HTTP client is not initialized")
 
-        url = f"https://{self.domain}.uipath.com/{self.prt_id}/portal_/api/filtering/leftnav/tenantsAndOrganizationInfo"
+        if self.domain.startswith("http"):
+            url = f"{self.domain}/{self.prt_id}/portal_/api/filtering/leftnav/tenantsAndOrganizationInfo"
+        else:
+            url = f"https://{self.domain}.uipath.com/{self.prt_id}/portal_/api/filtering/leftnav/tenantsAndOrganizationInfo"
         response = self._client.get(
             url, headers={"Authorization": f"Bearer {self.access_token}"}
         )
@@ -213,12 +216,19 @@ def select_tenant(
     account_name = tenants_and_organizations["organization"]["name"]
     console.info(f"Selected tenant: {click.style(tenant_name, fg='cyan')}")
 
+    if domain.startswith("http"):
+        base_url = domain
+    else:
+        base_url = f"https://{domain if domain else 'cloud'}.uipath.com"
+
+    uipath_url = f"{base_url}/{account_name}/{tenant_name}"
+
     update_env_file(
         {
-            "UIPATH_URL": f"https://{domain if domain else 'alpha'}.uipath.com/{account_name}/{tenant_name}",
+            "UIPATH_URL": uipath_url,
             "UIPATH_TENANT_ID": tenants_and_organizations["tenants"][tenant_idx]["id"],
             "UIPATH_ORGANIZATION_ID": tenants_and_organizations["organization"]["id"],
         }
     )
 
-    return f"https://{domain if domain else 'alpha'}.uipath.com/{account_name}/{tenant_name}"
+    return uipath_url

src/uipath/_cli/_auth/index.html

@@ -477,7 +477,12 @@ <h1 class="auth-title" id="main-title">Authenticate CLI</h1>
                 formData.append('client_id', '__PY_REPLACE_CLIENT_ID__');
                 formData.append('code_verifier', codeVerifier);
 
-                const response = await fetch('https://__PY_REPLACE_DOMAIN__.uipath.com/identity_/connect/token', {
+                const domain = '__PY_REPLACE_DOMAIN__';
+                const tokenUrl = domain.startsWith('http')
+                    ? `${domain}/identity_/connect/token`
+                    : `https://${domain}.uipath.com/identity_/connect/token`;
+
+                const response = await fetch(tokenUrl, {
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/x-www-form-urlencoded'

src/uipath/_cli/cli_auth.py

@@ -4,6 +4,7 @@
 import os
 import socket
 import webbrowser
+from urllib.parse import urlparse
 
 import click
 from dotenv import load_dotenv
@@ -91,6 +92,9 @@ def auth(
 ):
     """Authenticate with UiPath Cloud Platform.
 
+    The domain for authentication is determined by the UIPATH_URL environment variable if set.
+    Otherwise, it can be specified with --cloud (default), --staging, or --alpha flags.
+
     Interactive mode (default): Opens browser for OAuth authentication.
     Unattended mode: Use --client-id, --client-secret and --base-url for client credentials flow.
 
@@ -99,6 +103,11 @@ def auth(
     - Set REQUESTS_CA_BUNDLE to specify a custom CA bundle for SSL verification
     - Set UIPATH_DISABLE_SSL_VERIFY to disable SSL verification (not recommended)
     """
+    uipath_url = os.getenv("UIPATH_URL")
+    if uipath_url and domain == "cloud":  # "cloud" is the default
+        parsed_url = urlparse(uipath_url)
+        domain = f"{parsed_url.scheme}://{parsed_url.netloc}"
+
     # Check if client credentials are provided for unattended authentication
     if client_id and client_secret:
         if not base_url: