feat(api): add bearer token auth

Author: stainless-app[bot]

.stats.yml

@@ -1,3 +1,3 @@
 configured_endpoints: 65
 openapi_spec_hash: eeb8ebc5600523bdfad046381a929572
-config_hash: 63e520502003839482d0dbeb82132064
+config_hash: 14b2643a0ec60cf326dfed00939644ff

src/codex/_client.py

@@ -63,6 +63,7 @@ class Codex(SyncAPIClient):
     with_streaming_response: CodexWithStreamedResponse
 
     # client options
+    auth_token: str | None
     api_key: str | None
     access_key: str | None
 
@@ -71,6 +72,7 @@ class Codex(SyncAPIClient):
     def __init__(
         self,
         *,
+        auth_token: str | None = None,
         api_key: str | None = None,
         access_key: str | None = None,
         environment: Literal["production", "staging", "local"] | NotGiven = NOT_GIVEN,
@@ -94,6 +96,8 @@ def __init__(
         _strict_response_validation: bool = False,
     ) -> None:
         """Construct a new synchronous Codex client instance."""
+        self.auth_token = auth_token
+
         self.api_key = api_key
 
         self.access_key = access_key
@@ -151,7 +155,14 @@ def qs(self) -> Querystring:
     @property
     @override
     def auth_headers(self) -> dict[str, str]:
-        return {**self._authenticated_api_key, **self._public_access_key}
+        return {**self._http_bearer, **self._authenticated_api_key, **self._public_access_key}
+
+    @property
+    def _http_bearer(self) -> dict[str, str]:
+        auth_token = self.auth_token
+        if auth_token is None:
+            return {}
+        return {"Authorization": f"Bearer {auth_token}"}
 
     @property
     def _authenticated_api_key(self) -> dict[str, str]:
@@ -178,6 +189,11 @@ def default_headers(self) -> dict[str, str | Omit]:
 
     @override
     def _validate_headers(self, headers: Headers, custom_headers: Headers) -> None:
+        if self.auth_token and headers.get("Authorization"):
+            return
+        if isinstance(custom_headers.get("Authorization"), Omit):
+            return
+
         if self.api_key and headers.get("X-API-Key"):
             return
         if isinstance(custom_headers.get("X-API-Key"), Omit):
@@ -189,12 +205,13 @@ def _validate_headers(self, headers: Headers, custom_headers: Headers) -> None:
             return
 
         raise TypeError(
-            '"Could not resolve authentication method. Expected either api_key or access_key to be set. Or for one of the `X-API-Key` or `X-Access-Key` headers to be explicitly omitted"'
+            '"Could not resolve authentication method. Expected one of auth_token, api_key or access_key to be set. Or for one of the `Authorization`, `X-API-Key` or `X-Access-Key` headers to be explicitly omitted"'
         )
 
     def copy(
         self,
         *,
+        auth_token: str | None = None,
         api_key: str | None = None,
         access_key: str | None = None,
         environment: Literal["production", "staging", "local"] | None = None,
@@ -231,6 +248,7 @@ def copy(
 
         http_client = http_client or self._client
         return self.__class__(
+            auth_token=auth_token or self.auth_token,
             api_key=api_key or self.api_key,
             access_key=access_key or self.access_key,
             base_url=base_url or self.base_url,
@@ -291,6 +309,7 @@ class AsyncCodex(AsyncAPIClient):
     with_streaming_response: AsyncCodexWithStreamedResponse
 
     # client options
+    auth_token: str | None
     api_key: str | None
     access_key: str | None
 
@@ -299,6 +318,7 @@ class AsyncCodex(AsyncAPIClient):
     def __init__(
         self,
         *,
+        auth_token: str | None = None,
         api_key: str | None = None,
         access_key: str | None = None,
         environment: Literal["production", "staging", "local"] | NotGiven = NOT_GIVEN,
@@ -322,6 +342,8 @@ def __init__(
         _strict_response_validation: bool = False,
     ) -> None:
         """Construct a new async AsyncCodex client instance."""
+        self.auth_token = auth_token
+
         self.api_key = api_key
 
         self.access_key = access_key
@@ -379,7 +401,14 @@ def qs(self) -> Querystring:
     @property
     @override
     def auth_headers(self) -> dict[str, str]:
-        return {**self._authenticated_api_key, **self._public_access_key}
+        return {**self._http_bearer, **self._authenticated_api_key, **self._public_access_key}
+
+    @property
+    def _http_bearer(self) -> dict[str, str]:
+        auth_token = self.auth_token
+        if auth_token is None:
+            return {}
+        return {"Authorization": f"Bearer {auth_token}"}
 
     @property
     def _authenticated_api_key(self) -> dict[str, str]:
@@ -406,6 +435,11 @@ def default_headers(self) -> dict[str, str | Omit]:
 
     @override
     def _validate_headers(self, headers: Headers, custom_headers: Headers) -> None:
+        if self.auth_token and headers.get("Authorization"):
+            return
+        if isinstance(custom_headers.get("Authorization"), Omit):
+            return
+
         if self.api_key and headers.get("X-API-Key"):
             return
         if isinstance(custom_headers.get("X-API-Key"), Omit):
@@ -417,12 +451,13 @@ def _validate_headers(self, headers: Headers, custom_headers: Headers) -> None:
             return
 
         raise TypeError(
-            '"Could not resolve authentication method. Expected either api_key or access_key to be set. Or for one of the `X-API-Key` or `X-Access-Key` headers to be explicitly omitted"'
+            '"Could not resolve authentication method. Expected one of auth_token, api_key or access_key to be set. Or for one of the `Authorization`, `X-API-Key` or `X-Access-Key` headers to be explicitly omitted"'
         )
 
     def copy(
         self,
         *,
+        auth_token: str | None = None,
         api_key: str | None = None,
         access_key: str | None = None,
         environment: Literal["production", "staging", "local"] | None = None,
@@ -459,6 +494,7 @@ def copy(
 
         http_client = http_client or self._client
         return self.__class__(
+            auth_token=auth_token or self.auth_token,
             api_key=api_key or self.api_key,
             access_key=access_key or self.access_key,
             base_url=base_url or self.base_url,