[fix]:[IDP-6237]: use NG Manager Secret for workflow execution (#205)

* 0f55a0 [feat]:[IDP-6237]: use NG Manager Secret for workflow execution

Author: harjas27

client/idp.go

@@ -4,9 +4,9 @@ import (
 	"context"
 	"fmt"
 	"log/slog"
-	"strings"
 
 	"github.com/harness/harness-mcp/client/dto"
+	"github.com/harness/harness-mcp/pkg/harness/auth"
 )
 
 const (
@@ -33,7 +33,8 @@ const (
 )
 
 type IDPService struct {
-	Client *Client
+	Client                *Client
+	NgManagerAuthProvider auth.Provider
 }
 
 func (i *IDPService) GetEntity(ctx context.Context, scope dto.Scope, kind string, identifier string) (*dto.EntityResponse, error) {
@@ -309,17 +310,12 @@ func (i *IDPService) ExecuteWorkflow(ctx context.Context, scope dto.Scope, ident
 	params := make(map[string]string)
 	addScope(scope, params)
 
-	_, authHeaderVal, err := i.Client.AuthProvider.GetHeader(ctx)
+	_, authHeaderVal, err := i.NgManagerAuthProvider.GetHeader(ctx)
 	if err != nil {
 		slog.Error("Failed to get auth header", "error", err)
 		return nil, err
 	}
-	token := authHeaderVal
-	parts := strings.Split(authHeaderVal, " ")
-	if len(parts) == 2 {
-		token = parts[1]
-	}
-	inputSet["token"] = token
+	inputSet["token"] = authHeaderVal
 	body := new(dto.ExecuteWorkflowRequest)
 	body.Identifier = identifier
 	body.Values = inputSet

pkg/modules/idp.go

@@ -5,6 +5,7 @@ import (
 
 	"github.com/harness/harness-mcp/client"
 	"github.com/harness/harness-mcp/cmd/harness-mcp-server/config"
+	"github.com/harness/harness-mcp/pkg/harness/auth"
 	"github.com/harness/harness-mcp/pkg/harness/tools"
 	"github.com/harness/harness-mcp/pkg/modules/utils"
 	"github.com/harness/harness-mcp/pkg/toolsets"
@@ -75,8 +76,16 @@ func RegisterInternalDeveloperPortal(config *config.Config, tsg *toolsets.Toolse
 		return err
 	}
 
+	var ngManagerAuthProvider auth.Provider
+	if config.Internal {
+		ngManagerAuthProvider = auth.NewJWTProvider(config.NgManagerSecret, utils.ServiceIdentity, &utils.DefaultJWTLifetime)
+	} else {
+		ngManagerAuthProvider = auth.NewAPIKeyProvider(config.APIKey)
+	}
+
 	idpClient := &client.IDPService{
-		Client: c,
+		Client:                c,
+		NgManagerAuthProvider: ngManagerAuthProvider,
 	}
 
 	// Get the GenAI client using the shared method