Fix identity types (dbos-inc#138)

- Fix `AuthenticatedUser` and `AssumedRole` to use strings: we can
distinguish whether they are set by checking zero values.
- Fix `AuthenticatedRoles` to be a slice of string.
- Fix protocol to marshal `AuthenticatedRoles` to JSON if set.

Author: maxdml

dbos/conductor_protocol.go

@@ -115,9 +115,16 @@ func formatListWorkflowsResponseBody(wf WorkflowStatus) listWorkflowsConductorRe
 	}
 
 	// Copy optional fields
-	output.AuthenticatedUser = wf.AuthenticatedUser
-	output.AssumedRole = wf.AssumedRole
-	output.AuthenticatedRoles = wf.AuthenticatedRoles
+	output.AuthenticatedUser = &wf.AuthenticatedUser
+	output.AssumedRole = &wf.AssumedRole
+	// Convert authenticated roles to JSON string if present
+	if len(wf.AuthenticatedRoles) > 0 {
+		rolesJSON, err := json.Marshal(wf.AuthenticatedRoles)
+		if err == nil {
+			rolesStr := string(rolesJSON)
+			output.AuthenticatedRoles = &rolesStr
+		}
+	}
 
 	// Convert input/output to JSON strings if present
 	if wf.Input != nil {

dbos/workflow.go

@@ -35,9 +35,9 @@ type WorkflowStatus struct {
 	ID                 string             `json:"workflow_uuid"`                 // Unique identifier for the workflow
 	Status             WorkflowStatusType `json:"status"`                        // Current execution status
 	Name               string             `json:"name"`                          // Function name of the workflow
-	AuthenticatedUser  *string            `json:"authenticated_user,omitempty"`  // User who initiated the workflow (if applicable)
-	AssumedRole        *string            `json:"assumed_role,omitempty"`        // Role assumed during execution (if applicable)
-	AuthenticatedRoles *string            `json:"authenticated_roles,omitempty"` // Roles available to the user (if applicable)
+	AuthenticatedUser  string             `json:"authenticated_user,omitempty"`  // User who initiated the workflow (if applicable)
+	AssumedRole        string             `json:"assumed_role,omitempty"`        // Role assumed during execution (if applicable)
+	AuthenticatedRoles []string           `json:"authenticated_roles,omitempty"` // Roles available to the user (if applicable)
 	Output             any                `json:"output,omitempty"`              // Workflow output (available after completion)
 	Error              error              `json:"error,omitempty"`               // Error information (if status is ERROR)
 	ExecutorID         string             `json:"executor_id"`                   // ID of the executor running this workflow