feat: add auth network options

Author: cristipufu

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "uipath"
-version = "2.0.73"
+version = "2.0.74"
 description = "Python SDK and CLI for UiPath Platform, enabling programmatic interaction with automation services, process management, and deployment tools."
 readme = { file = "README.md", content-type = "text/markdown" }
 requires-python = ">=3.10"

src/uipath/_cli/_auth/_client_credentials.py

@@ -13,8 +13,13 @@
 class ClientCredentialsService:
     """Service for client credentials authentication flow."""
 
-    def __init__(self, domain: str):
+    def __init__(
+        self, domain: str, verify_ssl: bool = True, cert: str = None, proxy: str = None
+    ):
         self.domain = domain
+        self.verify_ssl = verify_ssl
+        self.cert = cert
+        self.proxy = proxy
 
     def get_token_url(self) -> str:
         """Get the token URL for the specified domain."""
@@ -91,7 +96,17 @@ def authenticate(
         }
 
         try:
-            with httpx.Client(timeout=30.0) as client:
+            client_kwargs = {"timeout": 30.0}
+
+            if not self.verify_ssl:
+                client_kwargs["verify"] = False
+            elif self.cert:
+                client_kwargs["verify"] = self.cert
+
+            if self.proxy:
+                client_kwargs["proxies"] = self.proxy
+
+            with httpx.Client(**client_kwargs) as client:
                 response = client.post(token_url, data=data)
 
                 match response.status_code:

src/uipath/_cli/_auth/_portal_service.py

@@ -16,7 +16,6 @@
 )
 
 console = ConsoleLogger()
-client = httpx.Client(follow_redirects=True, timeout=30.0)
 
 
 class PortalService:
@@ -27,25 +26,47 @@ class PortalService:
     domain: Optional[str] = None
     selected_tenant: Optional[str] = None
 
+    _client: httpx.Client = None
+
     _tenants_and_organizations: Optional[TenantsAndOrganizationInfoResponse] = None
 
     def __init__(
         self,
         domain: str,
         access_token: Optional[str] = None,
         prt_id: Optional[str] = None,
+        verify_ssl: bool = True,
+        cert: str = None,
+        proxy: str = None,
     ):
         self.domain = domain
         self.access_token = access_token
         self.prt_id = prt_id
 
+        client_kwargs = {"follow_redirects": True, "timeout": 30.0}
+
+        if not verify_ssl:
+            client_kwargs["verify"] = False
+        elif cert:
+            client_kwargs["verify"] = cert
+
+        if proxy:
+            client_kwargs["proxies"] = proxy
+
+        self._client = httpx.Client(**client_kwargs)
+
+    def __del__(self):
+        """Cleanup method to close the HTTP client."""
+        if hasattr(self, "_client") and self._client:
+            self._client.close()
+
     def update_token_data(self, token_data: TokenData):
         self.access_token = token_data["access_token"]
         self.prt_id = get_parsed_token_data(token_data).get("prt_id")
 
     def get_tenants_and_organizations(self) -> TenantsAndOrganizationInfoResponse:
         url = f"https://{self.domain}.uipath.com/{self.prt_id}/portal_/api/filtering/leftnav/tenantsAndOrganizationInfo"
-        response = client.get(
+        response = self._client.get(
             url, headers={"Authorization": f"Bearer {self.access_token}"}
         )
         if response.status_code < 400:
@@ -83,7 +104,7 @@ def post_refresh_token_request(self, refresh_token: str) -> TokenData:
 
         headers = {"Content-Type": "application/x-www-form-urlencoded"}
 
-        response = client.post(url, data=data, headers=headers)
+        response = self._client.post(url, data=data, headers=headers)
         if response.status_code < 400:
             return response.json()
         elif response.status_code == 401:
@@ -148,7 +169,7 @@ def post_auth(self, base_url: str) -> None:
 
         try:
             [try_enable_first_run_response, acquire_license_response] = [
-                client.post(
+                self._client.post(
                     url,
                     headers={"Authorization": f"Bearer {self.access_token}"},
                 )

src/uipath/_cli/cli_auth.py

@@ -80,18 +80,45 @@ def set_port():
     required=False,
     help="Base URL for the UiPath tenant instance (required for client credentials)",
 )
+@click.option(
+    "--no-verify-ssl",
+    "--insecure",
+    is_flag=True,
+    required=False,
+    help="Disable SSL certificate verification (not recommended for production)",
+)
+@click.option(
+    "--cert",
+    required=False,
+    type=click.Path(exists=True),
+    help="Path to custom CA certificate bundle file (for corporate certificates)",
+)
+@click.option(
+    "--proxy",
+    required=False,
+    help="Proxy URL in format: http://proxy:port or https://proxy:port",
+)
 @track
 def auth(
     domain,
     force: None | bool = False,
     client_id: str = None,
     client_secret: str = None,
     base_url: str = None,
+    no_verify_ssl: bool = False,
+    cert: str = None,
+    proxy: str = None,
 ):
     """Authenticate with UiPath Cloud Platform.
 
     Interactive mode (default): Opens browser for OAuth authentication.
     Unattended mode: Use --client-id, --client-secret and --base-url for client credentials flow.
+
+    Network options:
+    - Use --cert to specify custom CA certificates for corporate environments
+    - Use --no-verify-ssl to disable SSL verification (not recommended)
+    - Use --proxy to configure proxy settings (e.g., --proxy http://proxy:8080)
+    - Set HTTP_PROXY/HTTPS_PROXY environment variables for proxy configuration
     """
     # Check if client credentials are provided for unattended authentication
     if client_id and client_secret:
@@ -102,8 +129,9 @@ def auth(
             return
 
         with console.spinner("Authenticating with client credentials ..."):
-            # Create service instance
-            credentials_service = ClientCredentialsService(domain)
+            credentials_service = ClientCredentialsService(
+                domain, verify_ssl=not no_verify_ssl, cert=cert, proxy=proxy
+            )
 
             # If base_url is provided, extract domain from it to override the CLI domain parameter
             if base_url:
@@ -127,7 +155,9 @@ def auth(
 
     # Interactive authentication flow (existing logic)
     with console.spinner("Authenticating with UiPath ..."):
-        portal_service = PortalService(domain)
+        portal_service = PortalService(
+            domain, verify_ssl=not no_verify_ssl, cert=cert, proxy=proxy
+        )
 
         if not force:
             if (