[cli] Add --dashboard-url and --api-base-url flags to apoxy auth

Allow authentication against custom environments (e.g., staging) by
adding flags to override the dashboard and API URLs. The API base URL
is stored in the project config for subsequent commands.

Also fix a bug where an empty kubernetesConfig: {} in the config would
incorrectly trigger Kubernetes auth mode instead of using API key auth.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: dilyevsky

config/auth.go

@@ -28,14 +28,29 @@ type authContext struct {
 }
 
 type Authenticator struct {
-	cfg    *configv1alpha1.Config
-	authCh chan authContext
+	cfg        *configv1alpha1.Config
+	authCh     chan authContext
+	apiBaseURL string // optional override
 }
 
-func NewAuthenticator(cfg *configv1alpha1.Config) *Authenticator {
-	return &Authenticator{
+// AuthenticatorOption is a functional option for configuring the Authenticator.
+type AuthenticatorOption func(*Authenticator)
+
+// WithAPIBaseURL sets the API base URL for the authenticated project.
+func WithAPIBaseURL(url string) AuthenticatorOption {
+	return func(a *Authenticator) {
+		a.apiBaseURL = url
+	}
+}
+
+func NewAuthenticator(cfg *configv1alpha1.Config, opts ...AuthenticatorOption) *Authenticator {
+	a := &Authenticator{
 		cfg: cfg,
 	}
+	for _, opt := range opts {
+		opt(a)
+	}
+	return a
 }
 
 func (a *Authenticator) Check() (bool, error) {
@@ -159,15 +174,22 @@ func (a *Authenticator) Authenticate() {
 			if p.ID == a.cfg.CurrentProject {
 				a.cfg.Projects[i].APIKey = key.APIKey
 				a.cfg.Projects[i].ID = key.ProjectID
+				if a.apiBaseURL != "" {
+					a.cfg.Projects[i].APIBaseURL = a.apiBaseURL
+				}
 				projectUpdated = true
 				break
 			}
 		}
 		if !projectUpdated {
-			a.cfg.Projects = append(a.cfg.Projects, configv1alpha1.Project{
+			newProject := configv1alpha1.Project{
 				ID:     key.ProjectID,
 				APIKey: key.APIKey,
-			})
+			}
+			if a.apiBaseURL != "" {
+				newProject.APIBaseURL = a.apiBaseURL
+			}
+			a.cfg.Projects = append(a.cfg.Projects, newProject)
 			log.Debugf("Appended new project. ProjectID=%q", key.ProjectID)
 		}
 		a.cfg.CurrentProject = key.ProjectID

config/config.go

@@ -250,7 +250,7 @@ func DefaultAPIClient() (*rest.APIClient, error) {
 	}
 	project := cfg.Projects[idx]
 
-	if project.KubernetesConfig != nil {
+	if project.KubernetesConfig != nil && (project.KubernetesConfig.InCluster || project.KubernetesConfig.KubeconfigPath != "" || project.KubernetesConfig.Context != "") {
 		var restConfig *k8srest.Config
 		if project.KubernetesConfig.InCluster {
 			restConfig, err = k8srest.InClusterConfig()

pkg/cmd/auth.go

@@ -9,7 +9,11 @@ import (
 	"github.com/apoxy-dev/apoxy/config"
 )
 
-var checkOnly bool
+var (
+	checkOnly    bool
+	dashboardURL string
+	apiBaseURL   string
+)
 
 // authCmd represents the auth command
 var authCmd = &cobra.Command{
@@ -25,7 +29,17 @@ If your CLI is already authenticated this will return information about your ses
 			return
 		}
 
-		auth := config.NewAuthenticator(cfg)
+		// Override dashboard URL if provided
+		if dashboardURL != "" {
+			cfg.DashboardURL = dashboardURL
+		}
+
+		var opts []config.AuthenticatorOption
+		if apiBaseURL != "" {
+			opts = append(opts, config.WithAPIBaseURL(apiBaseURL))
+		}
+
+		auth := config.NewAuthenticator(cfg, opts...)
 		ok, err := auth.Check()
 
 		if ok && err == nil {
@@ -46,5 +60,7 @@ If your CLI is already authenticated this will return information about your ses
 
 func init() {
 	authCmd.PersistentFlags().BoolVar(&checkOnly, "check", false, "only check the authentication status")
+	authCmd.PersistentFlags().StringVar(&dashboardURL, "dashboard-url", "", "dashboard URL for authentication (default: https://dashboard.apoxy.dev)")
+	authCmd.PersistentFlags().StringVar(&apiBaseURL, "api-base-url", "", "API base URL (default: https://api.apoxy.dev)")
 	RootCmd.AddCommand(authCmd)
 }