From c55df1e39aadf2cf58b33d795d304c2543cf5ef9 Mon Sep 17 00:00:00 2001
From: victorbjorkgren <victor.bjorkgren@piktiv.se>
Date: Tue, 18 Nov 2025 12:06:30 +0100
Subject: [PATCH] fix: Fixing bearer token attachment that broke in last merge
 conflict

---
 api/server/services/Endpoints/openAI/initialize.js | 11 ++++++++++-
 packages/api/src/endpoints/openai/initialize.ts    |  2 +-
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/api/server/services/Endpoints/openAI/initialize.js b/api/server/services/Endpoints/openAI/initialize.js
index aaf65d79d8..3aa2ef5cce 100644
--- a/api/server/services/Endpoints/openAI/initialize.js
+++ b/api/server/services/Endpoints/openAI/initialize.js
@@ -101,7 +101,16 @@ const initializeClient = async ({
     clientOptions.dropParams = azureConfig.groupMap[groupName].dropParams;
     clientOptions.forcePrompt = azureConfig.groupMap[groupName].forcePrompt;
 
-    apiKey = azureOptions.azureOpenAIApiKey;
+    if (shouldUseEntraId()) {
+      apiKey = 'entra-id-placeholder';
+      clientOptions.headers = {
+        ...clientOptions.headers,
+        Authorization: `Bearer ${await getEntraIdAccessToken()}`,
+      };
+    } else {
+      apiKey = azureOptions.azureOpenAIApiKey;
+    }
+
     clientOptions.azure = !serverless && azureOptions;
     if (serverless === true) {
       clientOptions.defaultQuery = azureOptions.azureOpenAIApiVersion
diff --git a/packages/api/src/endpoints/openai/initialize.ts b/packages/api/src/endpoints/openai/initialize.ts
index d795ba5d78..d2ba469fdf 100644
--- a/packages/api/src/endpoints/openai/initialize.ts
+++ b/packages/api/src/endpoints/openai/initialize.ts
@@ -98,7 +98,7 @@ export const initializeOpenAI = async ({
       clientOptions.dropParams = groupMap[groupName]?.dropParams;
     }
 
-    apiKey = azureOptions.azureOpenAIApiKey;
+    apiKey = shouldUseEntraId() ? 'entra-id-placeholder' : azureOptions.azureOpenAIApiKey;
     clientOptions.azure = !serverless ? azureOptions : undefined;
 
     if (serverless === true) {