fix(config): stop auth persistence wiping the offline license

Every SetSpeakeasyAuthInfo call overwrote offline_license_token with
whatever the context carried, so any authentication that produced no
persistable token (platform not issuing tokens, free tier, workspace
mismatch) silently erased a stored or manually configured offline
license — including from non-auth commands via
UseExistingAPIKeyIfAvailable.

Replace the stored token only when authentication produced one; keep it
when the workspace is unchanged; clear it on workspace change so the
previous workspace's license is not carried over. Logout still clears
it.

Author: ThomasRooney

internal/config/config.go

@@ -110,8 +110,14 @@ func SetSpeakeasyAuthInfo(ctx context.Context, info core.SpeakeasyAuthInfo) erro
 	defaultWorkspaceID := vCfg.GetString("speakeasy_workspace_id")
 	keepingSelfDefault := defaultWorkspaceID == "self" && info.WorkspaceID != "self"
 	if !keepingSelfDefault {
-		token, _ := core.GetLicenseTokenFromContext(ctx)
-		vCfg.Set("offline_license_token", string(token))
+		// A stored offline license may be manually configured or come from a
+		// platform that does not issue tokens; only replace it when this
+		// authentication produced one, and drop it when the workspace changes.
+		if token, ok := core.GetLicenseTokenFromContext(ctx); ok {
+			vCfg.Set("offline_license_token", string(token))
+		} else if defaultWorkspaceID != info.WorkspaceID {
+			vCfg.Set("offline_license_token", "")
+		}
 		vCfg.Set("speakeasy_api_key", info.APIKey)
 		vCfg.Set("speakeasy_workspace_id", info.WorkspaceID)
 		vCfg.Set("speakeasy_customer_id", info.CustomerID)

internal/config/config_test.go

@@ -0,0 +1,47 @@
+package config
+
+import (
+	"context"
+	"testing"
+
+	core "github.com/speakeasy-api/speakeasy-core/auth"
+	"github.com/spf13/viper"
+)
+
+func TestSetSpeakeasyAuthInfoOfflineLicensePersistence(t *testing.T) { //nolint:paralleltest
+	originalCfg, originalDir := vCfg, cfgDir
+	t.Cleanup(func() { vCfg, cfgDir = originalCfg, originalDir })
+	cfgDir = t.TempDir()
+	vCfg = viper.New()
+	vCfg.SetConfigName("config")
+	vCfg.SetConfigType("yaml")
+	vCfg.AddConfigPath(cfgDir)
+
+	vCfg.Set("speakeasy_workspace_id", "workspace-a")
+	vCfg.Set("offline_license_token", "stored-token")
+
+	info := core.SpeakeasyAuthInfo{APIKey: "api-key", WorkspaceID: "workspace-a"}
+
+	if err := SetSpeakeasyAuthInfo(context.Background(), info); err != nil {
+		t.Fatalf("set auth info without token: %v", err)
+	}
+	if got := GetOfflineLicenseToken(); got != "stored-token" {
+		t.Fatalf("token-less authentication replaced the stored offline license: %q", got)
+	}
+
+	freshCtx := context.WithValue(context.Background(), core.LicenseTokenKey, []byte("fresh-token"))
+	if err := SetSpeakeasyAuthInfo(freshCtx, info); err != nil {
+		t.Fatalf("set auth info with fresh token: %v", err)
+	}
+	if got := GetOfflineLicenseToken(); got != "fresh-token" {
+		t.Fatalf("fresh license token was not persisted: %q", got)
+	}
+
+	other := core.SpeakeasyAuthInfo{APIKey: "api-key", WorkspaceID: "workspace-b"}
+	if err := SetSpeakeasyAuthInfo(context.Background(), other); err != nil {
+		t.Fatalf("set auth info for other workspace: %v", err)
+	}
+	if got := GetOfflineLicenseToken(); got != "" {
+		t.Fatalf("workspace change kept the previous workspace's offline license: %q", got)
+	}
+}