From 2ebf89250fadb9abecbc78d65581a04c8ba6f3c9 Mon Sep 17 00:00:00 2001
From: Ricardo Cataldi <rcataldi@microsoft.com>
Date: Thu, 21 May 2026 10:26:20 -0300
Subject: [PATCH] Enable dev pilot auth headers

---
 .../workflows/azure-static-web-apps-polite-wave-029b18f0f.yml | 1 +
 frontend/utils/api.ts                                         | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/azure-static-web-apps-polite-wave-029b18f0f.yml b/.github/workflows/azure-static-web-apps-polite-wave-029b18f0f.yml
index beb7dd8..34ae2e2 100644
--- a/.github/workflows/azure-static-web-apps-polite-wave-029b18f0f.yml
+++ b/.github/workflows/azure-static-web-apps-polite-wave-029b18f0f.yml
@@ -280,6 +280,7 @@ jobs:
         uses: Azure/static-web-apps-deploy@v1
         env:
           NEXT_PUBLIC_APIM_BASE_URL: ${{ needs.resolve-azure-endpoints.outputs.apim_base_url }}
+          NEXT_PUBLIC_PILOT_AUTH_HEADERS_ENABLED: "true"
         with:
           azure_static_web_apps_api_token: ${{ steps.swa_token.outputs.api_token }}
           repo_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/frontend/utils/api.ts b/frontend/utils/api.ts
index 1a6eb00..809b9c2 100644
--- a/frontend/utils/api.ts
+++ b/frontend/utils/api.ts
@@ -23,6 +23,8 @@ const LOCAL_DEVELOPMENT_HEADERS = {
   "X-Feature-Flags": "workspace-shell,workspace-snapshots,learner-record-preview",
 } as const;
 
+const PILOT_AUTH_HEADERS_ENABLED = process.env.NEXT_PUBLIC_PILOT_AUTH_HEADERS_ENABLED === "true";
+
 const LOCAL_HOST_PATTERN = /^(localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\]|::1)$/i;
 
 const normalizeBaseURL = (value: string | undefined): string | undefined => {
@@ -120,7 +122,7 @@ const createClient = (
       }
     }
 
-    if (isLocalLikeUrl(config.baseURL) || isLocalLikeUrl(config.url)) {
+    if (PILOT_AUTH_HEADERS_ENABLED || isLocalLikeUrl(config.baseURL) || isLocalLikeUrl(config.url)) {
       applyLegacyLocalHeaders(config);
     }