Add optional credential input port to Azure OpenAI Authenticator

[Copilot]

The Azure OpenAI Authenticator previously only supported credential configuration via settings. This adds an optional credential input port to enable OAuth authentication and integration with the KNIME secret store and credential framework, matching the existing OpenAI Authenticator implementation.

Changes

• Port Object Spec: Extended AzureOpenAIAuthenticationPortObjectSpec to accept and serialize credential_spec parameter, passing it through to parent class
• Authenticator Node: Added optional credential input port with conditional UI behavior—credential settings are hidden when port is connected
• Credential Resolution: Updated _verify_settings() and create_spec() to use credential from port object when available, falling back to credential settings
• Validation: Added schema validation for credential port objects (Bearer-only authentication)

Usage

Users can now authenticate via credential port:

# Traditional approach (still works)
Azure OpenAI Authenticator (configured with workflow credentials)
  → Azure OpenAI LLM Selector

# New approach with credential port
Credentials / Secret Store
  → Azure OpenAI Authenticator (credential settings hidden)
    → Azure OpenAI LLM Selector

The implementation follows the established pattern from OpenAIAuthenticator, ensuring consistent behavior across both authenticator nodes.

Original prompt

Add an optional credential input port to the Azure OpenAI Authenticator, so that it can be used in combination with the secret store and KNIME credential framework. See the OpenAI Authenticator as a reference implementation, which already has gone through this change.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.