Derive default auth audience from login environment

[jordane]

Summary

• keep the production API audience at https://lfx-api.v2.cluster.lfx.dev/
• derive the default login audience from --env when --audience is omitted
• use the matching deployed API endpoints for development and staging
• add tests covering per-environment default audience resolution

Default audiences

• prod: https://lfx-api.v2.cluster.lfx.dev/
• staging: https://lfx-api.staging.v2.cluster.linuxfound.info/
• development: https://lfx-api.dev.v2.cluster.linuxfound.info/

Testing

• make check
• go test ./...

[Copilot]

Pull request overview

Derives the default Auth0 audience from the selected login environment while retaining explicit overrides.

Changes:

• Adds production, staging, and development audience mappings.
• Resolves omitted --audience values from --env.
• Tests valid and invalid environment resolution.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
internal/commands/environment.go	Defines and resolves environment-specific audiences.
internal/commands/auth.go	Applies the selected environment’s default audience during login.
internal/commands/auth_test.go	Covers audience mappings and invalid environments.

Note

Copilot is running an experiment and ran this review at Balanced.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.