From 99724b5de1d9aeadce1140aaffe16ec1fe5982e1 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Wed, 29 Jul 2026 17:09:37 +0000
Subject: [PATCH] docs: document optional-auth config flag for Python and
 TypeScript SDKs

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 fern/products/sdks/generators/python/configuration.mdx     | 6 ++++++
 fern/products/sdks/generators/typescript/configuration.mdx | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/fern/products/sdks/generators/python/configuration.mdx b/fern/products/sdks/generators/python/configuration.mdx
index 47036fd155..ccc756f843 100644
--- a/fern/products/sdks/generators/python/configuration.mdx
+++ b/fern/products/sdks/generators/python/configuration.mdx
@@ -184,6 +184,12 @@ When enabled, the generated SDK omits the `X-Fern-Language`, `X-Fern-SDK-Name`,
 When enabled, the generated SDK sends a single structured `User-Agent` header of the form `{sdkName}/{version} ({os}; {arch}) {runtime}/{runtimeVersion}` (for example, `fern_examples/0.0.1 (linux; x86_64) Python/3.11.0`), carrying SDK, operating system, architecture, and runtime information in place of the default `User-Agent` and discrete platform headers. If `omit_fern_headers` is enabled, no `User-Agent` or platform headers are sent and this option has no effect.
 </ParamField>
 
+<ParamField path="optional_auth" type="bool" default="false" required={false} toc={true}>
+When enabled, client auth parameters (bearer token, basic auth username and password, header auth) remain optional even when the API spec mandates auth on every endpoint, and requests are sent without an auth header when no credential is provided. By default, the client raises an error when a mandatory credential is missing. Also accepted as `optional-auth` or `optionalAuth`.
+
+Enable this when callers authenticate through a mechanism other than the API's own scheme, such as cloud provider credentials, and would otherwise have to pass a placeholder value.
+</ParamField>
+
 <ParamField path="pyproject_python_version" type="string" default="^3.10" required={false} toc={true}>
   <Warning>This changes your declared python dependency, which is not meant to be done often if at all. This is a last resort if any dependencies force you to change your version requirements.</Warning>
 </ParamField>
diff --git a/fern/products/sdks/generators/typescript/configuration.mdx b/fern/products/sdks/generators/typescript/configuration.mdx
index f9694f6160..7dabcfd1ce 100644
--- a/fern/products/sdks/generators/typescript/configuration.mdx
+++ b/fern/products/sdks/generators/typescript/configuration.mdx
@@ -409,6 +409,12 @@ When enabled, the generated SDK omits the `X-Fern-Language`, `X-Fern-SDK-Name`,
 When enabled, the generated SDK sends a single structured `User-Agent` header of the form `{sdkName}/{version} ({os}; {arch}) {runtime}/{runtimeVersion}` (for example, `my-sdk/0.0.1 (linux; x86_64) Node/20.11.0`), carrying SDK, operating system, architecture, and runtime information in place of the default `User-Agent` and discrete platform headers. If `omitFernHeaders` is enabled, no `User-Agent` or platform headers are sent and this option has no effect.
 </ParamField>
 
+<ParamField path="optional-auth" type="boolean" default="false" toc={true}>
+When enabled, client auth parameters (bearer token, basic auth credentials, header auth) remain optional even when the API spec mandates auth on every endpoint, and requests are sent without an auth header when no credential is provided. By default, the client throws when a mandatory credential is missing.
+
+Enable this when callers authenticate through a mechanism other than the API's own scheme, such as cloud provider credentials, and would otherwise have to pass a placeholder value.
+</ParamField>
+
 <ParamField path="outputSourceFiles" type="boolean" default="true" toc={true}>
   Controls the output format of generated files:
   - **When `true` (default)**: Outputs raw TypeScript `.ts` files