fix: set user and secret as env variables i/o base64 authentication string

Author: philipph-askui

docs/09_observability_telemetry_tracing.md

@@ -87,7 +87,8 @@ Set the following environment variables to configure tracing. All variables use
 | Environment Variable | Description | Default |
 |---|---|---|
 | `ASKUI__OTEL_ENABLED` | Enable or disable OpenTelemetry tracing | `False` |
-| `ASKUI__OTEL_B64_SECRET` | Base64-encoded secret for OTLP authentication (required when enabled) | — |
+| `ASKUI__OTEL_USER` | user for OTLP authentication (required when enabled) | — |
+| `ASKUI__OTEL_SECRET` | secret for OTLP authentication (required when enabled) | — |
 | `ASKUI__OTEL_ENDPOINT` | OTLP HTTP endpoint URL | — |
 | `ASKUI__OTEL_SERVICE_NAME` | Service name reported in traces | `askui-python-sdk` |
 | `ASKUI__OTEL_SERVICE_VERSION` | Service version reported in traces | Current package version |
@@ -96,14 +97,16 @@ Set the following environment variables to configure tracing. All variables use
 #### Linux & MacOS
 ```bash
 export ASKUI__OTEL_ENABLED=True
-export ASKUI__OTEL_B64_SECRET="your-base64-encoded-secret"
+export ASKUI__OTEL_SECRET="your-user"
+export ASKUI__OTEL_SECRET="your-secret"
 export ASKUI__OTEL_ENDPOINT="https://your-otlp-endpoint/v1/traces"
 ```
 
 #### Windows PowerShell
 ```powershell
 $env:ASKUI__OTEL_ENABLED="True"
-$env:ASKUI__OTEL_B64_SECRET="your-base64-encoded-secret"
+$env:ASKUI__OTEL_SECRET="your-user"
+$env:ASKUI__OTEL_B64_SECRET="your-secret"
 $env:ASKUI__OTEL_ENDPOINT="https://your-otlp-endpoint/v1/traces"
 ```
 

src/askui/telemetry/otel.py

@@ -1,3 +1,4 @@
+import base64
 import logging
 
 from opentelemetry import trace
@@ -23,10 +24,13 @@ class OtelSettings(BaseSettings):
     )
 
     enabled: bool = Field(default=False)
-    b64_secret: SecretStr | None = Field(
+    user: str | None = Field(
         default=None,
-        description="Secret for OTLP authentication, encoded as base64 array."
-        "Required when enabled=True.",
+        description="User for OTLP authentication. Required when enabled=True.",
+    )
+    secret: SecretStr | None = Field(
+        default=None,
+        description="Secret for OTLP authentication. Required when enabled=True.",
     )
     service_name: str = Field(default="askui-python-sdk")
     service_version: str = Field(default=__version__)
@@ -39,7 +43,10 @@ class OtelSettings(BaseSettings):
     @model_validator(mode="after")
     def validate_secret_when_enabled(self) -> Self:
         """Ensure secret is provided when OpenTelemetry is enabled."""
-        if self.enabled and self.b64_secret is None:
+        if self.enabled and self.user is None:
+            error_msg = "User is required when OpenTelemetry is enabled"
+            raise ValueError(error_msg)
+        if self.enabled and self.secret is None:
             error_msg = "Secret is required when OpenTelemetry is enabled"
             raise ValueError(error_msg)
         return self
@@ -68,7 +75,10 @@ def setup_opentelemetry_tracing(settings: OtelSettings) -> None:
             SQLAlchemyInstrumentor,
         )
     except ImportError:
-        logger.exception("Failed to set up OTEL Tracing.")
+        logger.exception("Failed to set up OpenTelemetry Tracing.")
+        return
+
+    if not settings.enabled:
         return
 
     resource = Resource.create(
@@ -80,9 +90,12 @@ def setup_opentelemetry_tracing(settings: OtelSettings) -> None:
     )
     provider = TracerProvider(resource=resource)
 
+    base: str = settings.user + ":" + settings.secret.get_secret_value()  # type: ignore
+    encoded = base64.b64encode(base.encode("utf-8")).decode("utf-8")
+
     otlp_exporter = OTLPSpanExporter(
         endpoint=settings.endpoint,
-        headers={"authorization": f"Basic {settings.b64_secret.get_secret_value()}"},  # type: ignore[union-attr]
+        headers={"authorization": f"Basic {encoded}"},
     )
 
     span_processor = BatchSpanProcessor(otlp_exporter)