fix(openai): support Azure AD auth with OpenAI 3.8

Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

Author: hntrl

libs/partners/openai/langchain_openai/chat_models/azure.py

@@ -683,6 +683,8 @@ def validate_environment(self) -> Self:
             },
             "default_query": self.default_query,
         }
+        if self.azure_ad_token or self.azure_ad_token_provider:
+            client_params["api_key"] = None
         if self.max_retries is not None:
             client_params["max_retries"] = self.max_retries
 

libs/partners/openai/langchain_openai/data/_profiles.py

@@ -1170,6 +1170,36 @@
         ],
         "reasoning_effort_default": "medium",
     },
+    "gpt-6-astra": {
+        "image_url_inputs": True,
+        "pdf_inputs": True,
+        "pdf_tool_message": True,
+        "image_tool_message": True,
+        "tool_choice": True,
+        "tool_call_streaming": True,
+        "name": "GPT-6 Astra",
+        "release_date": "2026-09-03",
+        "last_updated": "2026-09-03",
+        "open_weights": False,
+        "max_input_tokens": 1050000,
+        "max_output_tokens": 128000,
+        "text_inputs": True,
+        "image_inputs": True,
+        "text_outputs": True,
+        "reasoning_output": True,
+        "tool_calling": True,
+        "structured_output": True,
+        "attachment": True,
+        "temperature": False,
+        "reasoning_effort_levels": [
+            "low",
+            "medium",
+            "high",
+            "xhigh",
+            "max",
+        ],
+        "reasoning_effort_default": "medium",
+    },
     "gpt-image-1": {
         "name": "gpt-image-1",
         "status": "deprecated",

libs/partners/openai/langchain_openai/data/profile_augmentations.toml

@@ -114,3 +114,21 @@ reasoning_effort_default = "medium"
 [overrides."gpt-5.6-terra"]
 reasoning_effort_levels = ["none", "low", "medium", "high", "xhigh", "max"]
 reasoning_effort_default = "medium"
+
+[overrides."gpt-6-astra"]
+name = "GPT-6 Astra"
+release_date = "2026-09-03"
+last_updated = "2026-09-03"
+open_weights = false
+max_input_tokens = 1050000
+max_output_tokens = 128000
+text_inputs = true
+image_inputs = true
+text_outputs = true
+reasoning_output = true
+tool_calling = true
+structured_output = true
+attachment = true
+temperature = false
+reasoning_effort_levels = ["low", "medium", "high", "xhigh", "max"]
+reasoning_effort_default = "medium"

libs/partners/openai/langchain_openai/embeddings/azure.py

@@ -205,6 +205,8 @@ def validate_environment(self) -> Self:
             },
             "default_query": self.default_query,
         }
+        if self.azure_ad_token or self.azure_ad_token_provider:
+            client_params["api_key"] = None
         if not self.client:
             sync_specific: dict = {"http_client": self.http_client}
             self.client = openai.AzureOpenAI(

libs/partners/openai/langchain_openai/llms/azure.py

@@ -181,6 +181,8 @@ def validate_environment(self) -> Self:
             },
             "default_query": self.default_query,
         }
+        if self.azure_ad_token or self.azure_ad_token_provider:
+            client_params["api_key"] = None
         if not self.client:
             sync_specific = {"http_client": self.http_client}
             self.client = openai.AzureOpenAI(

libs/partners/openai/pyproject.toml

@@ -25,7 +25,7 @@ requires-python = ">=3.10.0,<4.0.0"
 dependencies = [
     "langchain-core>=1.6.0,<2.0.0",
     "certifi>=2024.6.2",
-    "openai>=2.45.0,<4.0.0",
+    "openai>=3.8.0,<4.0.0",
     "tiktoken>=0.7.0,<1.0.0",
 ]
 

libs/partners/openai/tests/unit_tests/chat_models/test_azure.py

@@ -15,6 +15,7 @@
 AZURE_PROFILE_TEST_MODEL = "gpt-5.5"
 AZURE_PROFILE_TEST_MODEL_NAME = "GPT-5.5"
 AZURE_PROFILE_TEST_MAX_INPUT_TOKENS = 1_050_000
+AZURE_AD_TOKEN = "token"  # noqa: S105
 
 
 def test_initialize_azure_openai() -> None:
@@ -29,6 +30,17 @@ def test_initialize_azure_openai() -> None:
     assert llm.azure_endpoint == "my-base-url"
 
 
+def test_azure_ad_token_takes_precedence_over_api_key() -> None:
+    llm = AzureChatOpenAI(
+        api_key="api_key",
+        azure_ad_token=AZURE_AD_TOKEN,
+        azure_endpoint="https://endpoint.com",
+        api_version="2023-05-15",
+    )
+
+    assert llm.root_client._azure_ad_token == AZURE_AD_TOKEN
+
+
 def test_initialize_more() -> None:
     llm = AzureChatOpenAI(  # type: ignore[call-arg]
         api_key="xyz",  # type: ignore[arg-type]

libs/partners/openai/tests/unit_tests/chat_models/test_azure_standard.py

@@ -31,7 +31,6 @@ def test_bind_tool_pydantic(
     def init_from_env_params(self) -> tuple[dict, dict, dict]:
         return (
             {
-                "AZURE_OPENAI_API_KEY": "api_key",
                 "AZURE_OPENAI_ENDPOINT": "https://endpoint.com",
                 "AZURE_OPENAI_AD_TOKEN": "token",
                 "OPENAI_ORG_ID": "org_id",
@@ -40,7 +39,6 @@ def init_from_env_params(self) -> tuple[dict, dict, dict]:
             },
             {},
             {
-                "openai_api_key": "api_key",
                 "azure_endpoint": "https://endpoint.com",
                 "azure_ad_token": "token",
                 "openai_organization": "org_id",

libs/partners/openai/tests/unit_tests/embeddings/test_azure.py

@@ -0,0 +1,14 @@
+from langchain_openai import AzureOpenAIEmbeddings
+
+AZURE_AD_TOKEN = "token"  # noqa: S105
+
+
+def test_azure_ad_token_takes_precedence_over_api_key() -> None:
+    embeddings = AzureOpenAIEmbeddings(
+        api_key="api_key",
+        azure_ad_token=AZURE_AD_TOKEN,
+        azure_endpoint="https://endpoint.com",
+        api_version="2023-05-15",
+    )
+
+    assert embeddings.client._client._azure_ad_token == AZURE_AD_TOKEN

libs/partners/openai/tests/unit_tests/embeddings/test_azure_standard.py

@@ -17,7 +17,6 @@ def embedding_model_params(self) -> dict:
     def init_from_env_params(self) -> tuple[dict, dict, dict]:
         return (
             {
-                "AZURE_OPENAI_API_KEY": "api_key",
                 "AZURE_OPENAI_ENDPOINT": "https://endpoint.com",
                 "AZURE_OPENAI_AD_TOKEN": "token",
                 "OPENAI_ORG_ID": "org_id",
@@ -26,7 +25,6 @@ def init_from_env_params(self) -> tuple[dict, dict, dict]:
             },
             {},
             {
-                "openai_api_key": "api_key",
                 "azure_endpoint": "https://endpoint.com",
                 "azure_ad_token": "token",
                 "openai_organization": "org_id",