feat(auth): Add JSON object context support for Conditional Data Access

- Add typed getContext() (String), getContextAsObject(), getContextAsMap()
  to Credentials; @SuppressWarnings scoped to Credentials where the
  invariant is guaranteed by the typed setContext overloads
- Remove unchecked cast and @SuppressWarnings from Utils.generateBearerToken
  by using the new typed accessors
- Assert getContextAsObject/getContextAsMap behaviour in CredentialsTests

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: samsternberg

src/main/java/com/skyflow/config/Credentials.java

@@ -33,10 +33,19 @@ public void setRoles(ArrayList<String> roles) {
         this.roles = roles;
     }
 
-    public Object getContext() {
+    public String getContext() {
+        return context instanceof String ? (String) context : null;
+    }
+
+    public Object getContextAsObject() {
         return context;
     }
 
+    @SuppressWarnings("unchecked")
+    public Map<String, Object> getContextAsMap() {
+        return context instanceof Map ? (Map<String, Object>) context : null;
+    }
+
     public void setContext(String context) {
         this.context = context;
     }

src/main/java/com/skyflow/utils/Utils.java

@@ -47,28 +47,27 @@ public static String getVaultURL(String clusterId, Env env) {
         return sb.toString();
     }
 
-    @SuppressWarnings("unchecked")
     public static String generateBearerToken(Credentials credentials) throws SkyflowException {
         if (credentials.getPath() != null) {
             BearerToken.BearerTokenBuilder builder = BearerToken.builder()
                     .setCredentials(new File(credentials.getPath()))
                     .setRoles(credentials.getRoles());
-            Object ctx = credentials.getContext();
-            if (ctx instanceof String) {
-                builder.setCtx((String) ctx);
-            } else if (ctx instanceof Map) {
-                builder.setCtx((Map<String, Object>) ctx);
+            Map<String, Object> ctxMap = credentials.getContextAsMap();
+            if (ctxMap != null) {
+                builder.setCtx(ctxMap);
+            } else {
+                builder.setCtx(credentials.getContext());
             }
             return builder.build().getBearerToken();
         } else if (credentials.getCredentialsString() != null) {
             BearerToken.BearerTokenBuilder builder = BearerToken.builder()
                     .setCredentials(credentials.getCredentialsString())
                     .setRoles(credentials.getRoles());
-            Object ctx = credentials.getContext();
-            if (ctx instanceof String) {
-                builder.setCtx((String) ctx);
-            } else if (ctx instanceof Map) {
-                builder.setCtx((Map<String, Object>) ctx);
+            Map<String, Object> ctxMap = credentials.getContextAsMap();
+            if (ctxMap != null) {
+                builder.setCtx(ctxMap);
+            } else {
+                builder.setCtx(credentials.getContext());
             }
             return builder.build().getBearerToken();
         } else {

src/test/java/com/skyflow/config/CredentialsTests.java

@@ -281,6 +281,9 @@ public void testValidMapContextInCredentials() {
             ctxMap.put("user_id", "user_12345");
             credentials.setContext(ctxMap);
             Validations.validateCredentials(credentials);
+            Assert.assertNull(credentials.getContext());
+            Assert.assertEquals(ctxMap, credentials.getContextAsObject());
+            Assert.assertEquals(ctxMap, credentials.getContextAsMap());
         } catch (SkyflowException e) {
             Assert.fail(INVALID_EXCEPTION_THROWN);
         }