Spaces:

FINAL-Bench
/

leadboard

Running

App Files Files Community

SeaWolf-AI commited on 3 days ago

Commit

52fd4ca

verified ·

1 Parent(s): cbc9da9

Fix the OAuth callback path and stop a failed sign-in from taking the page down

Browse files

The platform registers the callback at /auth/callback; serving it at /auth made the token exchange fail and the exception surfaced as a 500 for the whole space. The callback now answers on the registered path, keeps the old one as an alias, and renders a readable message instead of raising. Also adds resident reference-tool results.

Files changed (2) hide show

app.py +58 -22
data/reference_entries.json +328 -0

app.py CHANGED Viewed

@@ -25,6 +25,7 @@ import os
 import re
 import secrets
 import time
 import urllib.parse
 import urllib.request
@@ -131,9 +132,9 @@ def boards():
 def _load_references():
     """현업 도구를 이 부문 훈련 자료로 재학습해 얻은 성적.
-    기존 모델을 그대로 옮겨 재면 훈련 자료의 차이가 방법의 차이로 읽힌다. 실제로 그렇게
-    나왔었다 - 523 화합물로 학습한 모델이 8,450 화합물로 학습한 무튜닝 기준선에 졌다.
-    그래서 **방법만 가져오고 데이터는 이 부문 것을 쓴다.**
     """
     p = os.path.join(DATA, "reference_entries.json")
     if not os.path.exists(p):
@@ -343,8 +344,8 @@ def api_leaderboard(name: str):
 # ------------------------------------------------------------------ 로그인
 @app.get("/login")
 def login(request: Request):
-    if not OAUTH_ID:
-        raise HTTPException(503, "로그인이 구성되지 않았다")
     nxt = request.query_params.get("next", "/")
     st = base64.urlsafe_b64encode(json.dumps({"n": nxt, "r": secrets.token_hex(8)}).encode()).decode()
     q = urllib.parse.urlencode({
@@ -354,12 +355,32 @@ def login(request: Request):
 def _redirect(request: Request):
-    if SPACE_HOST:
-        return "https://%s/auth" % SPACE_HOST
-    return str(request.base_url).rstrip("/") + "/auth"
-@app.get("/auth")
 def auth(request: Request):
     code = request.query_params.get("code")
     st = request.query_params.get("state") or ""
@@ -370,24 +391,39 @@ def auth(request: Request):
         pass
     if not code:
         return RedirectResponse(nxt)
-    body = urllib.parse.urlencode({
-        "client_id": OAUTH_ID, "client_secret": OAUTH_SECRET,
-        "grant_type": "authorization_code", "code": code,
-        "redirect_uri": _redirect(request)}).encode()
-    with urllib.request.urlopen(urllib.request.Request(
-            OAUTH_ISS + "/oauth/token", data=body,
-            headers={"Content-Type": "application/x-www-form-urlencoded"}), timeout=60) as r:
-        tok = json.loads(r.read())
-    with urllib.request.urlopen(urllib.request.Request(
-            OAUTH_ISS + "/oauth/userinfo",
-            headers={"Authorization": "Bearer " + tok["access_token"]}), timeout=60) as r:
-        ui = json.loads(r.read())
     resp = RedirectResponse(nxt)
     set_session(resp, {"user": ui.get("preferred_username") or ui.get("sub"),
                        "name": ui.get("name", ""), "pic": ui.get("picture", "")})
     return resp
 @app.get("/logout")
 def logout():
     r = RedirectResponse("/")

 import re
 import secrets
 import time
+import urllib.error
 import urllib.parse
 import urllib.request
 def _load_references():
     """현업 도구를 이 부문 훈련 자료로 재학습해 얻은 성적.
+    다른 자료로 학습한 모델을 그대로 옮겨 재면, 훈련 자료의 차이가 방법의 차이로 읽힌다.
+    그래서 **방법만 가져오고 데이터는 이 부문 것을 쓴다.** 그래야 표에 오른 숫자가
+    "이 방법이 이 문제에서 어디까지 가는가"를 뜻한다.
     """
     p = os.path.join(DATA, "reference_entries.json")
     if not os.path.exists(p):
 # ------------------------------------------------------------------ 로그인
 @app.get("/login")
 def login(request: Request):
+    if not (OAUTH_ID and OAUTH_SECRET):
+        return _err_page("이 시험대에 로그인이 아직 구성되지 않았습니다.")
     nxt = request.query_params.get("next", "/")
     st = base64.urlsafe_b64encode(json.dumps({"n": nxt, "r": secrets.token_hex(8)}).encode()).decode()
     q = urllib.parse.urlencode({
 def _redirect(request: Request):
+    """플랫폼이 등록해 주는 콜백 주소는 **/auth/callback** 이다.
+    여기를 /auth 로 두면 토큰 교환에서 redirect_uri 불일치로 거부되고, 그 예외가
+    그대로 500 이 되어 화면 전체가 죽는다. 로그인 한 번 눌렀다가 사이트가 사라진다.
+    """
+    if SPACE_HOST:
+        return "https://%s/auth/callback" % SPACE_HOST
+    return str(request.base_url).rstrip("/") + "/auth/callback"
+def _err_page(msg, detail=""):
+    """로그인이 실패해도 화면은 살아 있어야 한다. 흰 배경에 Internal Server Error 만
+    남으면 이용자는 사이트가 죽은 줄 안다."""
+    return Response(
+        "<!doctype html><html lang=ko><head><meta charset=utf-8>"
+        "<title>로그인 실패</title><style>body{font-family:system-ui,sans-serif;"
+        "max-width:38em;margin:14vh auto;padding:0 24px;line-height:1.7;color:#15171c}"
+        "code{background:#f0f3f7;padding:2px 6px;border-radius:5px;font-size:13px}"
+        "a{color:#1f4fa3}</style></head><body>"
+        "<h2>로그인을 마치지 못했습니다</h2><p>%s</p>%s"
+        "<p><a href='/'>← 시험대로 돌아가기</a></p></body></html>"
+        % (msg, ("<p><code>%s</code></p>" % detail[:300]) if detail else ""),
+        media_type="text/html; charset=utf-8", status_code=200)
+@app.get("/auth/callback")
 def auth(request: Request):
     code = request.query_params.get("code")
     st = request.query_params.get("state") or ""
         pass
     if not code:
         return RedirectResponse(nxt)
+    try:
+        body = urllib.parse.urlencode({
+            "client_id": OAUTH_ID, "client_secret": OAUTH_SECRET,
+            "grant_type": "authorization_code", "code": code,
+            "redirect_uri": _redirect(request)}).encode()
+        with urllib.request.urlopen(urllib.request.Request(
+                OAUTH_ISS + "/oauth/token", data=body,
+                headers={"Content-Type": "application/x-www-form-urlencoded"}),
+                timeout=60) as r:
+            tok = json.loads(r.read())
+        with urllib.request.urlopen(urllib.request.Request(
+                OAUTH_ISS + "/oauth/userinfo",
+                headers={"Authorization": "Bearer " + tok["access_token"]}),
+                timeout=60) as r:
+            ui = json.loads(r.read())
+    except urllib.error.HTTPError as e:
+        return _err_page("인증 제공자가 요청을 거부했습니다. 다시 시도해 주십시오.",
+                         "%d %s" % (e.code, e.read().decode("utf-8", "replace")))
+    except Exception as e:
+        return _err_page("인증 중 통신에 실패했습니다. 잠시 후 다시 시도해 주십시오.",
+                         "%s: %s" % (type(e).__name__, e))
     resp = RedirectResponse(nxt)
     set_session(resp, {"user": ui.get("preferred_username") or ui.get("sub"),
                        "name": ui.get("name", ""), "pic": ui.get("picture", "")})
     return resp
+@app.get("/auth")
+def auth_legacy(request: Request):
+    """예전 주소로 들어온 콜백도 받아 준다. 링크가 어딘가 남아 있을 수 있다."""
+    return auth(request)
 @app.get("/logout")
 def logout():
     r = RedirectResponse("/")

data/reference_entries.json ADDED Viewed

	@@ -0,0 +1,328 @@

+{
+ "method": "PharmaOS (재학습)",
+ "method_en": "PharmaOS (retrained)",
+ "entries": [
+  {
+   "board": "ABL1",
+   "n_train": 1952,
+   "n_test": 199,
+   "mae": 1.0225884766675557,
+   "tabpfn_reg": true,
+   "auroc": 0.5425824175824175,
+   "prauc": 0.39926475852782806,
+   "tabpfn_cls": true,
+   "exact_hits": 0,
+   "exact_rate": 0.0,
+   "leak": "clean",
+   "baseline_best_mae": 0.7779393745231502,
+   "baseline_best_auroc": 0.8191808191808192,
+   "noise_floor": 0.4588912458471183,
+   "secs": 70.0
+  },
+  {
+   "board": "AChE",
+   "n_train": 5357,
+   "n_test": 904,
+   "mae": 0.8442791152929728,
+   "tabpfn_reg": true,
+   "auroc": 0.7343206807340933,
+   "prauc": 0.6809792654292656,
+   "tabpfn_cls": true,
+   "exact_hits": 7,
+   "exact_rate": 0.007743362831858407,
+   "leak": "clean",
+   "baseline_best_mae": 0.8050872164791483,
+   "baseline_best_auroc": 0.7328022677661897,
+   "noise_floor": 0.46187469497191214,
+   "secs": 83.3
+  },
+  {
+   "board": "ALK",
+   "n_train": 2020,
+   "n_test": 153,
+   "mae": 0.7807908480743736,
+   "tabpfn_reg": true,
+   "auroc": 0.878763440860215,
+   "prauc": 0.9329935752080366,
+   "tabpfn_cls": true,
+   "exact_hits": 1,
+   "exact_rate": 0.006535947712418301,
+   "leak": "clean",
+   "baseline_best_mae": 0.8582590736344116,
+   "baseline_best_auroc": 0.814247311827957,
+   "noise_floor": 0.742835624347912,
+   "secs": 46.0
+  },
+  {
+   "board": "BRAF",
+   "n_train": 5201,
+   "n_test": 183,
+   "mae": 0.7975919419264598,
+   "tabpfn_reg": true,
+   "auroc": 0.801650269755633,
+   "prauc": 0.8789148071354913,
+   "tabpfn_cls": true,
+   "exact_hits": 2,
+   "exact_rate": 0.01092896174863388,
+   "leak": "clean",
+   "baseline_best_mae": 0.8570106284643041,
+   "baseline_best_auroc": 0.7719771501110758,
+   "noise_floor": 0.3133348834362967,
+   "secs": 84.0
+  },
+  {
+   "board": "CDK2",
+   "n_train": 1794,
+   "n_test": 321,
+   "mae": 0.7934575185428231,
+   "tabpfn_reg": true,
+   "auroc": 0.6108409470478435,
+   "prauc": 0.40142716185283467,
+   "tabpfn_cls": true,
+   "exact_hits": 2,
+   "exact_rate": 0.006230529595015576,
+   "leak": "clean",
+   "baseline_best_mae": 0.8165537848180889,
+   "baseline_best_auroc": 0.6097111700559977,
+   "noise_floor": 0.29309743262056304,
+   "secs": 89.8
+  },
+  {
+   "board": "COX2",
+   "n_train": 4024,
+   "n_test": 491,
+   "mae": 0.978391315623745,
+   "tabpfn_reg": true,
+   "auroc": 0.570387886647088,
+   "prauc": 0.7375222888571707,
+   "tabpfn_cls": true,
+   "exact_hits": 3,
+   "exact_rate": 0.006109979633401222,
+   "leak": "clean",
+   "baseline_best_mae": 0.9269477494249706,
+   "baseline_best_auroc": 0.6051336816812234,
+   "noise_floor": 0.7671300598249152,
+   "secs": 62.4
+  },
+  {
+   "board": "CYP2C9",
+   "n_train": 2435,
+   "n_test": 371,
+   "mae": 0.48261192303231587,
+   "tabpfn_reg": true,
+   "auroc": 0.6377483443708609,
+   "prauc": 0.7373126205902567,
+   "tabpfn_cls": true,
+   "exact_hits": 5,
+   "exact_rate": 0.013477088948787063,
+   "leak": "clean",
+   "baseline_best_mae": 0.4743088526790385,
+   "baseline_best_auroc": 0.5966586393738711,
+   "noise_floor": 0.3504820192518295,
+   "secs": 49.1
+  },
+  {
+   "board": "CYP2D6",
+   "n_train": 2676,
+   "n_test": 268,
+   "mae": 0.6066116802160365,
+   "tabpfn_reg": true,
+   "auroc": 0.527542372881356,
+   "prauc": 0.4607589892244653,
+   "tabpfn_cls": true,
+   "exact_hits": 4,
+   "exact_rate": 0.014925373134328358,
+   "leak": "clean",
+   "baseline_best_mae": 0.596600795371179,
+   "baseline_best_auroc": 0.570225988700565,
+   "noise_floor": 0.65903687863192,
+   "secs": 75.4
+  },
+  {
+   "board": "CYP3A4",
+   "n_train": 4814,
+   "n_test": 600,
+   "mae": 0.5603310599241302,
+   "tabpfn_reg": true,
+   "auroc": 0.61359375,
+   "prauc": 0.7857618469985579,
+   "tabpfn_cls": true,
+   "exact_hits": 4,
+   "exact_rate": 0.006666666666666667,
+   "leak": "clean",
+   "baseline_best_mae": 0.5737513093544662,
+   "baseline_best_auroc": 0.5716875000000001,
+   "noise_floor": 0.6276473051863152,
+   "secs": 187.9
+  },
+  {
+   "board": "EGFR",
+   "n_train": 9231,
+   "n_test": 1565,
+   "mae": 1.0073031841568407,
+   "tabpfn_reg": true,
+   "auroc": 0.6044200348825833,
+   "prauc": 0.6922003665231697,
+   "tabpfn_cls": true,
+   "exact_hits": 11,
+   "exact_rate": 0.007028753993610224,
+   "leak": "clean",
+   "baseline_best_mae": 0.9960533038964834,
+   "baseline_best_auroc": 0.5653230349871636,
+   "noise_floor": 0.8881466464306685,
+   "secs": 155.8
+  },
+  {
+   "board": "FLT3",
+   "n_train": 2913,
+   "n_test": 853,
+   "mae": 0.9910920022429478,
+   "tabpfn_reg": true,
+   "auroc": 0.651502219187436,
+   "prauc": 0.7520078617551165,
+   "tabpfn_cls": true,
+   "exact_hits": 9,
+   "exact_rate": 0.010550996483001172,
+   "leak": "clean",
+   "baseline_best_mae": 0.9858170086772374,
+   "baseline_best_auroc": 0.6213980880846706,
+   "noise_floor": 0.6601522287378142,
+   "secs": 67.4
+  },
+  {
+   "board": "HER2",
+   "n_train": 2262,
+   "n_test": 236,
+   "mae": 0.8614050015726017,
+   "tabpfn_reg": true,
+   "auroc": 0.8487300435413643,
+   "prauc": 0.8743434829296226,
+   "tabpfn_cls": true,
+   "exact_hits": 1,
+   "exact_rate": 0.00423728813559322,
+   "leak": "clean",
+   "baseline_best_mae": 0.9163787230821009,
+   "baseline_best_auroc": 0.7604136429608127,
+   "noise_floor": 0.4979961818213226,
+   "secs": 50.2
+  },
+  {
+   "board": "hERG",
+   "n_train": 8450,
+   "n_test": 1338,
+   "mae": 0.5745173440987656,
+   "tabpfn_reg": true,
+   "auroc": 0.6553969737714581,
+   "prauc": 0.7055356549215994,
+   "tabpfn_cls": true,
+   "exact_hits": 17,
+   "exact_rate": 0.012705530642750373,
+   "leak": "clean",
+   "baseline_best_mae": 0.5887837936811489,
+   "baseline_best_auroc": 0.6063324246666175,
+   "noise_floor": 0.4210538663630575,
+   "secs": 193.3
+  },
+  {
+   "board": "JAK2",
+   "n_train": 9012,
+   "n_test": 1288,
+   "mae": 1.0818229169586282,
+   "tabpfn_reg": true,
+   "auroc": 0.5803116466486234,
+   "prauc": 0.61593880320513,
+   "tabpfn_cls": true,
+   "exact_hits": 9,
+   "exact_rate": 0.006987577639751553,
+   "leak": "clean",
+   "baseline_best_mae": 0.9194816993033287,
+   "baseline_best_auroc": 0.7303318787238527,
+   "noise_floor": 0.6345000139527338,
+   "secs": 136.7
+  },
+  {
+   "board": "KIT",
+   "n_train": 1788,
+   "n_test": 158,
+   "mae": 0.882323390899274,
+   "tabpfn_reg": true,
+   "auroc": 0.6347741622146672,
+   "prauc": 0.6737596830228373,
+   "tabpfn_cls": true,
+   "exact_hits": 0,
+   "exact_rate": 0.0,
+   "leak": "clean",
+   "baseline_best_mae": 0.9250771660303996,
+   "baseline_best_auroc": 0.6422211429496519,
+   "noise_floor": 0.4273138205482797,
+   "secs": 40.5
+  },
+  {
+   "board": "MAOB",
+   "n_train": 3857,
+   "n_test": 877,
+   "mae": 0.9263366112325823,
+   "tabpfn_reg": true,
+   "auroc": 0.7159423078923552,
+   "prauc": 0.7268052560577757,
+   "tabpfn_cls": true,
+   "exact_hits": 7,
+   "exact_rate": 0.00798175598631699,
+   "leak": "clean",
+   "baseline_best_mae": 1.0279754487195185,
+   "baseline_best_auroc": 0.7043747594428436,
+   "noise_floor": 0.6256612894840171,
+   "secs": 64.6
+  },
+  {
+   "board": "PI3Ka",
+   "n_train": 5387,
+   "n_test": 1078,
+   "mae": 0.7688265800729167,
+   "tabpfn_reg": true,
+   "auroc": 0.8188078400558756,
+   "prauc": 0.7625155072318662,
+   "tabpfn_cls": true,
+   "exact_hits": 15,
+   "exact_rate": 0.013914656771799629,
+   "leak": "clean",
+   "baseline_best_mae": 0.8713868648365752,
+   "baseline_best_auroc": 0.7185662941621558,
+   "noise_floor": 0.3741289502909002,
+   "secs": 112.6
+  },
+  {
+   "board": "Solubility",
+   "n_train": 15957,
+   "n_test": 4635,
+   "mae": 0.6008277144281021,
+   "tabpfn_reg": true,
+   "auroc": null,
+   "prauc": null,
+   "exact_hits": 51,
+   "exact_rate": 0.011003236245954692,
+   "leak": "clean",
+   "baseline_best_mae": 0.711774820802794,
+   "baseline_best_auroc": 0.6932688073415427,
+   "noise_floor": 0.5751407196134256,
+   "secs": 286.7
+  },
+  {
+   "board": "VEGFR2",
+   "n_train": 9125,
+   "n_test": 637,
+   "mae": 0.8660788723514213,
+   "tabpfn_reg": true,
+   "auroc": 0.6841249084632284,
+   "prauc": 0.5927051957181371,
+   "tabpfn_cls": true,
+   "exact_hits": 4,
+   "exact_rate": 0.006279434850863423,
+   "leak": "clean",
+   "baseline_best_mae": 0.8203045097805136,
+   "baseline_best_auroc": 0.7233654147923423,
+   "noise_floor": 0.7622042646013418,
+   "secs": 143.4
+  }
+ ]
+}