Try to send an email

agent.py

@@ -15,7 +15,7 @@ def generate_email(client, to_email: str, context: str, tone: str) -> tuple[str,
 Contexte : {context}
 Ton : {tone}
 
-Réponds en deux parties :
+Réponds de manière courte en deux parties :
 1. Objet : ligne d'objet de l'email
 2. Corps : contenu de l'email bien rédigé, en respectant le ton demandé.
 Commence chaque partie par son étiquette.

app.py

@@ -8,17 +8,31 @@ def on_generate(to_email, context, tone):
     subject, body = generate_email(model, to_email, context, tone)
     return subject, body
 
-def on_send(sender_email, to_email, subject, body):
-    success, message = send_email(sender_email, to_email, subject, body)
+def on_send(refresh_token, from_email, to_email, subject, body):
+    success, message = send_email(refresh_token, to_email, subject, body, from_email)
     return message
 
-with gr.Blocks(title="Assistant Email Pro - HuggingFace LLM") as demo:
-    gr.Markdown("# ✉️ Assistant Email avec génération automatique")
-
-    sender = gr.Textbox(label="Expéditeur (adresse Gmail utilisée)")
-    to_email = gr.Textbox(label="Destinataire", placeholder="exemple@exemple.com")
-    context = gr.Textbox(label="Contexte ou objectif", lines=4,
-                         placeholder="Demander un rendez-vous, féliciter un collègue...")
+with gr.Blocks(title="Assistant Email - Gmail sécurisé", theme="soft") as demo:
+    gr.Markdown("# ✉️ Générateur d’e-mails avec envoi Gmail sécurisé")
+
+    with gr.Accordion("🔐 Connexion Gmail - instructions", open=False):
+        gr.Markdown("""
+### Étapes pour générer votre token Gmail :
+
+1. Ouvrez [Google OAuth Playground](https://developers.google.com/oauthplayground)
+2. Cliquez sur ⚙️ (roue dentée) en haut à droite → cochez **Use your own OAuth credentials**
+   - `client_id` : fourni par le Space (dans Hugging Face Secrets)
+   - `client_secret` : fourni également
+3. Choisissez ce scope :
+https://www.googleapis.com/auth/gmail.send
+4. Cliquez sur **Authorize APIs** → puis sur **Exchange authorization code for tokens**
+5. Copiez-collez ici le `refresh_token`
+        """)
+
+    refresh_token = gr.Textbox(label="🔑 Refresh Token Gmail (copié depuis OAuth Playground)", type="password")
+    from_email = gr.Textbox(label="Adresse Gmail utilisée (expéditeur)")
+    to_email = gr.Textbox(label="Destinataire", placeholder="exemple@insee.fr")
+    context = gr.Textbox(label="Contexte ou objectif", lines=3)
     tone = gr.Dropdown(choices=["Formel", "Chaleureux", "Direct", "Poli"],
                        value="Formel", label="Ton")
 
@@ -32,6 +46,6 @@ with gr.Blocks(title="Assistant Email Pro - HuggingFace LLM") as demo:
     status = gr.Markdown()
 
     generate_btn.click(on_generate, inputs=[to_email, context, tone], outputs=[subject, body])
-    send_btn.click(on_send, inputs=[sender, to_email, subject, body], outputs=status)
+    send_btn.click(on_send, inputs=[refresh_token, from_email, to_email, subject, body], outputs=status)
 
-demo.launch()
+demo.launch()

email_sender.py

@@ -1,56 +1,41 @@
 import os
 import base64
-import pickle
 from email.mime.text import MIMEText
-from google_auth_oauthlib.flow import InstalledAppFlow
 from google.auth.transport.requests import Request
+from google.oauth2.credentials import Credentials
 from googleapiclient.discovery import build
 
-SCOPES = ["https://www.googleapis.com/auth/gmail.send"]
-CREDENTIALS_PATH = "client_secret.json"
-
-# Stocker les tokens par email utilisateur
-def get_token_path(sender_email):
-    safe_email = sender_email.replace("@", "_at_").replace(".", "_dot_")
-    return f"token_{safe_email}.pkl"
-
-# Écrire le client secret s'il est fourni par variable d'env
-client_secret_content = os.getenv("CLIENT_SECRET_JSON")
-if client_secret_content and not os.path.exists(CREDENTIALS_PATH):
-    with open(CREDENTIALS_PATH, "w") as f:
-        f.write(client_secret_content)
-
-def authenticate_gmail(sender_email: str):
-    creds = None
-    token_path = get_token_path(sender_email)
-
-    if os.path.exists(token_path):
-        with open(token_path, "rb") as token:
-            creds = pickle.load(token)
-
-    if not creds or not creds.valid:
-        if creds and creds.expired and creds.refresh_token:
-            creds.refresh(Request())
-        else:
-            flow = InstalledAppFlow.from_client_secrets_file(CREDENTIALS_PATH, SCOPES)
-            creds = flow.run_local_server(port=0)
-        with open(token_path, "wb") as token:
-            pickle.dump(creds, token)
-
+def authenticate_gmail_with_refresh_token(refresh_token: str):
+    client_id = os.getenv("GMAIL_CLIENT_ID")
+    client_secret = os.getenv("GMAIL_CLIENT_SECRET")
+
+    if not client_id or not client_secret:
+        raise ValueError("Client ID ou Client Secret manquant (définir dans les secrets Hugging Face)")
+
+    creds = Credentials(
+        None,
+        refresh_token=refresh_token,
+        token_uri="https://oauth2.googleapis.com/token",
+        client_id=client_id,
+        client_secret=client_secret,
+        scopes=["https://www.googleapis.com/auth/gmail.send"]
+    )
+    creds.refresh(Request())
     return build("gmail", "v1", credentials=creds)
 
-def send_email(sender_email: str, to_email: str, subject: str, body: str):
-    service = authenticate_gmail(sender_email)
+def send_email(refresh_token: str, to_email: str, subject: str, body: str, from_email: str):
+    try:
+        service = authenticate_gmail_with_refresh_token(refresh_token)
+
+        message = MIMEText(body)
+        message["to"] = to_email
+        message["subject"] = subject
+        message["from"] = from_email
 
-    message = MIMEText(body)
-    message["to"] = to_email
-    message["subject"] = subject
-    message["from"] = sender_email
-    raw_message = base64.urlsafe_b64encode(message.as_bytes()).decode()
-    send_message = {"raw": raw_message}
+        raw_message = base64.urlsafe_b64encode(message.as_bytes()).decode()
+        send_message = {"raw": raw_message}
 
-    try:
         sent = service.users().messages().send(userId="me", body=send_message).execute()
-        return True, f"✅ Email envoyé à {to_email} (ID: {sent['id']})"
+        return True, f"✅ Email envoyé à {to_email} (ID : {sent['id']})"
     except Exception as e:
         return False, f"❌ Échec de l'envoi : {e}"