'minor change to trigger build'

HF_OAUTH_CONFIG.md

@@ -1,113 +0,0 @@
-# HuggingFace Spaces OAuth Configuration
-
-## Required Configuration for OAuth to Work
-
-### 1. Space Settings → Variables (Environment Variables)
-
-Add these environment variables in your HuggingFace Space settings:
-
-```bash
-# Required for OAuth functionality
-SESSION_COOKIE_SECURE=true
-SESSION_COOKIE_SAMESITE=None
-
-# Optional but recommended
-PREFERRED_URL_SCHEME=https
-```
-
-**Why these are needed:**
-- `SESSION_COOKIE_SECURE=true` - Ensures cookies are only sent over HTTPS
-- `SESSION_COOKIE_SAMESITE=None` - Allows cookies to work in cross-site context (HF iframe)
-- `PREFERRED_URL_SCHEME=https` - Ensures Flask generates HTTPS URLs
-
-### 2. README.md Header (if using HF OAuth)
-
-If you want to use HuggingFace's built-in OAuth (recommended), add this to your README.md:
-
-```yaml
----
-title: MemPrepMate
-emoji: 🧠
-colorFrom: blue
-colorTo: purple
-sdk: docker
-pinned: false
-hf_oauth: true
-hf_oauth_scopes:
-  - openid
-  - profile
-  - email
----
-```
-
-**What `hf_oauth: true` does:**
-- Automatically sets `OAUTH_CLIENT_ID` and `OAUTH_CLIENT_SECRET`
-- Configures OAuth redirect URI to `https://YOUR-SPACE.hf.space/oauth/callback`
-- No need to manually manage OAuth credentials
-
-### 3. Alternative: Manual OAuth Configuration
-
-If NOT using `hf_oauth: true`, you need to manually set:
-
-```bash
-# Space Settings → Variables
-OAUTH_CLIENT_ID=your-client-id
-OAUTH_CLIENT_SECRET=your-client-secret
-
-# Or for custom OAuth provider
-HF_CLIENT_ID=your-client-id
-HF_CLIENT_SECRET=your-client-secret
-HF_AUTHORIZATION_URL=https://your-oauth-provider.com/authorize
-HF_TOKEN_URL=https://your-oauth-provider.com/token
-HF_USERINFO_URL=https://your-oauth-provider.com/userinfo
-```
-
-## Current Configuration Check
-
-To verify your configuration is correct, check the Space logs for:
-
-```
-[CONFIG] ENVIRONMENT VARIABLES CHECK:
-[CONFIG] SESSION_COOKIE_SECURE env var: true    ← Should be 'true'
-[CONFIG] SESSION_COOKIE_SAMESITE env var: None  ← Should be 'None'
-[CONFIG] PREFERRED_URL_SCHEME env var: https    ← Should be 'https'
-```
-
-If you see:
-```
-⚠️  WARNING: OAuth will FAIL - cookie won't persist!
-```
-
-Then you need to add the environment variables above.
-
-## Troubleshooting OAuth State Error
-
-The error you're seeing:
-```
-MismatchingStateError: mismatching_state: CSRF Warning! State not equal in request and response.
-```
-
-Is caused by **session state not being preserved** between `/oauth/login` and `/oauth/callback`.
-
-**Common causes:**
-1. ❌ Missing `SESSION_COOKIE_SECURE=true` and `SESSION_COOKIE_SAMESITE=None`
-2. ❌ Code manually saving session incorrectly (overwriting Authlib's state)
-3. ❌ Browser blocking third-party cookies in iframe context
-
-**Fix checklist:**
-- ✅ Set environment variables above
-- ✅ Remove manual `save_session()` call from auth.py
-- ✅ Let Flask's automatic session handling work
-- ✅ Ensure Storage Access API is enabled in base.html (for Safari)
-
-## Verification Steps
-
-1. Set environment variables in Space settings
-2. Deploy the fixed auth.py (see separate commit)
-3. Wait for Space to rebuild (~2-3 minutes)
-4. Test OAuth flow
-5. Check logs for:
-   - `[OAUTH] Session keys after authorize_redirect: [..., '_state_huggingface_<random>']`
-   - Callback should show: `[OAUTH] Session keys: [..., '_state_huggingface_<random>']`
-
-If state key is present in both login and callback logs, OAuth should work.

OAUTH_FIX_QUICKSTART.md

@@ -1,117 +0,0 @@
-# Quick Fix for OAuth MismatchingStateError
-
-## The Problem
-
-Your auth.py file was manually calling `save_session()` AFTER `authorize_redirect()`, which **overwrites** the session cookie that Authlib created. This causes the OAuth state to be lost.
-
-## The Fix Applied
-
-✅ **Removed the manual `save_session()` call** from [auth.py](webapp/src/routes/auth.py) lines 46-54
-
-**Before (BROKEN):**
-```python
-response = auth_service.hf.authorize_redirect(redirect_uri)
-# ❌ This overwrites Authlib's response and loses the state
-current_app.session_interface.save_session(current_app, session, response)
-return response
-```
-
-**After (FIXED):**
-```python
-response = auth_service.hf.authorize_redirect(redirect_uri)
-# ✅ Flask's after_request automatically saves session with state
-return response
-```
-
-## HuggingFace Space Environment Variables YOU NEED TO SET
-
-Go to your Space Settings → Variables and add:
-
-```bash
-SESSION_COOKIE_SECURE=true
-SESSION_COOKIE_SAMESITE=None
-PREFERRED_URL_SCHEME=https
-```
-
-### Why These Are Critical
-
-Without these, your session cookies won't persist in the HuggingFace iframe:
-- **SESSION_COOKIE_SECURE=true** - Required for HTTPS (HF Spaces are always HTTPS)
-- **SESSION_COOKIE_SAMESITE=None** - Required for cross-site cookies (HF iframe embedding)
-- **PREFERRED_URL_SCHEME=https** - Ensures Flask generates correct URLs
-
-## Deploy Steps
-
-1. **Set environment variables** (see above)
-2. **Copy fixed auth.py to HF repo:**
-   ```bash
-   cp webapp/src/routes/auth.py ~/src/huggingface.co/spaces/Memverge/MemPrepMate/src/routes/
-   ```
-3. **Commit and push:**
-   ```bash
-   cd ~/src/huggingface.co/spaces/Memverge/MemPrepMate
-   git add src/routes/auth.py
-   git commit -m "fix: Remove manual session save that breaks OAuth state"
-   git push
-   ```
-4. **Wait for rebuild** (~2-3 minutes)
-
-## Verification
-
-After deployment, check the logs at https://huggingface.co/spaces/Memverge/MemPrepMate/logs
-
-### ✅ Success Indicators
-
-**Login phase:**
-```
-[OAUTH] Session keys after authorize_redirect: [..., '_state_huggingface_ABC123']
-```
-
-**Callback phase:**
-```
-[OAUTH] State keys in session: ['_state_huggingface_ABC123']
-[OAUTH] State from URL: ABC123
-```
-
-### ❌ Failure Indicators
-
-**If you see:**
-```
-[OAUTH] State keys in session: []
-[OAUTH] OAuth state in session: None
-ERROR: MismatchingStateError
-```
-
-**Then check:**
-1. Environment variables are set correctly
-2. auth.py doesn't have manual `save_session()` call
-3. Space rebuilt after changes
-
-## README.md Configuration (Optional but Recommended)
-
-Add to the top of your README.md:
-
-```yaml
----
-title: MemPrepMate
-emoji: 🧠
-sdk: docker
-hf_oauth: true
-hf_oauth_scopes:
-  - openid
-  - profile
-  - email
----
-```
-
-This enables HF's built-in OAuth and automatically sets OAUTH_CLIENT_ID/SECRET.
-
-## Quick Test
-
-After deployment:
-1. Go to your Space URL
-2. Click "Login with HuggingFace"
-3. Authorize the app
-4. Should redirect to `/profile` (NOT back to login in a loop)
-
-If it works, you'll see your profile. If not, check the logs for the error indicators above.