Update app.py

app.py

@@ -13,28 +13,75 @@ import chainlit as cl
 from authlib.integrations.requests_client import OAuth2Session
 import os
 
-# Retrieving environment variables
-OAUTH_CLIENT_ID = os.getenv("OAUTH_CLIENT_ID")
-OAUTH_CLIENT_SECRET = os.getenv("OAUTH_CLIENT_SECRET")
-OAUTH_SCOPES = os.getenv("OAUTH_SCOPES").split(',')  # Assuming OAUTH_SCOPES is a comma-separated list
-OPENID_PROVIDER_URL = os.getenv("OPENID_PROVIDER_URL")
-SPACE_HOST = os.getenv("SPACE_HOST")
-
-# Constructing the redirect URL using the SPACE_HOST variable
-redirect_uri = f"https://{SPACE_HOST}/login/callback"
-
-# Initializing the OAuth client/session with the retrieved environment variables
-oauth_client = OAuth2Session(client_id=OAUTH_CLIENT_ID,
-                             client_secret=OAUTH_CLIENT_SECRET,  # Include client_secret if needed for the OAuth2Session setup
-                             scope=OAUTH_SCOPES,
-                             redirect_uri=redirect_uri)
-
-# Use the corrected method to generate the authorization URL
-authorization_url, state = oauth_client.create_authorization_url(OPENID_PROVIDER_URL + '/authorize')
-
-print(authorization_url, state)
-# The rest of your OAuth flow would go here, including redirecting the user to the authorization_url,
-# and then handling the redirect back to your application to exchange the code for a token.
+# # Retrieving environment variables
+# OAUTH_CLIENT_ID = os.getenv("OAUTH_CLIENT_ID")
+# OAUTH_CLIENT_SECRET = os.getenv("OAUTH_CLIENT_SECRET")
+# OAUTH_SCOPES = os.getenv("OAUTH_SCOPES").split(',')  # Assuming OAUTH_SCOPES is a comma-separated list
+# OPENID_PROVIDER_URL = os.getenv("OPENID_PROVIDER_URL")
+# SPACE_HOST = os.getenv("SPACE_HOST")
+
+# # Constructing the redirect URL using the SPACE_HOST variable
+# redirect_uri = f"https://{SPACE_HOST}/login/callback"
+
+# # Initializing the OAuth client/session with the retrieved environment variables
+# oauth_client = OAuth2Session(client_id=OAUTH_CLIENT_ID,
+#                              client_secret=OAUTH_CLIENT_SECRET,  # Include client_secret if needed for the OAuth2Session setup
+#                              scope=OAUTH_SCOPES,
+#                              redirect_uri=redirect_uri)
+
+# # Use the corrected method to generate the authorization URL
+# authorization_url, state = oauth_client.create_authorization_url(OPENID_PROVIDER_URL + '/authorize')
+
+# print(authorization_url, state)
+# # The rest of your OAuth flow would go here, including redirecting the user to the authorization_url,
+# # and then handling the redirect back to your application to exchange the code for a token.
+
+
+from flask import Flask, request, redirect
+import base64
+import requests
+
+app = Flask(__name__)
+
+@app.route('/login/callback')
+def login_callback():
+    # Retrieve the authorization code and state from the callback URL
+    code = request.args.get('code')
+    state = request.args.get('state')
+    
+    # You should verify the state here (compare it to the one you stored before redirecting the user)
+    # For simplicity, this step is not shown
+    
+    # Exchange the code for tokens
+    token_url = 'https://huggingface.co/oauth/token'
+    credentials = f"{OAUTH_CLIENT_ID}:{OAUTH_CLIENT_SECRET}"
+    basic_auth_header = base64.b64encode(credentials.encode('utf-8')).decode('utf-8')
+    
+    headers = {
+        'Authorization': f'Basic {basic_auth_header}',
+        'Content-Type': 'application/x-www-form-urlencoded'
+    }
+    
+    data = {
+        'grant_type': 'authorization_code',
+        'code': code,
+        'redirect_uri': redirect_uri,
+        'client_id': OAUTH_CLIENT_ID
+    }
+    
+    response = requests.post(token_url, headers=headers, data=data)
+    
+    if response.ok:
+        tokens = response.json()
+        access_token = tokens['access_token']
+        id_token = tokens.get('id_token')
+        
+        # Now you can use the access_token (and id_token) to access protected resources or identify the user
+        # For example, fetch user info from the userinfo endpoint if needed
+        
+        return "Login successful"  # Redirect to another page or show a message
+    else:
+        return "Error exchanging code for tokens", 400