revisi 17

app/auth.py

@@ -2,6 +2,7 @@ import os
 import base64
 import streamlit as st
 from app.db import supabase
+from urllib.parse import parse_qsl
 
 
 def auth_view():
@@ -28,31 +29,44 @@ def auth_view():
             unsafe_allow_html=True
         )
 
-        # --- FIX: Auto convert hash (#) to query (?) ---
-        st.markdown(
-            """
-            <script>
-            (function() {
-                const hash = window.location.hash;
-                if (hash && hash.length > 1 && !sessionStorage.getItem("hash_migrated")) {
-                    // ambil param setelah #
-                    const query = hash.substring(1); 
-                    const newUrl = window.location.pathname + "?" + query;
-
-                    // tandai sudah migrasi supaya tidak infinite loop
-                    sessionStorage.setItem("hash_migrated", "true");
-
-                    // ganti URL tanpa hash
-                    window.history.replaceState(null, "", newUrl);
-
-                    // reload supaya Streamlit bisa baca query param
-                    window.location.reload();
-                }
-            })();
-            </script>
-            """,
-            unsafe_allow_html=True
-        )
+        # --- FIX: Auto convert hash (#) to query (?) using streamlit-url-fragment ---
+        try:
+            from streamlit_url_fragment import get_fragment
+            fragment = get_fragment()
+            
+            if fragment and not st.session_state.get("hash_migrated"):
+                # Parse fragment parameters
+                params = dict(parse_qsl(fragment))
+                
+                if params.get("type") == "recovery" and params.get("access_token"):
+                    # Set query params so existing recovery flow works
+                    if hasattr(st, "query_params"):
+                        for key, value in params.items():
+                            st.query_params[key] = value
+                    else:
+                        st.experimental_set_query_params(**params)
+                    
+                    st.session_state["hash_migrated"] = True
+                    st.rerun()
+        except ImportError:
+            # Fallback to JS if library not available
+            st.markdown(
+                """
+                <script>
+                (function() {
+                    const hash = window.location.hash;
+                    if (hash && hash.length > 1 && !sessionStorage.getItem("hash_migrated")) {
+                        const query = hash.substring(1); 
+                        const newUrl = window.location.pathname + "?" + query;
+                        sessionStorage.setItem("hash_migrated", "true");
+                        window.history.replaceState(null, "", newUrl);
+                        window.location.reload();
+                    }
+                })();
+                </script>
+                """,
+                unsafe_allow_html=True
+            )
 
         # --- Recovery flow ---
         if hasattr(st, "query_params"):

requirements.txt

@@ -118,4 +118,5 @@ streamlit_mic_recorder
 gtts
 edge-tts
 playwright
-dotenv
+dotenv
+streamlit-url-fragment