Create app-wip.py

app-wip.py

@@ -0,0 +1,61 @@
+import streamlit as st
+import requests
+import os
+
+# Replace with your OAuth App settings
+HF_CLIENT_ID = os.environ.get("HF_CLIENT_ID")
+HF_CLIENT_SECRET = os.environ.get("HF_CLIENT_SECRET")
+HF_REDIRECT_URI = os.environ.get("HF_REDIRECT_URI", "https://<your-space-username>.hf.space")
+
+AUTH_URL = f"https://huggingface.co/oauth/authorize?client_id={HF_CLIENT_ID}&redirect_uri={HF_REDIRECT_URI}&response_type=code&scope=read"
+
+def exchange_code_for_token(code):
+    token_url = "https://huggingface.co/oauth/token"
+    payload = {
+        "grant_type": "authorization_code",
+        "code": code,
+        "client_id": HF_CLIENT_ID,
+        "client_secret": HF_CLIENT_SECRET,
+        "redirect_uri": HF_REDIRECT_URI,
+    }
+    response = requests.post(token_url, data=payload)
+    return response.json()
+
+def get_user_info(access_token):
+    headers = {"Authorization": f"Bearer {access_token}"}
+    r = requests.get("https://huggingface.co/api/whoami-v2", headers=headers)
+    return r.json()
+
+st.title("🔐 Hugging Face OAuth Login")
+
+query_params = st.experimental_get_query_params()
+
+if "code" not in query_params:
+    st.info("Please log in with your Hugging Face account:")
+    st.markdown(f"[Login via Hugging Face]({AUTH_URL})")
+else:
+    code = query_params["code"][0]
+    token_response = exchange_code_for_token(code)
+    access_token = token_response.get("access_token")
+    
+    if not access_token:
+        st.error("OAuth error: Could not get access token.")
+    else:
+        user_info = get_user_info(access_token)
+        st.success(f"✅ Logged in as: **{user_info.get('name')}**")
+
+        # Check role in orgs
+        orgs = user_info.get("orgs", [])
+        if orgs:
+            role = orgs[0].get("roleInOrg", "unknown")
+            org_name = orgs[0].get("name")
+            st.write(f"Org: `{org_name}` | Role: `{role}`")
+
+            if role == "admin":
+                st.success("🎉 You have ADMIN access! Special features unlocked.")
+                # Add admin features here
+            else:
+                st.warning("🔒 Limited access. You're not an admin.")
+        else:
+            st.info("Not part of any org.")
+