Update app.py

app.py

@@ -3,6 +3,7 @@ import streamlit as st
 import requests
 import msal
 import secrets
+import time
 
 # Configuration
 APPLICATION_ID = os.getenv('APPLICATION_ID_KEY')
@@ -11,6 +12,12 @@ AUTHORITY = 'https://login.microsoftonline.com/common'
 REDIRECT_URI = 'https://huggingface.co/spaces/awacke1/MSGraphAPI'
 SCOPES = ['User.Read', 'Calendars.ReadWrite', 'Mail.ReadWrite']
 
+# Initialize session state
+if 'auth_state' not in st.session_state:
+    st.session_state.auth_state = None
+if 'auth_state_time' not in st.session_state:
+    st.session_state.auth_state_time = None
+
 # MSAL setup
 def get_msal_app():
     return msal.ConfidentialClientApplication(
@@ -23,7 +30,8 @@ def get_msal_app():
 def generate_auth_url():
     msal_app = get_msal_app()
     state = secrets.token_urlsafe(32)
-    st.session_state['auth_state'] = state
+    st.session_state.auth_state = state
+    st.session_state.auth_state_time = time.time()
     return msal_app.get_authorization_request_url(
         scopes=SCOPES,
         redirect_uri=REDIRECT_URI,
@@ -66,13 +74,20 @@ def make_api_call(endpoint, token):
 def main():
     st.title("🦄 MS Graph API Integration")
 
+    # Debug information
+    st.sidebar.write("Debug Info:")
+    st.sidebar.write(f"Auth State: {st.session_state.auth_state}")
+    st.sidebar.write(f"Auth State Time: {st.session_state.auth_state_time}")
+    st.sidebar.write(f"Query Params: {st.query_params}")
+
     # Check for authentication
     token = get_token_from_cache()
     
     if 'code' in st.query_params:
-        state = st.query_params.get('state')
-        if state != st.session_state.get('auth_state'):
-            st.error("Invalid state parameter. Please try logging in again.")
+        received_state = st.query_params.get('state')
+        if received_state != st.session_state.auth_state:
+            st.error(f"Invalid state parameter. Expected {st.session_state.auth_state}, got {received_state}")
+            st.error("Please try logging in again.")
             st.session_state.clear()
             st.rerun()