toggle ui based on login

app.py

@@ -147,6 +147,18 @@ def add_solution_cbk(
     )
 
 
+def gate_submission(profile: gr.OAuthProfile | None):
+    """
+    Returns:
+      - login_box visibility (True if logged OUT)
+      - submit_panel visibility (True if logged IN)
+      - status line
+    """
+    if profile is None:
+        return gr.update(visible=True), gr.update(visible=False), "You're not signed in."
+    return gr.update(visible=False), gr.update(visible=True), f"Signed in as @{profile.username}"
+
+
 blocks = gr.Blocks(css=custom_css)
 with blocks:
     gr.Image(
@@ -206,6 +218,7 @@ with blocks:
             submit_panel = gr.Group(visible=False)
             with submit_panel:
                 with gr.Row():
+                    status_line = gr.Markdown()  # "Signed in as @user"
                     with gr.Column():
                         system_name_textbox = gr.Textbox(label=AutoEvalColumn.system.name)
                         org_textbox = gr.Textbox(label=AutoEvalColumn.organization.name)
@@ -246,6 +259,9 @@ with blocks:
     # The work already happened in the background - refresh_leaderboard_data().
     blocks.load(lambda: leaderboard_df, inputs=[], outputs=[leaderboard_component])
 
+    # On initial load (and after OAuth redirect), toggle the UI based on login status.
+    blocks.load(gate_submission, inputs=None, outputs=[login_box, submit_panel, status_line])
+
 
 logger.info("Scheduler")
 scheduler = BackgroundScheduler()

src/submission/submit.py

@@ -79,6 +79,26 @@ def add_new_solutions(
     )
 
 
+def fetch_sub_claim(oauth_token: gr.OAuthToken | None) -> dict | None:
+    if oauth_token is None:
+        return None
+    provider = os.getenv("OPENID_PROVIDER_URL")
+    if not provider:
+        return None
+    try:
+        oidc_meta = requests.get(f"{provider}/.well-known/openid-configuration", timeout=5).json()
+        userinfo_ep = oidc_meta["userinfo_endpoint"]
+        claims = requests.get(userinfo_ep, headers={"Authorization": f"Bearer {oauth_token.token}"}, timeout=5).json()
+        # Typical fields: sub (stable id), preferred_username, name, picture
+        return {
+            "sub": claims.get("sub"),
+            "preferred_username": claims.get("preferred_username"),
+            "name": claims.get("name"),
+        }
+    except Exception:
+        return None
+
+
 def _validate_all_submissions_present(
     lbdb: F1Data,
     pd_ds: pd.DataFrame,
@@ -102,36 +122,3 @@ def _validate_all_submissions_present(
         raise ValueError(f"Mismatched problem IDs: {len(missing)} missing, {len(unknown)} unknown")
     if len(pd_ds) > len(lbdb.code_problem_ids):
         return ValueError("Duplicate problem IDs exist in uploaded file")
-
-
-def fetch_sub_claim(oauth_token: gr.OAuthToken | None) -> dict | None:
-    if oauth_token is None:
-        return None
-    provider = os.getenv("OPENID_PROVIDER_URL")
-    if not provider:
-        return None
-    try:
-        oidc_meta = requests.get(f"{provider}/.well-known/openid-configuration", timeout=5).json()
-        userinfo_ep = oidc_meta["userinfo_endpoint"]
-        claims = requests.get(userinfo_ep, headers={"Authorization": f"Bearer {oauth_token.token}"}, timeout=5).json()
-        # Typical fields: sub (stable id), preferred_username, name, picture
-        return {
-            "sub": claims.get("sub"),
-            "preferred_username": claims.get("preferred_username"),
-            "name": claims.get("name"),
-        }
-    except Exception:
-        return None
-
-
-# --- on-load gate: show/hide submit panel based on login state ---
-def gate_submission(profile: gr.OAuthProfile | None):
-    """
-    Returns:
-      - login_box visibility (True if logged OUT)
-      - submit_panel visibility (True if logged IN)
-      - status line
-    """
-    if profile is None:
-        return gr.update(visible=True), gr.update(visible=False), "You're not signed in."
-    return gr.update(visible=False), gr.update(visible=True), f"Signed in as @{profile.username}"