Fix login modal authentication issues

🔧 Critical Fixes:
- Fix YouTube iframe permissions policy violations (removed web-share)
- Fix authentication loop after successful OAuth login
- Improve auth status endpoint to return complete user data
- Add URL parameter detection for successful authentication
- Add page focus listener to refresh auth status
- Enhanced logging for better debugging

🐛 Issues Resolved:
- Users no longer get stuck in login loop after OAuth success
- Iframe permission violations eliminated
- Auth state properly recognized after login
- Login modal correctly disappears after successful authentication

These fixes address the core authentication flow issues
identified in HF Spaces deployment.

backend/routers/auth.py

@@ -42,8 +42,12 @@ async def auth_status(request: Request):
         "login_required": True,  # Mandatory for OpenAI API protection
         "user_authenticated": bool(user),
         "user_info": {
-            "auth_method": user.get("auth_method") if user else None,
+            "id": user.get("id") if user else None,
             "username": user.get("username") if user else None,
+            "name": user.get("name") if user else None,
+            "email": user.get("email") if user else None,
+            "avatar_url": user.get("avatar_url") if user else None,
+            "auth_method": user.get("auth_method") if user else None,
         } if user else None,
         "hf_sign_detected": bool(request.query_params.get("__sign")) if is_huggingface_space() else False,
     }
@@ -245,8 +249,8 @@ async def oauth_callback(request: Request, code: str, state: str):
     
     logger.info(f"User logged in: {user_info.get('name')} ({user_info.get('login')})")
     
-    # Redirect to main application
-    return RedirectResponse(url="/", status_code=302)
+    # Redirect to main application with auth success indicator
+    return RedirectResponse(url="/?auth=success", status_code=302)
 
 
 @router.get("/logout")

frontend/src/components/auth/LoginModal.tsx

@@ -95,7 +95,7 @@ export function LoginModal({ isOpen, onClose }: LoginModalProps) {
                 <iframe
                   src="https://www.youtube.com/embed/btrS9pfDYJY?si=dDX4tIs-oS2O2d2p"
                   title="AgentGraph: Interactive Analysis Platform Demo"
-                  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
+                  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
                   allowFullScreen
                   className="w-full h-full rounded-xl"
                 />

frontend/src/context/AuthContext.tsx

@@ -67,7 +67,7 @@ export function AuthProvider({ children }: AuthProviderProps) {
 
       if (data.user_authenticated && data.user_info) {
         setUser({
-          id: data.user_info.user_id || "unknown",
+          id: data.user_info.id || "unknown",
           username: data.user_info.username || "Unknown User",
           name:
             data.user_info.name || data.user_info.username || "Unknown User",
@@ -76,8 +76,13 @@ export function AuthProvider({ children }: AuthProviderProps) {
           auth_method: data.user_info.auth_method || "unknown",
         });
         setShowLoginModal(false);
+        console.log(
+          "✅ User authenticated successfully:",
+          data.user_info.username
+        );
       } else {
         setUser(null);
+        console.log("❌ User not authenticated - showing login modal");
         // Show login modal if in HF Spaces and auth is required
         if (data.environment === "huggingface_spaces" && data.login_required) {
           setShowLoginModal(true);
@@ -125,7 +130,17 @@ export function AuthProvider({ children }: AuthProviderProps) {
   };
 
   useEffect(() => {
-    checkAuthStatus();
+    // Check for auth success parameter in URL
+    const urlParams = new URLSearchParams(window.location.search);
+    if (urlParams.get('auth') === 'success') {
+      console.log("Authentication success detected - refreshing status");
+      // Remove the parameter from URL
+      window.history.replaceState({}, document.title, window.location.pathname);
+      // Force auth status check
+      setTimeout(() => checkAuthStatus(), 100);
+    } else {
+      checkAuthStatus();
+    }
 
     // Listen for auth-required events from API calls
     const handleAuthRequired = () => {
@@ -134,12 +149,20 @@ export function AuthProvider({ children }: AuthProviderProps) {
       }
     };
 
-    window.addEventListener('auth-required', handleAuthRequired);
-    
+    // Listen for page focus to refresh auth status (useful after OAuth redirect)
+    const handleFocus = () => {
+      console.log("Page focused - checking auth status");
+      checkAuthStatus();
+    };
+
+    window.addEventListener("auth-required", handleAuthRequired);
+    window.addEventListener("focus", handleFocus);
+
     return () => {
-      window.removeEventListener('auth-required', handleAuthRequired);
+      window.removeEventListener("auth-required", handleAuthRequired);
+      window.removeEventListener("focus", handleFocus);
     };
-  }, [authRequired, isAuthenticated]);
+  }, []);
 
   const value: AuthContextType = {
     user,

frontend/src/lib/api.ts

@@ -36,13 +36,17 @@ async function fetchApi<T>(
     // Handle 401 (Unauthorized) - trigger login modal
     if (response.status === 401) {
       // Check if running in browser environment
-      if (typeof window !== 'undefined') {
+      if (typeof window !== "undefined") {
         // Dispatch a custom event to trigger login modal
-        window.dispatchEvent(new CustomEvent('auth-required', {
-          detail: { message: 'Authentication required to access this feature' }
-        }));
+        window.dispatchEvent(
+          new CustomEvent("auth-required", {
+            detail: {
+              message: "Authentication required to access this feature",
+            },
+          })
+        );
       }
-      throw new ApiError(response.status, 'Authentication required');
+      throw new ApiError(response.status, "Authentication required");
     }
 
     // Handle 429 (Too Many Requests) with exponential backoff