Spaces:

saifisvibin
/

Medical-Validator

Sleeping

App Files Files Community

saifisvibin commited on Jan 13

Commit

6d0006b

1 Parent(s): 517b677

Switch to JavaScript-based login for HuggingFace compatibility

Browse files

Files changed (1) hide show

app/main.py +69 -59

app/main.py CHANGED Viewed

@@ -175,7 +175,7 @@ class ValidationHistory(BaseModel):
 # API Endpoints
-# Login page HTML
 LOGIN_PAGE = """
 <!DOCTYPE html>
 <html>
@@ -200,85 +200,95 @@ LOGIN_PAGE = """
         <h1>🔐 Medical Document Validator</h1>
         <p class="subtitle">Enter password to access the application</p>
         <div class="error" id="error">Invalid password. Please try again.</div>
-        <form method="POST" action="/login">
-            <div class="form-group">
-                <label for="password">Password:</label>
-                <input type="password" id="password" name="password" placeholder="Enter password" required autofocus>
-            </div>
-            <button type="submit">Login</button>
-        </form>
     </div>
 </body>
 </html>
 """
 @app.get("/login", response_class=HTMLResponse, tags=["Auth"])
-async def login_page(error: str = None):
     """Show login page."""
     if not APP_PASSWORD:
-        return RedirectResponse(url="/", status_code=302)
-    html = LOGIN_PAGE
-    if error:
-        html = html.replace('display: none;', '')
-    return html
-@app.post("/login", tags=["Auth"])
-async def login(response: Response, password: str = Form(...)):
-    """Handle login form submission."""
-    if not APP_PASSWORD:
-        return RedirectResponse(url="/", status_code=302)
-    if password == APP_PASSWORD:
-        # Generate session token
-        session_token = generate_session_token()
-        VALID_SESSIONS.add(session_token)
-        # Set cookie and redirect
-        redirect = RedirectResponse(url="/", status_code=302)
-        redirect.set_cookie(
-            key="session_token",
-            value=session_token,
-            httponly=True,
-            max_age=86400,  # 24 hours
-            samesite="lax",
-            path="/"
-        )
-        return redirect
-    else:
-        return RedirectResponse(url="/login?error=1", status_code=302)
-@app.get("/logout", tags=["Auth"])
-async def logout(response: Response, session_token: str = Cookie(None)):
-    """Logout and clear session."""
-    if session_token and session_token in VALID_SESSIONS:
-        VALID_SESSIONS.discard(session_token)
-    redirect = RedirectResponse(url="/login", status_code=302)
-    redirect.delete_cookie("session_token")
-    return redirect
-@app.get("/", response_class=HTMLResponse, tags=["Root"])
-async def root(session_token: str = Cookie(None)):
     """Serve the main HTML interface (password protected if APP_PASSWORD is set)."""
     # Check if password protection is enabled
     if APP_PASSWORD:
-        if not session_token or not verify_session(session_token):
             return RedirectResponse(url="/login", status_code=302)
     html_path = Path(__file__).parent / "static" / "index.html"
     if html_path.exists():
         return FileResponse(html_path)
     return HTMLResponse("""
-    <html>
-        <body>
-            <h1>Medical Document Validator</h1>
-            <p>Frontend not found. Please ensure index.html exists in app/static/</p>
-            <p><a href="/docs">API Documentation</a></p>
-        </body>
-    </html>
     """)
 @app.get("/templates", response_model=List[TemplateSummary], tags=["Templates"])
 async def get_templates():

 # API Endpoints
+# Login page HTML with JavaScript-based auth
 LOGIN_PAGE = """
 <!DOCTYPE html>
 <html>
         <h1>🔐 Medical Document Validator</h1>
         <p class="subtitle">Enter password to access the application</p>
         <div class="error" id="error">Invalid password. Please try again.</div>
+        <div class="form-group">
+            <label for="password">Password:</label>
+            <input type="password" id="password" placeholder="Enter password" autofocus>
+        </div>
+        <button id="loginBtn">Login</button>
     </div>
+    <script>
+        async function attemptLogin() {
+            const password = document.getElementById('password').value;
+            const errorDiv = document.getElementById('error');
+            try {
+                const response = await fetch('/verify-password', {
+                    method: 'POST',
+                    headers: {'Content-Type': 'application/json'},
+                    body: JSON.stringify({password: password})
+                });
+                const data = await response.json();
+                if (data.valid) {
+                    localStorage.setItem('auth_token', data.token);
+                    window.location.href = '/app?token=' + data.token;
+                } else {
+                    errorDiv.style.display = 'block';
+                }
+            } catch (e) {
+                errorDiv.textContent = 'Connection error. Please try again.';
+                errorDiv.style.display = 'block';
+            }
+        }
+        document.getElementById('loginBtn').addEventListener('click', attemptLogin);
+        document.getElementById('password').addEventListener('keypress', function(e) {
+            if (e.key === 'Enter') attemptLogin();
+        });
+    </script>
 </body>
 </html>
 """
 @app.get("/login", response_class=HTMLResponse, tags=["Auth"])
+async def login_page():
     """Show login page."""
     if not APP_PASSWORD:
+        return RedirectResponse(url="/app", status_code=302)
+    return HTMLResponse(LOGIN_PAGE)
+@app.post("/verify-password", tags=["Auth"])
+async def verify_password(request: Request):
+    """Verify password and return token."""
+    try:
+        data = await request.json()
+        password = data.get("password", "")
+        if password == APP_PASSWORD:
+            token = generate_session_token()
+            VALID_SESSIONS.add(token)
+            return {"valid": True, "token": token}
+        else:
+            return {"valid": False}
+    except Exception as e:
+        logger.error(f"Password verification error: {e}")
+        return {"valid": False}
+@app.get("/app", response_class=HTMLResponse, tags=["Root"])
+async def app_page(token: str = None):
     """Serve the main HTML interface (password protected if APP_PASSWORD is set)."""
     # Check if password protection is enabled
     if APP_PASSWORD:
+        if not token or not verify_session(token):
             return RedirectResponse(url="/login", status_code=302)
     html_path = Path(__file__).parent / "static" / "index.html"
     if html_path.exists():
         return FileResponse(html_path)
     return HTMLResponse("""
+        <h1>Medical Document Validator</h1>
+        <p>Static files not found. Please check installation.</p>
     """)
+@app.get("/", response_class=HTMLResponse, tags=["Root"])
+async def root():
+    """Redirect to login or app."""
+    if APP_PASSWORD:
+        return RedirectResponse(url="/login", status_code=302)
+    return RedirectResponse(url="/app", status_code=302)
 @app.get("/templates", response_model=List[TemplateSummary], tags=["Templates"])
 async def get_templates():