|
import os |
|
from typing import Callable, Any |
|
import streamlit as st |
|
from descope.descope_client import DescopeClient |
|
from descope.exceptions import AuthException |
|
|
|
DESCOPE_PROJECT_ID = os.environ.get("DESCOPE_PROJECT_ID") |
|
descopeClient = DescopeClient(project_id=DESCOPE_PROJECT_ID) |
|
|
|
|
|
def authenticateFunc(func: Callable[[], Any]): |
|
if "token" not in st.session_state: |
|
if "code" in st.query_params: |
|
code = st.query_params["code"] |
|
st.query_params.clear() |
|
try: |
|
with st.spinner("Authenticating ..."): |
|
jwtResponse = descopeClient.sso.exchange_token(code) |
|
st.session_state["token"] = jwtResponse["sessionToken"].get("jwt") |
|
st.session_state["refreshToken"] = jwtResponse["refreshSessionToken"].get( |
|
"jwt" |
|
) |
|
st.session_state["user"] = jwtResponse["user"] |
|
st.rerun() |
|
except AuthException: |
|
st.error("Login failed!") |
|
|
|
st.warning("You're not logged in. Please login to continue") |
|
with st.container(border=False): |
|
if st.button( |
|
"Sign in with Google", |
|
type="primary", |
|
use_container_width=True |
|
): |
|
oauthResponse = descopeClient.oauth.start( |
|
provider="google", return_url=st.context.headers["Origin"] |
|
) |
|
url = oauthResponse["url"] |
|
|
|
st.markdown( |
|
f'<meta http-equiv="refresh" content="0; url={url}">', |
|
unsafe_allow_html=True, |
|
) |
|
else: |
|
try: |
|
with st.spinner("Authenticating ..."): |
|
jwtResponse = descopeClient.validate_and_refresh_session( |
|
st.session_state.token, st.session_state.refreshToken |
|
) |
|
st.session_state["token"] = jwtResponse["sessionToken"].get("jwt") |
|
|
|
func() |
|
except AuthException: |
|
|
|
del st.session_state.token |
|
st.rerun() |
|
|
