Update app.py

app.py

@@ -44,46 +44,46 @@ import requests
 app = Flask(__name__)
 
 @app.route('/login/callback')
-def login_callback():
-    # Retrieve the authorization code and state from the callback URL
-    code = request.args.get('code')
-    state = request.args.get('state')
+# def login_callback():
+# Retrieve the authorization code and state from the callback URL
+code = request.args.get('code')
+state = request.args.get('state')
+
+# You should verify the state here (compare it to the one you stored before redirecting the user)
+# For simplicity, this step is not shown
+
+# Exchange the code for tokens
+token_url = 'https://huggingface.co/oauth/token'
+credentials = f"{OAUTH_CLIENT_ID}:{OAUTH_CLIENT_SECRET}"
+basic_auth_header = base64.b64encode(credentials.encode('utf-8')).decode('utf-8')
+
+print('IM HERE')
+
+headers = {
+    'Authorization': f'Basic {basic_auth_header}',
+    'Content-Type': 'application/x-www-form-urlencoded'
+}
+
+data = {
+    'grant_type': 'authorization_code',
+    'code': code,
+    'redirect_uri': redirect_uri,
+    'client_id': OAUTH_CLIENT_ID
+}
+
+response = requests.post(token_url, headers=headers, data=data)
+
+if response.ok:
+    tokens = response.json()
+    access_token = tokens['access_token']
+    id_token = tokens.get('id_token')
     
-    # You should verify the state here (compare it to the one you stored before redirecting the user)
-    # For simplicity, this step is not shown
+    # Now you can use the access_token (and id_token) to access protected resources or identify the user
+    # For example, fetch user info from the userinfo endpoint if needed
     
-    # Exchange the code for tokens
-    token_url = 'https://huggingface.co/oauth/token'
-    credentials = f"{OAUTH_CLIENT_ID}:{OAUTH_CLIENT_SECRET}"
-    basic_auth_header = base64.b64encode(credentials.encode('utf-8')).decode('utf-8')
-
-    print('IM HERE')
-    
-    headers = {
-        'Authorization': f'Basic {basic_auth_header}',
-        'Content-Type': 'application/x-www-form-urlencoded'
-    }
-    
-    data = {
-        'grant_type': 'authorization_code',
-        'code': code,
-        'redirect_uri': redirect_uri,
-        'client_id': OAUTH_CLIENT_ID
-    }
-    
-    response = requests.post(token_url, headers=headers, data=data)
-    
-    if response.ok:
-        tokens = response.json()
-        access_token = tokens['access_token']
-        id_token = tokens.get('id_token')
-        
-        # Now you can use the access_token (and id_token) to access protected resources or identify the user
-        # For example, fetch user info from the userinfo endpoint if needed
-        
-        return "Login successful"  # Redirect to another page or show a message
-    else:
-        return "Error exchanging code for tokens", 400
+    print("Login successful")  # Redirect to another page or show a message
+else:
+    print("Error exchanging code for tokens")