Create app.py

app.py

@@ -0,0 +1,551 @@
+import os
+import streamlit as st
+import requests
+import msal
+import urllib.parse
+import base64
+import hashlib
+import secrets
+
+# 🤓 Load environment variables (Ensure these are set!)
+APPLICATION_ID_KEY = os.getenv('APPLICATION_ID_KEY')
+CLIENT_SECRET_KEY = os.getenv('CLIENT_SECRET_KEY')
+AUTHORITY_URL = 'https://login.microsoftonline.com/common'  # Use 'common' for multi-tenant apps
+#REDIRECT_URI = 'http://localhost:8501'  # 👈 Make sure this matches your app's redirect URI
+REDIRECT_URI = 'https://huggingface.co/spaces/awacke1/MSGraphAPI'  # 👈 Make sure this matches your app's redirect URI
+
+
+# 🎯 Define the scopes your app will need
+#SCOPES = ['User.Read', 'Calendars.ReadWrite', 'Mail.ReadWrite', 'Notes.ReadWrite.All', 'Files.ReadWrite.All']
+SCOPES = ['User.Read']
+
+# New function to generate PKCE code verifier and challenge
+def generate_pkce_codes():
+    code_verifier = secrets.token_urlsafe(128)[:128]
+    code_challenge = base64.urlsafe_b64encode(hashlib.sha256(code_verifier.encode()).digest()).decode().rstrip('=')
+    return code_verifier, code_challenge
+
+def get_msal_app(code_challenge=None):
+    return msal.PublicClientApplication(
+        client_id=APPLICATION_ID_KEY,
+        authority=AUTHORITY_URL
+    )
+
+# Ensure that the code_verifier is correctly stored before redirect
+if 'code_verifier' not in st.session_state:
+    # Generate PKCE codes
+    code_verifier, code_challenge = generate_pkce_codes()
+    st.session_state['code_verifier'] = code_verifier
+else:
+    code_verifier = st.session_state['code_verifier']
+    code_challenge = base64.urlsafe_b64encode(hashlib.sha256(code_verifier.encode()).digest()).decode().rstrip('=')
+
+# Create the MSAL instance for acquiring tokens
+client_instance = get_msal_app()
+
+# 🔐 Acquire access token using authorization code
+def get_access_token(code):
+    client_instance = get_msal_app()
+    
+    # Debug: Print MSAL app configuration (be careful not to expose secrets)
+    st.write("Debug: MSAL App Configuration:")
+    st.write(f"Client ID: {APPLICATION_ID_KEY[:5]}...") # Show first 5 chars
+    st.write(f"Authority: {AUTHORITY_URL}")
+    st.write(f"Redirect URI: {REDIRECT_URI}")
+    
+    try:
+        result = client_instance.acquire_token_by_authorization_code(
+            code=code,
+            scopes=SCOPES,
+            redirect_uri=REDIRECT_URI
+        )
+        
+        if 'access_token' in result:
+            return result['access_token']
+        else:
+            error_description = result.get('error_description', 'No error description provided')
+            raise Exception(f"Error acquiring token: {error_description}")
+    except Exception as e:
+        st.error(f"Exception in get_access_token: {str(e)}")
+        raise
+        #st.stop()
+
+
+def get_access_token(code, code_verifier):
+    client_instance = get_msal_app()
+    
+    st.write("Debug: MSAL App Configuration:")
+    st.write(f"Client ID: {APPLICATION_ID_KEY[:5]}...")
+    st.write(f"Authority: {AUTHORITY_URL}")
+    st.write(f"Redirect URI: {REDIRECT_URI}")
+    
+    try:
+        result = client_instance.acquire_token_by_authorization_code(
+            code=code,
+            scopes=SCOPES,
+            redirect_uri=REDIRECT_URI,
+            code_verifier=code_verifier  # Include the code verifier here
+        )
+        
+        if 'access_token' in result:
+            return result['access_token']
+        else:
+            error_description = result.get('error_description', 'No error description provided')
+            raise Exception(f"Error acquiring token: {error_description}")
+    except Exception as e:
+        st.error(f"Exception in get_access_token: {str(e)}")
+        raise
+        
+def process_query_params():
+    # ⚙️q= Run ArXiv search from query parameters
+    try:
+        query_params = st.query_params
+        st.write("Debug: All query parameters:", query_params)
+
+        if 'error' in query_params:
+            error = query_params.get('error')
+            error_description = query_params.get('error_description', 'No description provided')
+            st.error(f"Authentication Error: {error}")
+            st.error(f"Error Description: {urllib.parse.unquote(error_description)}")
+            st.stop()
+
+        if 'code' in query_params:
+            code = query_params.get('code')
+            st.write('🔑 Authorization Code Obtained:', code[:10] + '...')
+            
+            try:
+                code_verifier = st.session_state.get('code_verifier')
+                if not code_verifier:
+                    st.error("Code verifier not found in session state.")
+                    st.stop()
+                
+                access_token = get_access_token(code, code_verifier)
+                st.session_state['access_token'] = access_token
+                st.success("Access token acquired successfully!")
+                # Clear the code from the URL
+                st.experimental_set_query_params()
+                st.rerun()
+            except Exception as e:
+                st.error(f"Error acquiring access token: {str(e)}")
+                st.stop()
+        else:
+            st.warning("No authorization code found in the query parameters.")
+
+        
+        query = (query_params.get('q') or query_params.get('query') or [''])
+        if len(query) > 1: 
+            #result = search_arxiv(query)
+            #result2 = search_glossary(result) 
+    
+            filesearch = PromptPrefix + query
+            st.markdown(filesearch)
+            process_text(filesearch)
+    except:
+        st.markdown(' ')
+    
+    if 'action' in st.query_params:
+        action = st.query_params()['action'][0]  # Get the first (or only) 'action' parameter
+        if action == 'show_message':
+            st.success("Showing a message because 'action=show_message' was found in the URL.")
+        elif action == 'clear':
+            clear_query_params()
+            #st.rerun()
+    
+    if 'query' in st.query_params:
+        query = st.query_params['query'][0]  # Get the query parameter
+        # Display content or image based on the query
+        display_content_or_image(query)
+
+
+
+
+# 🏃‍♂️ Main application function
+def main():
+    st.title("🦄 MS Graph API with AI & Cloud Integration with M365")
+
+    process_query_params()
+
+    if 'access_token' not in st.session_state:
+        if 'code_verifier' not in st.session_state:
+            # Ensure the code_verifier is available
+            st.error("Code verifier missing. Please restart the login process.")
+            st.stop()
+
+        client_instance = get_msal_app()
+        auth_url = client_instance.get_authorization_request_url(
+            scopes=SCOPES,
+            redirect_uri=REDIRECT_URI,
+            code_challenge=code_challenge,
+            code_challenge_method="S256"
+        )
+        st.write('👋 Please [click here]({}) to log in and authorize the app.'.format(auth_url))
+        st.stop()
+
+
+    # 🚀 Sidebar navigation
+    st.sidebar.title("Navigation")
+    menu = st.sidebar.radio("Go to", [
+        "1️⃣ Dashboard",
+        "🏠 Landing Page",
+        "📅 Upcoming Events",
+        "📆 Schedule",
+        "📝 Agenda",
+        "🔍 Event Details",
+        "➕ Add Event",
+        "🔎 Filter By"
+    ])
+    
+    # 📝 M365 Products with MS Graph Integration & AI Features
+    st.sidebar.title("📝 M365 Products")
+    st.sidebar.write("Toggle integration for each product:")
+    
+    # 🎛️ Product Integration Toggles
+    products = {
+        "📧 Outlook": {
+            "ai_capabilities": "Copilot for enhanced email writing, calendar management, and scheduling.",
+            "graph_api": "Access to mail, calendar, contacts, and events."
+        },
+        "📒 OneNote": {
+            "ai_capabilities": "Content suggestion, note organization, and OCR for extracting text from images.",
+            "graph_api": "Manage notebooks, sections, and pages."
+        },
+        "📊 Excel": {
+            "ai_capabilities": "Copilot for advanced data analysis, data insights, and formula generation.",
+            "graph_api": "Create and manage worksheets, tables, charts, and workbooks."
+        },
+        "📄 Word": {
+            "ai_capabilities": "Copilot for document drafting, summarization, and grammar improvements.",
+            "graph_api": "Document content access, templates, and file management."
+        },
+        "🗃️ SharePoint": {
+            "ai_capabilities": "Intelligent search, document tagging, and metadata extraction.",
+            "graph_api": "Access to sites, lists, files, and document libraries."
+        },
+        "📅 Teams": {
+            "ai_capabilities": "Copilot for meeting summaries, transcription, and chat suggestions.",
+            "graph_api": "Manage chats, teams, channels, and meetings."
+        },
+        "💬 Viva": {
+            "ai_capabilities": "Personalized learning insights, well-being insights, and productivity suggestions.",
+            "graph_api": "Access to user analytics and learning modules."
+        },
+        "🚀 Power Platform": {
+            "ai_capabilities": "Automation with AI Builder, data insights, and custom AI models.",
+            "graph_api": "Automation workflows, app creation, and data visualization."
+        },
+        "🧠 Copilot": {
+            "ai_capabilities": "Embedded across Word, Excel, Outlook, Teams, and more for AI-driven productivity.",
+            "graph_api": "Underpins Copilot's access to data and integrations."
+        },
+        "🗂️ OneDrive": {
+            "ai_capabilities": "Intelligent file organization and search.",
+            "graph_api": "File and folder access, sharing, and metadata."
+        },
+        "💡 PowerPoint": {
+            "ai_capabilities": "Design suggestions, presentation summarization, and speaker coaching.",
+            "graph_api": "Presentation creation, slide management, and templates."
+        },
+        "📚 Microsoft Bookings": {
+            "ai_capabilities": "Automated scheduling and reminders.",
+            "graph_api": "Booking calendars, services, and appointment details."
+        },
+        "📓 Loop": {
+            "ai_capabilities": "Real-time collaboration and content suggestions.",
+            "graph_api": "Access to shared workspaces and collaborative pages."
+        },
+        "🗣️ Translator": {
+            "ai_capabilities": "Real-time language translation and text-to-speech.",
+            "graph_api": "Integrated into communication and translation services."
+        },
+        "📋 To Do & Planner": {
+            "ai_capabilities": "Task prioritization and smart reminders.",
+            "graph_api": "Task creation, management, and synchronization."
+        },
+        "🔗 Azure OpenAI Service": {
+            "ai_capabilities": "Access to GPT models for custom AI implementations.",
+            "graph_api": "Used indirectly for building custom AI models into workflows."
+        }
+    }
+    
+    # 🗳️ Create toggles for each product
+    selected_products = {}
+    for product, info in products.items():
+        selected = st.sidebar.checkbox(product)
+        if selected:
+            st.sidebar.write(f"**AI Capabilities:** {info['ai_capabilities']}")
+            st.sidebar.write(f"**Graph API:** {info['graph_api']}")
+            selected_products[product] = True
+    
+    # 🔑 Authentication
+    if 'access_token' not in st.session_state:
+        # 🕵️‍♂️ Check for authorization code in query parameters
+        query_params = st.query_params
+        query = (query_params.get('code'))
+        #if len(query) > 1: 
+        
+        #st.write('Parsing query ' + query_params )
+        if 'code' in query_params:
+            #code = query_params['code'][0]
+            code = query_params.get('code')
+            
+            st.write('🔑Access Code Obtained from MS Graph Redirect🔑!:' + code)
+            
+            st.write('🔑 Acquiring access token from redirect URL for code parameter.')
+            access_token = get_access_token(code)
+            
+            st.session_state['access_token'] = access_token  # 🔑 Save it for later
+            
+            st.rerun()  # Reload the app to clear the code from URL
+        else:
+            # 📢 Prompt user to log in
+            client_instance = get_msal_app()
+            authorization_url = client_instance.get_authorization_request_url(
+                scopes=SCOPES,
+                redirect_uri=REDIRECT_URI
+            )
+            st.write('👋 Please [click here]({}) to log in and authorize the app.'.format(authorization_url))
+            st.stop()
+
+                
+    else:
+        # 🥳 User is authenticated, proceed with the app
+        access_token = st.session_state['access_token']
+        headers = {'Authorization': 'Bearer ' + access_token}
+        
+        # 🤗 Greet the user
+        response = requests.get('https://graph.microsoft.com/v1.0/me', headers=headers)
+        if response.status_code == 200:
+            user_info = response.json()
+            st.sidebar.write(f"👋 Hello, {user_info['displayName']}!")
+        else:
+            st.error('Failed to fetch user info.')
+            st.write(response.text)
+        
+        # 🎛️ Handle menu options
+        if menu == "1️⃣ Dashboard with Widgets":
+            st.header("1️⃣ Dashboard with Widgets")
+            st.write("Widgets will be displayed here. 🎛️")
+            # Add your widgets here
+        
+        elif menu == "🏠 Landing Page":
+            st.header("🏠 Landing Page")
+            st.write("Welcome to the app! 🥳")
+            # Add landing page content here
+        
+        elif menu == "📅 Upcoming Events":
+            st.header("📅 Upcoming Events")
+            events = get_upcoming_events(access_token)
+            for event in events:
+                st.write(f"📆 {event['subject']} on {event['start']['dateTime']}")
+            # Display upcoming events
+        
+        elif menu == "📆 Schedule":
+            st.header("📆 Schedule")
+            schedule = get_schedule(access_token)
+            st.write(schedule)
+            # Display schedule
+        
+        elif menu == "📝 Agenda":
+            st.header("📝 Agenda")
+            st.write("Your agenda for today. 📋")
+            # Display agenda
+        
+        elif menu == "🔍 Event Details":
+            st.header("🔍 Event Details")
+            event_id = st.text_input("Enter Event ID")
+            if event_id:
+                event_details = get_event_details(access_token, event_id)
+                st.write(event_details)
+            # Display event details based on ID
+        
+        elif menu == "➕ Add Event":
+            st.header("➕ Add Event")
+            event_subject = st.text_input("Event Subject")
+            event_start = st.date_input("Event Start Date")
+            event_start_time = st.time_input("Event Start Time")
+            event_end = st.date_input("Event End Date")
+            event_end_time = st.time_input("Event End Time")
+            if st.button("Add Event"):
+                event_details = {
+                    "subject": event_subject,
+                    "start": {
+                        "dateTime": f"{event_start}T{event_start_time}",
+                        "timeZone": "UTC"
+                    },
+                    "end": {
+                        "dateTime": f"{event_end}T{event_end_time}",
+                        "timeZone": "UTC"
+                    }
+                }
+                add_event(access_token, event_details)
+                st.success("Event added successfully! 🎉")
+            # Form to add new event
+        
+        elif menu == "🔎 Filter By":
+            st.header("🔎 Filter Events")
+            filter_criteria = st.text_input("Enter filter criteria")
+            if filter_criteria:
+                filtered_events = filter_events(access_token, filter_criteria)
+                for event in filtered_events:
+                    st.write(f"📅 {event['subject']} on {event['start']['dateTime']}")
+            # Filter events based on criteria
+        
+        # 🧩 Handle selected products
+        if selected_products:
+            st.header("🧩 M365 Product Integrations")
+            for product in selected_products:
+                st.subheader(f"{product}")
+                # Call the function corresponding to the product
+                handle_product_integration(access_token, product)
+        else:
+            st.write("No products selected.")
+        pass
+
+# 🧩 Function to handle product integration
+def handle_product_integration(access_token, product):
+    if product == "📧 Outlook":
+        st.write("Accessing Outlook data...")
+        # Implement Outlook integration
+        inbox_messages = get_outlook_messages(access_token)
+        st.write("Inbox Messages:")
+        for msg in inbox_messages:
+            st.write(f"✉️ {msg['subject']}")
+    elif product == "📒 OneNote":
+        st.write("Accessing OneNote data...")
+        # Implement OneNote integration
+        notebooks = get_onenote_notebooks(access_token)
+        st.write("Notebooks:")
+        for notebook in notebooks:
+            st.write(f"📔 {notebook['displayName']}")
+    elif product == "📊 Excel":
+        st.write("Accessing Excel data...")
+        # Implement Excel integration
+        st.write("Excel integration is a placeholder.")
+    elif product == "📄 Word":
+        st.write("Accessing Word documents...")
+        # Implement Word integration
+        st.write("Word integration is a placeholder.")
+    elif product == "🗃️ SharePoint":
+        st.write("Accessing SharePoint sites...")
+        # Implement SharePoint integration
+        sites = get_sharepoint_sites(access_token)
+        st.write("Sites:")
+        for site in sites:
+            st.write(f"🌐 {site['displayName']}")
+    elif product == "📅 Teams":
+        st.write("Accessing Teams data...")
+        # Implement Teams integration
+        teams = get_user_teams(access_token)
+        st.write("Teams:")
+        for team in teams:
+            st.write(f"👥 {team['displayName']}")
+    # Add additional product integrations as needed
+    else:
+        st.write(f"No integration implemented for {product}.")
+
+# 📨 Function to get Outlook messages
+def get_outlook_messages(access_token):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get('https://graph.microsoft.com/v1.0/me/messages?$top=5', headers=headers)
+    if response.status_code == 200:
+        messages = response.json().get('value', [])
+        return messages
+    else:
+        st.error('Failed to fetch messages.')
+        st.write(response.text)
+        return []
+
+# 📔 Function to get OneNote notebooks
+def get_onenote_notebooks(access_token):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get('https://graph.microsoft.com/v1.0/me/onenote/notebooks', headers=headers)
+    if response.status_code == 200:
+        notebooks = response.json().get('value', [])
+        return notebooks
+    else:
+        st.error('Failed to fetch notebooks.')
+        st.write(response.text)
+        return []
+
+# 🌐 Function to get SharePoint sites
+def get_sharepoint_sites(access_token):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get('https://graph.microsoft.com/v1.0/sites?search=*', headers=headers)
+    if response.status_code == 200:
+        sites = response.json().get('value', [])
+        return sites
+    else:
+        st.error('Failed to fetch sites.')
+        st.write(response.text)
+        return []
+
+# 👥 Function to get user's Teams
+def get_user_teams(access_token):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get('https://graph.microsoft.com/v1.0/me/joinedTeams', headers=headers)
+    if response.status_code == 200:
+        teams = response.json().get('value', [])
+        return teams
+    else:
+        st.error('Failed to fetch teams.')
+        st.write(response.text)
+        return []
+
+# 📅 Function to get upcoming events
+def get_upcoming_events(access_token):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get('https://graph.microsoft.com/v1.0/me/events?$orderby=start/dateTime&$top=10', headers=headers)
+    if response.status_code == 200:
+        events = response.json().get('value', [])
+        return events
+    else:
+        st.error('Failed to fetch upcoming events.')
+        st.write(response.text)
+        return []
+
+# 📆 Function to get schedule (Placeholder)
+def get_schedule(access_token):
+    # Implement API call to get schedule
+    return "📆 Your schedule goes here."
+
+# ➕ Function to add a new event
+def add_event(access_token, event_details):
+    headers = {
+        'Authorization': 'Bearer ' + access_token,
+        'Content-Type': 'application/json'
+    }
+    response = requests.post('https://graph.microsoft.com/v1.0/me/events', headers=headers, json=event_details)
+    if response.status_code == 201:
+        st.success('Event created successfully! 🎉')
+    else:
+        st.error('Failed to create event.')
+        st.write(response.text)
+
+# 🔍 Function to get event details
+def get_event_details(access_token, event_id):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    response = requests.get(f'https://graph.microsoft.com/v1.0/me/events/{event_id}', headers=headers)
+    if response.status_code == 200:
+        event = response.json()
+        return event
+    else:
+        st.error('Failed to fetch event details.')
+        st.write(response.text)
+        return {}
+
+# 🔎 Function to filter events
+def filter_events(access_token, filter_criteria):
+    headers = {'Authorization': 'Bearer ' + access_token}
+    # Implement filtering logic based on criteria
+    response = requests.get(f"https://graph.microsoft.com/v1.0/me/events?$filter=startswith(subject,'{filter_criteria}')", headers=headers)
+    if response.status_code == 200:
+        events = response.json().get('value', [])
+        return events
+    else:
+        st.error('Failed to filter events.')
+        st.write(response.text)
+        return []
+
+# 🚀 Run the main function
+if __name__ == "__main__":
+    main()