New Component: streamlit-oauth

Custom Components
41

Hi

For now, you can share the authentication state across pages using session_state.

The functionality to use cookies or local storage is planned to be added in the future.

42

Hi @dnplus,
Thanks for this great library.
Is there any way to retrieve the email address and/or username of the authenticated user?

43

Have a look on this example.

44

Can anyone help with GitHub auth please?

45

Thank you so much, this was exactly what I was looking for. Couldnā€™t figure out the button + url and you provide that!

46

Thank you @dnplus for such a helpful component.
I am able to easily integrate it ā€¦ I am however looking for some guidance here.
After authentication, I would like to use the user to create google slides programmatically using his accountā€¦ not sure how to use the response from oauth2.authorize_button() to a credential in service = build(ā€˜slidesā€™, ā€˜v1ā€™, credentials=). the credential is of type oauth2client.Credentials or google.auth.credentials.Credentials, credentials to be used for authentication.

Any suggestion would really helpā€¦ Truly appreciateā€¦

47

refer to google.auth.credentials module ā€” google-auth 1.30.0 documentation

Seems like it is a class to represent the token response.

I think you can fill the necessary parameters from oauth2.authorize_button() into that class to create an object to use it

1 Like
48

Thank you @dnplus for that replyā€¦ One more questionā€¦ how can we provide more scopes? seems you are loading dotenv which has scope variable defined: SCOPE = os.environ.get(ā€œSCOPEā€) and then use it like:
scope=ā€œopenid email profileā€
If I want to add more scopes, how I can do so? is it possible to share the env file without the sensitive information.

49

It just an example, you can define scope directly and pass when calling authorize_button

oauth2.authorize_button("authorize", redirect_uri, "email openid") # split each scope with space
1 Like
50

hi, Do you have an example of using cookies to store the state? can you please point to the example? The issue I have is that page refresh triggers fresh login and session_state is lost

51

You can use streamlit-cookies-controller Ā· PyPI to save the session state.

52

Hi @dnplus,

I have code that looks like this for Oauth with pingID:


oauth2 = #initalized_correctly
# from your github
if 'token' not in st.session_state:
    result = oauth2.authorize_button(name="SSO", redirect_uri=os.environ['REDIRECT_URL'], scope=os.environ['SCOPE'], use_container_width=True, auto_click=True,  extras_params={'response_type': 'code'})
    if result and 'token' in result:
        st.session_state.token = result.get('token')
        st.rerun()
else:
        render_webpage()

but I get the following error signature starting with:
site-packages/streamlit_oauth/init.py", line xyz, in authorize_button
result[ā€˜tokenā€™] = asyncio.run(self.client.get_access_token(**args))

Also the auto_click does not work

53

whatā€™s the full error message?

And how you make sure the oauth2 object initialized correctly?

54

Enable CORS in your oauth provider. For example in Okta: Enable CORS in API ā†’ SECURITY ā†’ Trusted Origins

55

Hey all! Just wanted to mention here that with 1.42, we recently launched a native authentication feature in Streamlit! :partying_face: This letā€™s you add auth via OIDC/OAuth2 (e.g. ā€œLogin with Googleā€) to your app. Check out the docs here: User authentication and information - Streamlit Docs

56

@dnplus This is a great moduleā€”thank you for putting it together! Itā€™s working as expected for me. I do have a quick question though: is it possible to capture the userā€™s email address during the identification process?

Thanks

57

Thanks! Glad to hear itā€™s working well for you.

Regarding your question:
In theory, accessing the popupā€™s content from a parent window would violate browser security policies if they are on different origins, so it wouldnā€™t be feasible in that case.