Add user authentication

.gitignore

@@ -3,4 +3,7 @@
 .DS_Store
 
 # Ignore python cache files
-__pycache__/
+__pycache__/
+
+# Ignore secrets
+.streamlit/secrets.toml

.streamlit/config.toml

@@ -0,0 +1,2 @@
+[client]
+showSidebarNavigation = false

app.py

@@ -1,4 +1,5 @@
 import streamlit as st
+import hmac
 
 # Standard imports
 import numpy as np
@@ -17,15 +18,88 @@ import seaborn as sns
 # Path manipulation
 from pathlib import Path
 import sys
-sys.path.append('./scripts')
 
 # Custom and other imports
 import project_config
 from utils import add_logo
+from menu import menu
 
 # Insert logo
-add_logo(project_config.MEDIA_DIR / 'gravity_logo.png')
+# add_logo(project_config.MEDIA_DIR / 'gravity_logo.png')
 
-# Page title
-st.title("Input")
+# Initialize st.session_state.role to None
+if "role" not in st.session_state:
+    st.session_state.role = None
 
+# # Retrieve the role from Session State to initialize the widget
+# st.session_state._role = st.session_state.role
+
+# def set_role():
+#     # Callback function to save the role selection to Session State
+#     st.session_state.role = st.session_state._role
+
+def check_password():
+    """Returns `True` if the user had a correct password."""
+
+    def login_form():
+        """Form with widgets to collect user information"""
+        with st.form("Credentials"):
+            st.text_input("Username", key="username")
+            st.text_input("Password", type="password", key="password")
+            st.form_submit_button("Log In", on_click=password_entered)
+
+    def password_entered():
+        """Checks whether a password entered by the user is correct."""
+        if st.session_state["username"] in st.secrets[
+            "passwords"
+        ] and hmac.compare_digest(
+            st.session_state["password"],
+            st.secrets.passwords[st.session_state["username"]],
+        ):
+            st.session_state["password_correct"] = True
+
+            # Retrieve user name
+            if st.session_state["username"] in st.secrets["users"]:
+                st.session_state["name"] = st.secrets["users"][st.session_state["username"]]
+            else:
+                st.session_state["name"] = st.session_state["username"]
+
+            # Check if the username is an admin
+            if st.session_state["username"] in st.secrets["admins"]['admins']:
+                st.session_state["role"] = "admin"
+            else:
+                st.session_state["role"] = "user"
+
+            # Check if username is in a team
+            if st.session_state["username"] in st.secrets["teams"]:
+                st.session_state["team"] = st.secrets["teams"][st.session_state["username"]]
+            else:
+                st.session_state["team"] = None
+
+            # Don't store the username or password
+            del st.session_state["password"]
+            # del st.session_state["username"]
+        else:
+            st.session_state["password_correct"] = False
+
+    # Return True if the username + password is validated
+    if st.session_state.get("password_correct", False):
+        return True
+
+    # Show inputs for username + password
+    login_form()
+    if "password_correct" in st.session_state:
+        st.error("😕 User not known or password incorrect.")
+    return False
+
+# # Selectbox to choose role
+# st.selectbox(
+#     "Select your role:",
+#     [None, "user", "admin", "super-admin"],
+#     key="_role",
+#     on_change=set_role,
+# )
+menu() # Render the dynamic menu!
+
+if not check_password():
+    st.stop()

menu.py

@@ -0,0 +1,34 @@
+# From https://docs.streamlit.io/develop/tutorials/multipage/st.page_link-nav
+import streamlit as st
+
+
+def authenticated_menu():
+
+    # Show a navigation menu for authenticated users
+    # st.sidebar.page_link("app.py", label="Switch Accounts", icon="🔒")
+    st.sidebar.page_link("pages/user.py", label="Profile", icon="👤")
+    st.sidebar.page_link("pages/validate.py", label="Input", icon="✅")
+    if st.session_state.role in ["admin"]:
+        st.sidebar.page_link("pages/admin.py", label="Manage Users", icon="🔧")
+
+
+def unauthenticated_menu():
+
+    # Show a navigation menu for unauthenticated users
+    st.sidebar.page_link("app.py", label="Log In", icon="🔒")
+
+
+def menu():
+    # Determine if a user is logged in or not, then show the correct navigation menu
+    if "role" not in st.session_state or st.session_state.role is None:
+        unauthenticated_menu()
+        return
+    authenticated_menu()
+
+
+def menu_with_redirect():
+    # Redirect users to the main page if not logged in, otherwise continue to
+    # render the navigation menu
+    if "role" not in st.session_state or st.session_state.role is None:
+        st.switch_page("app.py")
+    menu()

pages/admin.py

@@ -0,0 +1,13 @@
+import streamlit as st
+from menu import menu_with_redirect
+
+# Redirect to app.py if not logged in, otherwise show the navigation menu
+menu_with_redirect()
+
+# Verify the user's role
+if st.session_state.role not in ["admin"]:
+    st.warning("You do not have permission to view this page.")
+    st.stop()
+
+st.title("User Management")
+st.markdown(f"You are currently logged with the role of {st.session_state.role}.")

pages/user.py

@@ -0,0 +1,8 @@
+import streamlit as st
+from menu import menu_with_redirect
+
+# Redirect to app.py if not logged in, otherwise show the navigation menu
+menu_with_redirect()
+
+st.title("Welcome to Gravity")
+st.markdown(f"Hello, {st.session_state.name}!")

pages/{1_Validate.py → validate.py}

@@ -1,16 +1,15 @@
 import streamlit as st
+from menu import menu_with_redirect
 
 # Path manipulation
 from pathlib import Path
 import sys
-sys.path.append('..')
-sys.path.append('scripts')
 
 # Custom and other imports
 import project_config
 from utils import add_logo
 
-# Insert logo
-add_logo(project_config.MEDIA_DIR / 'gravity_logo.png')
+# Redirect to app.py if not logged in, otherwise show the navigation menu
+menu_with_redirect()
 
 st.title("Validate")

requirements.txt

@@ -5,4 +5,5 @@ matplotlib
 seaborn
 pathlib
 torch
-altair<5
+altair<5
+hmac