Upload 4 files

README.md

@@ -133,4 +133,4 @@ See `CHANGELOG_V194.md` for the Model Pre-scan Decision Card UI pass.
 See `CHANGELOG_V195.md` for the Runtime CSS Cleanup with Legacy Safety Net pass.
 
 
-Current release: Agentic Space Factory v198.23.2.
+Current release: Agentic Space Factory v198.23.4.

app.py

@@ -8,7 +8,7 @@ from typing import Any
 
 import gradio as gr
 from fastapi import FastAPI, HTTPException, Request
-from fastapi.responses import HTMLResponse, JSONResponse, FileResponse, RedirectResponse
+from fastapi.responses import HTMLResponse, JSONResponse, FileResponse
 from huggingface_hub import HfApi, attach_huggingface_oauth
 
 from src.bucket import RunPaths, check_user_bucket, create_user_bucket, delete_run_folder, read_run_bundle, list_recent_runs, write_json, write_launch_metadata
@@ -407,13 +407,6 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
             raise HTTPException(status_code=404, detail="Asset not found")
         return FileResponse(path)
 
-    @fastapi_app.get("/login/huggingface")
-    async def login_redirect():  # type: ignore[no-untyped-def]
-        return RedirectResponse("/oauth/huggingface/login?_target_url=/")
-
-    @fastapi_app.get("/logout")
-    async def logout_redirect():  # type: ignore[no-untyped-def]
-        return RedirectResponse("/oauth/huggingface/logout?_target_url=/")
 
     @fastapi_app.get("/api/app-info")
     async def api_app_info(request: Request):  # type: ignore[no-untyped-def]
@@ -431,8 +424,8 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                 "workflows": ["build_from_model_card", "validate_existing_space", "runs_explorer"],
                 "custom_ui_status": "root_custom_ui",
                 "user": {"username": ctx["username"], "missing_scopes": ctx.get("missing_scopes", []), "warnings": ctx.get("warnings", []), "auth_lifetime": ctx.get("auth_lifetime")} if ctx else None,
-                "login_url": "/oauth/huggingface/login?_target_url=/",
-                "logout_url": "/oauth/huggingface/logout?_target_url=/",
+                "login_url": "/oauth/huggingface/login",
+                "logout_url": "/oauth/huggingface/logout",
                 "anonymous_eval": public_eval_config(ctx["username"] if ctx else None),
             }
         )
@@ -456,8 +449,8 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                 "auth_lifetime": ctx.get("auth_lifetime"),
                 "anonymous_eval": public_eval_config(ctx["username"] if ctx else None),
                 "expires_at": ctx.get("expires_at"),
-                "login_url": "/oauth/huggingface/login?_target_url=/",
-                "logout_url": "/oauth/huggingface/logout?_target_url=/",
+                "login_url": "/oauth/huggingface/login",
+                "logout_url": "/oauth/huggingface/logout",
             }
         )
 
@@ -545,9 +538,8 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                     "authenticated": False,
                     "reason": exc.detail,
                     "oauth_env": env_status,
-                    "login_url": "/oauth/huggingface/login?_target_url=/",
-                    "logout_url": "/oauth/huggingface/logout?_target_url=/",
-                    "embedded_login_advice": "Open sign-in in a new tab/window when the Space is embedded in an iframe.",
+                    "login_url": "/oauth/huggingface/login",
+                    "logout_url": "/oauth/huggingface/logout",
                 }
             )
         return JSONResponse(
@@ -556,8 +548,8 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                 "user": public_oauth_context(ctx),
                 "token_identity": verify_token_identity(ctx),
                 "oauth_env": env_status,
-                "login_url": "/oauth/huggingface/login?_target_url=/",
-                "logout_url": "/oauth/huggingface/logout?_target_url=/",
+                "login_url": "/oauth/huggingface/login",
+                "logout_url": "/oauth/huggingface/logout",
             }
         )