...

.env.example

@@ -4,9 +4,6 @@ SUPABASE_URL=
 SUPABASE_KEY=
 SUPABASE_STORAGE_BUCKET=
 
-# Email redirect URL for Supabase auth (registration & password reset)
-SUPABASE_EMAIL_REDIRECT=https://yozora721-pnp-chatbot-v1.hf.space/reset_password
-NEXT_PUBLIC_SITE_URL=https://yozora721-pnp-chatbot-v1.hf.space
 
 HUGGINGFACEHUB_API_TOKEN=
 LANGSMITH_TRACING=

app/auth.py

@@ -31,17 +31,100 @@ def auth_view():
             unsafe_allow_html=True
         )
 
-        # Hide sidebar and hamburger while on auth screens
+        # --- Password recovery handler (Supabase redirect) ---
+        # 1) Move hash params to query params on first load, then reload once
         st.markdown(
             """
-            <style>
-            [data-testid="stSidebar"] { display: none !important; }
-            [data-testid="collapsedControl"] { display: none !important; }
-            </style>
+            <script>
+            (function(){
+              // Check if we have hash parameters and haven't migrated yet
+              const hash = window.location.hash;
+              if (hash && hash.length > 1 && !sessionStorage.getItem('hash_migrated')) {
+                // Remove the # and parse as URLSearchParams
+                const hashParams = new URLSearchParams(hash.substring(1));
+                const queryParams = new URLSearchParams(window.location.search);
+                
+                // Copy all hash params to query params
+                let hasParams = false;
+                for (const [key, value] of hashParams.entries()) {
+                  queryParams.set(key, value);
+                  hasParams = true;
+                }
+                
+                if (hasParams) {
+                  // Build new URL with query params
+                  const newUrl = window.location.pathname + '?' + queryParams.toString();
+                  
+                  // Mark as migrated to prevent infinite loops
+                  sessionStorage.setItem('hash_migrated', 'true');
+                  
+                  // Replace current URL and clear hash
+                  window.history.replaceState(null, '', newUrl);
+                  window.location.hash = '';
+                  
+                  // Reload to let Streamlit process the new query params
+                  window.location.reload();
+                }
+              }
+            })();
+            </script>
             """,
             unsafe_allow_html=True,
         )
 
+        # 2) Read query params for recovery flow
+        try:
+            qp = st.query_params  # Streamlit >= 1.30
+            get_q = lambda k: qp.get(k, None)
+        except Exception:
+            qp = st.experimental_get_query_params()
+            get_q = lambda k: (qp.get(k, [None])[0] if isinstance(qp.get(k, None), list) else qp.get(k, None))
+
+        q_type = get_q("type")
+        if q_type == "recovery":
+            st.info("Reset password: silakan masukkan password baru Anda.")
+            access_token = get_q("access_token")
+            refresh_token = get_q("refresh_token")
+            with st.form("reset_password_form"):
+                npw = st.text_input("Password Baru", type="password")
+                npw2 = st.text_input("Konfirmasi Password Baru", type="password")
+                submit_reset = st.form_submit_button("Set Password Baru")
+            if submit_reset:
+                if not npw or len(npw) < 6:
+                    st.error("Password minimal 6 karakter.")
+                elif npw != npw2:
+                    st.error("Konfirmasi password tidak sama.")
+                elif not access_token or not refresh_token:
+                    st.error("Token pemulihan tidak ditemukan. Coba klik ulang tautan dari email.")
+                else:
+                    try:
+                        # Set current session using tokens from redirect
+                        supabase.auth.set_session(access_token, refresh_token)
+                        # Update user password
+                        supabase.auth.update_user({"password": npw})
+                        st.success("Password berhasil diubah. Silakan login kembali.")
+                        # Optional: clear recovery query params
+                        try:
+                            # Best-effort to clear params
+                            st.markdown(
+                                """
+                                <script>
+                                (function(){
+                                  const qp = new URLSearchParams(window.location.search);
+                                  ["type","access_token","refresh_token","expires_in","expires_at","token_type"].forEach(k=>qp.delete(k));
+                                  const newUrl = window.location.pathname + (qp.toString()?('?'+qp.toString()):'');
+                                  window.history.replaceState(null, '', newUrl);
+                                })();
+                                </script>
+                                """,
+                                unsafe_allow_html=True,
+                            )
+                        except Exception:
+                            pass
+                    except Exception as e:
+                        st.error(f"Gagal mengubah password: {e}")
+            # When in recovery mode, do not render login/register tabs
+            return
 
         # Auth tabs inside wrapper
         tab_login, tab_register, tab_forgot = st.tabs(["Login", "Register", "Forgot Password"])
@@ -91,11 +174,11 @@ def auth_view():
                     st.error("Password tidak sama.")
                 else:
                     try:
-                        # Prefer explicit env, then generic site URL, then production URL
+                        # Prefer explicit env, then generic site URL, then localhost for dev
                         redirect_url = os.getenv(
                             "SUPABASE_EMAIL_REDIRECT",
-                            os.getenv("NEXT_PUBLIC_SITE_URL", "https://yozora721-pnp-chatbot-v1.hf.space"),
-                        ) + "/reset_password"
+                            os.getenv("NEXT_PUBLIC_SITE_URL", "http://localhost:8501"),
+                        )
                         supabase.auth.sign_up({
                             "email": r_email,
                             "password": r_password,
@@ -112,11 +195,11 @@ def auth_view():
                 submitted_f = st.form_submit_button("Kirim Link Reset")
             if submitted_f:
                 try:
-                    # Prefer explicit env, then generic site URL, then production URL
+                    # Prefer explicit env, then generic site URL, then localhost for dev
                     redirect_url = os.getenv(
                         "SUPABASE_EMAIL_REDIRECT",
-                        os.getenv("NEXT_PUBLIC_SITE_URL", "https://yozora721-pnp-chatbot-v1.hf.space"),
-                    ) + "/reset_password"
+                        os.getenv("NEXT_PUBLIC_SITE_URL", "http://localhost:8501"),
+                    )
                     supabase.auth.reset_password_for_email(f_email, {"redirect_to": redirect_url})
                     st.success("Email reset password telah dikirim. Periksa kotak masuk Anda.")
                 except Exception as e:

pages/reset_password.py

@@ -1,162 +0,0 @@
-import os
-import base64
-import streamlit as st
-from app.db import supabase
-
-
-def main():
-    """Dedicated reset password page."""
-    
-    st.set_page_config(
-        page_title="Reset Password - PNP Bot", 
-        page_icon="assets/favicon.ico",
-        initial_sidebar_state="collapsed",
-    )
-    # Hide sidebar and hamburger completely
-    st.markdown(
-        """
-        <style>
-        [data-testid="stSidebar"] { display: none !important; }
-        [data-testid="collapsedControl"] { display: none !important; }
-        </style>
-        """,
-        unsafe_allow_html=True,
-    )
-    
-    # Center the content
-    left, center, right = st.columns([1, 2, 1])
-    with center:
-        # Header with logo
-        logo_path = os.path.join("assets", "pnp-logo.png")
-        
-        def get_base64_image(path):
-            with open(path, "rb") as f:
-                return base64.b64encode(f.read()).decode()
-        
-        encoded_logo = get_base64_image(logo_path)
-        
-        st.markdown(
-            f"""
-            <div style="text-align:center;">
-                <img src="data:image/png;base64,{encoded_logo}" width="100">
-                <h1 style="margin-top:0.25rem;">Reset Password</h1>
-                <p style="color: #666; margin-bottom: 2rem;">Masukkan password baru Anda</p>
-            </div>
-            """,
-            unsafe_allow_html=True
-        )
-        
-        # Get query parameters for recovery tokens
-        try:
-            qp = st.query_params  # Streamlit >= 1.30
-            get_q = lambda k: qp.get(k, None)
-        except Exception:
-            qp = st.experimental_get_query_params()
-            get_q = lambda k: (qp.get(k, [None])[0] if isinstance(qp.get(k, None), list) else qp.get(k, None))
-        
-        access_token = get_q("access_token")
-        refresh_token = get_q("refresh_token")
-        q_type = get_q("type")
-        
-        # Validate that this is a recovery request
-        if q_type != "recovery" or not access_token or not refresh_token:
-            st.error("⚠️ Link reset password tidak valid atau sudah kedaluwarsa.")
-            st.info("Silakan kembali ke halaman login dan minta link reset password yang baru.")
-            
-            if st.button("← Kembali ke Login", type="primary"):
-                # Redirect to root (main app)
-                st.markdown(
-                    """
-                    <script>
-                    window.location.href = window.location.origin + 
-                      (window.location.pathname.replace(/\/?pages\/?reset_password\/?$/,'/') || '/');
-                    </script>
-                    """,
-                    unsafe_allow_html=True,
-                )
-            return
-        
-        # Reset password form
-        with st.form("reset_password_form", clear_on_submit=False):
-            st.markdown("### 🔐 Password Baru")
-            
-            new_password = st.text_input(
-                "Password Baru",
-                type="password",
-                placeholder="Minimal 6 karakter",
-                help="Password harus minimal 6 karakter"
-            )
-            
-            confirm_password = st.text_input(
-                "Konfirmasi Password Baru",
-                type="password",
-                placeholder="Ulangi password baru"
-            )
-            
-            col1, col2 = st.columns([1, 1])
-            with col1:
-                submit_reset = st.form_submit_button("🔄 Update Password", type="primary", use_container_width=True)
-            with col2:
-                cancel_reset = st.form_submit_button("❌ Batal", use_container_width=True)
-        
-        if cancel_reset:
-            st.markdown(
-                """
-                <script>
-                window.location.href = window.location.origin + 
-                  (window.location.pathname.replace(/\/?pages\/?reset_password\/?$/,'/') || '/');
-                </script>
-                """,
-                unsafe_allow_html=True,
-            )
-        
-        if submit_reset:
-            # Validation
-            if not new_password:
-                st.error("❌ Password tidak boleh kosong.")
-                return
-            
-            if len(new_password) < 6:
-                st.error("❌ Password minimal 6 karakter.")
-                return
-            
-            if new_password != confirm_password:
-                st.error("❌ Konfirmasi password tidak sama.")
-                return
-            
-            # Update password
-            try:
-                with st.spinner("Mengupdate password..."):
-                    # Set current session using tokens from redirect
-                    supabase.auth.set_session(access_token, refresh_token)
-                    
-                    # Update user password
-                    result = supabase.auth.update_user({"password": new_password})
-                    
-                    if result:
-                        st.success("✅ Password berhasil diubah!")
-                        st.info("Silakan login dengan password baru Anda.")
-                        
-                        # Show countdown and auto-redirect to main app
-                        st.markdown(
-                            """
-                            <script>
-                            setTimeout(function(){
-                              window.location.href = window.location.origin + 
-                                (window.location.pathname.replace(/\/?pages\/?reset_password\/?$/,'/') || '/');
-                            }, 1500);
-                            </script>
-                            """,
-                            unsafe_allow_html=True,
-                        )
-                        st.caption("Mengalihkan ke halaman login...")
-                    else:
-                        st.error("❌ Gagal mengubah password. Silakan coba lagi.")
-                        
-            except Exception as e:
-                st.error(f"❌ Gagal mengubah password: {str(e)}")
-                st.info("Link mungkin sudah kedaluwarsa. Silakan minta link reset password yang baru.")
-
-
-if __name__ == "__main__":
-    main()