adding security scopes to dashboard

[rachel-labri-tipton]

Detailed Description

This issue is the beginning of a discussion of how to add authorization to the dashboard.

• Discuss how to add auth0 scopes to the app
• Add warning to if we are adding a non ocf user to the ocf group.
• Spike - find popup component to use in app to double check user agrees to an action (ie. update, delete, etc.)
• Currently users who might add users or add sites are Peter, Brad, Sol, Zak, and Rachel

Context

The main users of the ocf dashboard will be internal, but it's good to think about who will have permission to do what. If we're deleting a site, it would be good that only certain people have that authorization.

[peterdudfield]

https://auth0.com/blog/streamlit-user-and-api-authentication/

[peterdudfield]

this simple version looks good - https://github.com/conradbez/streamlit-auth0-example/blob/main/test.py. This uses streamlit-auth0-component but need to make sure we can use scopes

[peterdudfield]

from auth0_component import login_button
import streamlit as st

clientId = "...."
domain = "...."

user_info = login_button(clientId, domain = domain)
st.write(user_info)

[rachel-labri-tipton]

thanks, @peterdudfield, I'll have a go at this. did you try anything already?

[peterdudfield]

Yea, tried this and managed to get a login to work

from auth0_component import login_button

clientId = "xxx"
domain = "xxx"


ssl._create_default_https_context = ssl._create_unverified_context

def check_password():
    """Returns `True` if the user had the correct password."""

    user_info = login_button(clientId=clientId, domain=domain, key='login')

    return user_info

i had to make a new application - https://manage.auth0.com/dashboard/eu/nowcasting-dev/applications/VqaPLArS3LG97MF4uY6RSQmJV0hiNwxN/settings.

Need to get logout working ....

[peterdudfield]

See comment here for trying to logout - conradbez/streamlit-auth0#18

[peterdudfield]

Might be better to use https://github.com/chris-garrett/garrett-streamlit-auth0

[peterdudfield]

Might be better to use https://github.com/chris-garrett/garrett-streamlit-auth0

This one works