auth logic

app.py

@@ -392,7 +392,38 @@ def check_internet_connection(host="8.8.8.8", port=53, timeout=3):
         return False
 
 
+def _setup_gcp_credentials():
+    """
+    Sets up Google Cloud credentials from an environment variable.
+    If GOOGLE_APPLICATION_CREDENTIALS contains a JSON string, it writes
+    it to a temporary file and updates the environment variable to point
+    to that file. This is useful for environments like Hugging Face Spaces
+    where secrets are provided as string values.
+    """
+    gcp_credentials_json = os.environ.get("GOOGLE_APPLICATION_CREDENTIALS")
+    if gcp_credentials_json and gcp_credentials_json.strip().startswith("{"):
+        try:
+            # Validate JSON
+            credentials_dict = json.loads(gcp_credentials_json)
+            
+            # Create a temporary file to store the credentials
+            temp_dir = tempfile.gettempdir()
+            temp_file_path = os.path.join(temp_dir, "gcp_credentials.json")
+            
+            with open(temp_file_path, "w") as f:
+                json.dump(credentials_dict, f)
+            
+            os.environ["GOOGLE_APPLICATION_CREDENTIALS"] = temp_file_path
+            print(f"✅ Google Cloud credentials successfully set from environment variable to: {temp_file_path}")
+        except json.JSONDecodeError as e:
+            print(f"❌ Error decoding GOOGLE_APPLICATION_CREDENTIALS JSON: {e}")
+        except Exception as e:
+            print(f"❌ An unexpected error occurred while setting up GCP credentials: {e}")
+    else:
+        print("ℹ️ GOOGLE_APPLICATION_CREDENTIALS environment variable not found or not a JSON string. Assuming credentials are set via other means (e.g., gcloud CLI, default ADC).")
+
 if __name__ == "__main__":
+    _setup_gcp_credentials()
     # No local database initialization needed
 
     field_mode_ui = create_field_mode_ui()