🔐 Streamlit Login Form

A Streamlit authentication component that creates a user login form connected to a Supabase DB.

🎈 Try the Demo App

🚀 Features

• One-line Integration: Add authentication to your Streamlit app with a single function call.
• Secure Password Hashing: Uses the award-winning Argon2 algorithm for password security.
• Password Constraints: Enforces strong password rules out-of-the-box.
• Multi-Mode Login: Supports account creation, login, and guest access.
• Automatic Password Hashing: Plaintext passwords are automatically hashed on login or via a bulk update.
• Session Management: Seamlessly handles login and logout, with a clear session state and a logout button that replaces the login form.
• Customizable UI: Easily change form labels, placeholders, and messages.
• Supabase Integration: Connects directly to your Supabase database for persistent user management.
• Extensible: Designed for future support of other databases (e.g., MySQL).

🏗️ Installation

1. Install st-login-form

pip install st-login-form

2. Create a Supabase project as mentioned here
3. Create a table to store the usernames and passwords. A sample DDL query is shown below:

CREATE TABLE users (
    username text not null default ''::text,
    password text not null,
    constraint users_pkey primary key (username),
    constraint users_username_key unique (username),
    constraint users_password_check check (
      (
        length(
          trim(
            both
            from
              password
          )
        ) > 1
      )
    ),
    constraint users_username_check check (
      (
        length(
          trim(
            both
            from
              username
          )
        ) > 1
      )
    )
  ) tablespace pg_default;

4. Follow the rest of the steps from here to connect your Streamlit app to Supabase

🖊️ Usage

On authentication, login_form() sets the st.session_state['authenticated'] to True, and replaces the login form with a logout button. st.session_state['username'] is set to the provided username for a new or existing user, and to None for guest login.

import streamlit as st

from st_login_form import login_form

supabase_connection = login_form()

if st.session_state["authenticated"]:
    if st.session_state["username"]:
        st.success(f"Welcome {st.session_state['username']}")
        ...

    else:
        st.success("Welcome guest")
        ...
else:
    st.error("Not authenticated")

⬅️ Logging out

After a user is authenticated, the login form is fully replaced by a Logout button. Clicking this button will log the user out and bring back the login form.

You can also log out programmatically by calling:

from st_login_form import logout
logout()  # This will reset authentication and rerun the app

🔑 Hashing existing plaintext passwords

Plaintext password for a user is automatically hashed during a login attempt.

To bulk-update all existing plaintext passwords in the table, use the hash_current_passwords() method.

💡 API Reference

• login_form()

  def login_form(
      *,
      supabase_connection: Optional[SupabaseConnection] = None,
      title: str = "Authentication",
      icon: str = ":material/lock:",
      user_tablename: str = "users",
      username_col: str = "username",
      password_col: str = "password",
      constrain_password: bool = True,
      create_title: str = ":material/add_circle: Create new account",
      login_title: str = ":material/login: Login to existing account",
      allow_guest: bool = True,
      allow_create: bool = True,
      guest_title: str = ":material/visibility_off: Guest login",
      create_username_label: str = "Create a unique username",
      create_username_placeholder: str = None,
      create_username_help: str = None,
      create_password_label: str = "Create a password",
      create_password_placeholder: str = None,
      create_password_help: str = ":material/warning: Password cannot be recovered if lost",
      create_retype_password_label: str = "Retype password",
      create_retype_password_placeholder: str = None,
      create_retype_password_help: str = None,
      password_constraint_check_fail_message: str = "Password must contain at least 8 characters, including one uppercase letter, one lowercase letter, one number, and one special character (`@$!%*?&_^#- `).",
      password_mismatch_message: str = "Passwords do not match",
      create_submit_label: str = ":material/add_circle: Create account",
      login_username_label: str = "Enter your unique username",
      login_username_placeholder: str = None,
      login_username_help: str = None,
      login_password_label: str = "Enter your password",
      login_password_placeholder: str = None,
      login_password_help: str = None,
      login_submit_label: str = ":material/login: Login",
      login_error_message: str = "Wrong username/password",
      guest_submit_label: str = "Login as guest",
  ) -> Optional[SupabaseConnection]:
      """
      Creates a user login form in Streamlit apps.
  
      Connects to a Supabase DB using `SUPABASE_URL` and `SUPABASE_KEY` Streamlit secrets, unless a connection instance is provided.
      Sets `session_state["authenticated"]` to True if the login is successful.
      Sets `session_state["username"]` to provided username or new or existing user, and to `None` for guest login.
  
      Args:
          supabase_connection (Optional[SupabaseConnection]): An optional Supabase connection instance. If not provided, one will be created.
          title (str): The title of the login form. Default is "Authentication".
          icon (str): The icon to display next to the title. Default is ":material/lock:".
          user_tablename (str): The name of the table in the database that stores user information. Default is "users".
          username_col (str): The name of the column in the user table that stores usernames. Default is "username".
          password_col (str): The name of the column in the user table that stores passwords. Default is "password".
          constrain_password (bool): Whether to enforce password constraints (at least 8 characters, including one uppercase letter, one lowercase letter, one number, and one special character (`@$!%*?&_^#- `)). Default is True.
          create_title (str): The title of the create new account tab. Default is ":material/add_circle: Create new account".
          login_title (str): The title of the login to existing account tab. Default is ":material/login: Login to existing account".
          allow_guest (bool): Whether to allow guest login. Default is True.
          allow_create (bool): Whether to allow creating new accounts. Default is True.
          guest_title (str): The title of the guest login tab. Default is ":material/visibility_off: Guest login".
          create_username_label (str): The label for the create username input field. Default is "Create a unique username".
          create_username_placeholder (str): The placeholder text for the create username input field. Default is None.
          create_username_help (str): The help text for the create username input field. Default is None.
          create_password_label (str): The label for the create password input field. Default is "Create a password".
          create_password_placeholder (str): The placeholder text for the create password input field. Default is None.
          create_password_help (str): The help text for the create password input field. Default is ":material/warning: Password cannot be recovered if lost".
          create_retype_password_label (str): The label for the create retype password input field. Default is "Retype password".
          create_retype_password_placeholder (str): The placeholder text for the create retype password input field. Default is None.
          create_retype_password_help (str): The help text for the create retype password input field. Default is None.
          create_submit_label (str): The label for the create account submit button. Default is ":material/add_circle: Create account".
          password_constraint_check_fail_message (str): The error message displayed when the password does not meet the constraints. Default is "Password must contain at least 8 characters, including one uppercase letter, one lowercase letter, one number, and one special character (`@$!%*?&_^#- `).".
          password_mismatch_message (str): The error message displayed when the passwords do not match. Default is "Passwords do not match".
          login_username_label (str): The label for the login username input field. Default is "Enter your unique username".
          login_username_placeholder (str): The placeholder text for the login username input field. Default is None.
          login_username_help (str): The help text for the login username input field. Default is None.
          login_password_label (str): The label for the login password input field. Default is "Enter your password".
          login_password_placeholder (str): The placeholder text for the login password input field. Default is None.
          login_password_help (str): The help text for the login password input field. Default is None.
          login_submit_label (str): The label for the login submit button. Default is ":material/login: Login".
          login_error_message (str): The error message displayed when the username or password is incorrect. Default is "Wrong username/password".
          guest_submit_label (str): The label for the guest login button. Default is "Login as guest".
      Returns:
          Optional[SupabaseConnection]: The Supabase connection instance for performing downstream Supabase operations, or `None` if the user is not authenticated.
      """

• hash_current_passwords()

  def hash_current_passwords(
      user_tablename: str = "users",
      username_col: str = "username",
      password_col: str = "password",
  ) -> None:
      """
      Hashes all current plaintext passwords stored in a database table (in-place).
  
      Args:
          user_tablename (str, optional): The name of the user table. Defaults to "users".
          username_col (str, optional): The column name for usernames. Defaults to "username".
          password_col (str, optional): The column name for passwords. Defaults to "password".
  
      Returns:
          None
      """

🖼️ Gallery

Some notable Streamlit apps using st-login-form

• SmartExam.io: SmartExam is an AI app that leverages University lectures to create interactive test exams.

Want to feature your app? Create a PR!

🛣️ Project Roadmap

Here are some features that are planned for future releases across the library and demo app. If you want to contribute to any of these features, feel free to open a PR!

Library Features

• Add init() method to create required database tables
• Customize password constraints (minimum length, allowed characters, etc.)
• Capture additional login metadata - created_at, last_login_at, num_logins, etc.
• Add admin panel to set user roles and permissions
• Add password recovery option
• Add cookies to let users remain logged in
• Support additional databases:
  • MySQL

Demo App Features

• Allow users to customise demo login form
• Add code preview for the rendered login form

Chores

• Add tests

🙇 Acknowledgements

• Streamlit for the amazing Streamlit framework and promoting this library
• Ahmed Ramadan for implementing password hashing
• Everyone who has shared feedback to improve this library!

🤝 Get Involved!

Your feedback and contributions can help shape the future of Streamlit Login Form. If you have ideas or features you'd like to see, let's collaborate!

• Contribute: Submit PRs or open issues on GitHub.
• Connect: Have questions or suggestions? Reach out to me on LinkedIn or email.

💖 Support Streamlit Login Form

Love Streamlit Login Form? Here's how you can show your support:

• Star: Give us a star on GitHub and help spread the word!
• Share: Tell your friends and colleagues about us on social media.
• Donate: Buy me a coffee and fuel further development!

Thank you for supporting Streamlit Login Form!