Use huggingface_hub library for token validation - more reliable authentication

app.py

@@ -367,9 +367,34 @@ with st.sidebar:
         if not token:
             return False, "", "Token cannot be empty"
         
-        # Use the HF whoami endpoint
+        # Remove any whitespace or newlines that might have been copied
+        token = "".join(token.split())
+        
+        # Try using huggingface_hub library if available, otherwise fall back to API
+        try:
+            from huggingface_hub import whoami
+            try:
+                user_info = whoami(token=token)
+                username = user_info.get("name") or user_info.get("username") or ""
+                if username:
+                    return True, username, ""
+                else:
+                    return False, "", "Token validated but username not found in response."
+            except Exception as e:
+                error_msg = str(e)
+                if "401" in error_msg or "Unauthorized" in error_msg or "Invalid" in error_msg:
+                    return False, "", f"Invalid token. Please verify your token is correct and has Read permissions. Error: {error_msg[:100]}"
+                return False, "", f"Validation error: {error_msg[:150]}"
+        except ImportError:
+            # Fall back to direct API call if huggingface_hub not available
+            pass
+        
+        # Fallback: Use the HF whoami endpoint directly
         endpoint = "https://huggingface.co/api/whoami"
-        headers = {"Authorization": f"Bearer {token}"}
+        headers = {
+            "Authorization": f"Bearer {token}",
+            "User-Agent": "MemMachine-Playground/1.0"
+        }
         
         try:
             resp = requests.get(endpoint, headers=headers, timeout=10)
@@ -386,8 +411,7 @@ with st.sidebar:
                 if username:
                     return True, username, ""
                 else:
-                    # Log the response for debugging
-                    return False, "", f"Token validated but username not found. Please try regenerating your token."
+                    return False, "", f"Token validated but username not found. Response: {str(user_data)[:100]}"
             elif resp.status_code == 401:
                 error_detail = ""
                 try:
@@ -395,9 +419,9 @@ with st.sidebar:
                     error_detail = error_data.get("error", "")
                 except:
                     pass
-                return False, "", f"Invalid token (401 Unauthorized). {error_detail} Please check your token at https://huggingface.co/settings/tokens"
+                return False, "", f"Invalid token (401). The token may be expired, revoked, or incorrect. {error_detail} Please create a new Read token at https://huggingface.co/settings/tokens"
             elif resp.status_code == 403:
-                return False, "", f"Token access denied (403 Forbidden). Please ensure your token has read permissions."
+                return False, "", f"Token access denied (403). Please ensure your token has Read permissions."
             else:
                 error_text = ""
                 try:

requirements.txt

@@ -10,3 +10,4 @@ anthropic
 tiktoken
 pydantic
 boto3
+huggingface_hub