#!/usr/bin/env sh

STREAMLIT_SECRETS_LOCATION=".streamlit/secrets.toml"

if [ "$OIDC_ENABLED" = "true" ]; then
  echo "INFO  [entrypoint] OIDC configuration detected. Configuring app..."
  toml add_section --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth'
  toml set --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth.redirect_uri' "$OIDC_PUBLIC_URL/oauth2callback"
  toml set --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth.cookie_secret' "$OIDC_COOKIE_SECRET"
  toml set --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth.client_id' "$OIDC_CLIENT_ID"
  toml set --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth.client_secret' "$OIDC_CLIENT_SECRET"
  toml set --toml-path=$STREAMLIT_SECRETS_LOCATION 'auth.server_metadata_url' "$OIDC_METADATA_URL"
else
  echo "INFO  [entrypoint] No OIDC configuration detected."
fi

echo "INFO  [entrypoint] Running database migrations..."
alembic upgrade head

echo "INFO  [entrypoint] Running application..."
streamlit run app