streamlit 1.53.1__py3-none-any.whl → 1.54.0__py3-none-any.whl

streamlit/__init__.py

@@ -60,7 +60,6 @@ _os.environ["MPLBACKEND"] = "Agg"
 # Must be at the top, to avoid circular dependency.
 from streamlit import logger as _logger
 from streamlit import config as _config
-from streamlit.deprecation_util import deprecate_func_name as _deprecate_func_name
 from streamlit.version import STREAMLIT_VERSION_STRING as _STREAMLIT_VERSION_STRING
 
 # Give the package a version.
@@ -112,14 +111,9 @@ from streamlit.runtime.state import (
 )
 from streamlit.user_info import (
     UserInfoProxy as _UserInfoProxy,
-    DeprecatedUserInfoProxy as _DeprecatedUserInfoProxy,
     login as _login,
     logout as _logout,
 )
-from streamlit.commands.experimental_query_params import (
-    get_query_params as _get_query_params,
-    set_query_params as _set_query_params,
-)
 
 import streamlit.column_config as _column_config
 
@@ -280,32 +274,8 @@ logout = _logout
 # User
 user = _UserInfoProxy()
 
-# Experimental APIs
-experimental_user = _DeprecatedUserInfoProxy()
-
-_EXPERIMENTAL_QUERY_PARAMS_DEPRECATE_MSG = (
-    "Refer to our [docs page](https://docs.streamlit.io/develop/api-reference/caching-and-state/st.query_params) "
-    "for more information."
-)
-
-experimental_get_query_params = _deprecate_func_name(
-    _get_query_params,
-    "experimental_get_query_params",
-    "2024-04-11",
-    _EXPERIMENTAL_QUERY_PARAMS_DEPRECATE_MSG,
-    name_override="query_params",
-)
-experimental_set_query_params = _deprecate_func_name(
-    _set_query_params,
-    "experimental_set_query_params",
-    "2024-04-11",
-    _EXPERIMENTAL_QUERY_PARAMS_DEPRECATE_MSG,
-    name_override="query_params",
-)
-
-
 # make it possible to call streamlit.components.v1.html etc. by importing it here
 # import in the very end to avoid partially-initialized module import errors, because
 # streamlit.components.v1 also uses some streamlit imports
-import streamlit.components.v1
+import streamlit.components.v1  # noqa: F401
 import streamlit.components.v2  # noqa: F401

streamlit/auth_util.py

@@ -19,7 +19,7 @@ import re
 from collections.abc import Callable, Mapping
 from datetime import datetime, timedelta, timezone
 from typing import TYPE_CHECKING, Any, Final, TypedDict, cast
-from urllib.parse import urlparse
+from urllib.parse import urlencode, urlparse
 
 from streamlit import config
 from streamlit.errors import StreamlitAuthError
@@ -148,6 +148,95 @@ def get_redirect_uri(auth_section: AttrDict) -> str | None:
     return redirect_uri_parsed.geturl()
 
 
+def get_validated_redirect_uri() -> str | None:
+    """Get the redirect_uri from secrets, validating it ends with /oauth2callback.
+
+    This is used for logout flows where we need a validated redirect URI
+    that matches the OAuth callback path.
+
+    Returns
+    -------
+    str | None
+        The validated redirect URI, or None if not configured or invalid.
+    """
+    auth_section = get_secrets_auth_section()
+    if not auth_section:
+        return None
+
+    redirect_uri = get_redirect_uri(auth_section)
+    if not redirect_uri:
+        return None
+
+    if not redirect_uri.endswith("/oauth2callback"):
+        _LOGGER.warning("Redirect URI does not end with /oauth2callback")
+        return None
+
+    return redirect_uri
+
+
+def get_origin_from_redirect_uri() -> str | None:
+    """Extract the origin (scheme + host) from the configured redirect_uri.
+
+    Returns
+    -------
+    str | None
+        The origin in format "scheme://host:port", or None if not configured.
+    """
+    auth_section = get_secrets_auth_section()
+    if not auth_section:
+        return None
+
+    redirect_uri = get_redirect_uri(auth_section)
+    if not redirect_uri:
+        return None
+
+    redirect_uri_parsed = urlparse(redirect_uri)
+    return f"{redirect_uri_parsed.scheme}://{redirect_uri_parsed.netloc}"
+
+
+def build_logout_url(
+    end_session_endpoint: str,
+    client_id: str,
+    post_logout_redirect_uri: str,
+    id_token: str | None = None,
+) -> str:
+    """Build an OIDC logout URL with the required parameters.
+
+    Parameters
+    ----------
+    end_session_endpoint
+        The OIDC provider's end_session_endpoint URL.
+    client_id
+        The OAuth client ID.
+    post_logout_redirect_uri
+        The URI to redirect to after logout.
+    id_token
+        Optional ID token to include as id_token_hint for the logout request.
+
+    Returns
+    -------
+    str
+        The complete logout URL with query parameters.
+    """
+    from urllib.parse import parse_qsl
+
+    logout_params: dict[str, str] = {
+        "client_id": client_id,
+        "post_logout_redirect_uri": post_logout_redirect_uri,
+    }
+
+    if id_token:
+        logout_params["id_token_hint"] = id_token
+
+    # Per OIDC spec, end_session_endpoint should be a clean URL without query params,
+    # but we handle existing params defensively for non-standard providers.
+    parsed = urlparse(end_session_endpoint)
+    existing_params = dict(parse_qsl(parsed.query))
+    merged_params = {**existing_params, **logout_params}
+    new_query = urlencode(merged_params)
+    return parsed._replace(query=new_query).geturl()
+
+
 def encode_provider_token(provider: str) -> str:
     """Returns a signed JWT token with the provider and expiration time."""
     try:
@@ -376,7 +465,7 @@ def get_cookie_with_chunks(
         chunk_name = f"{cookie_name}_{i + 1}"
         chunk_value = get_single_cookie_fn(chunk_name)
         if chunk_value is None:
-            _LOGGER.exception("Missing chunk %d for cookie '%s'", i + 1, cookie_name)
+            _LOGGER.error("Missing chunk %d for cookie '%s'", i + 1, cookie_name)
             return None
         chunks.append(chunk_value)
 

streamlit/cli_util.py

@@ -17,7 +17,6 @@
 from __future__ import annotations
 
 import os
-import subprocess
 from typing import Any
 
 from streamlit import env_util, errors
@@ -60,7 +59,9 @@ def _open_browser_with_webbrowser(url: str) -> None:
 
 def _open_browser_with_command(command: str, url: str) -> None:
     cmd_line = [command, url]
-    with open(os.devnull, "w") as devnull:
+    with open(os.devnull, "w", encoding="utf-8") as devnull:
+        import subprocess  # noqa: S404
+
         subprocess.Popen(cmd_line, stdout=devnull, stderr=subprocess.STDOUT)  # noqa: S603
 
 

streamlit/commands/echo.py

@@ -26,8 +26,8 @@ from streamlit.runtime.metrics_util import gather_metrics
 if TYPE_CHECKING:
     from collections.abc import Generator, Iterable
 
-_SPACES_RE = re.compile("\\s*")
-_EMPTY_LINE_RE = re.compile("\\s*\n")
+_SPACES_RE = re.compile(r"\s*")
+_EMPTY_LINE_RE = re.compile(r"\s*\n")
 
 
 @gather_metrics("echo")

streamlit/commands/execution_control.py

@@ -158,7 +158,7 @@ def rerun(  # type: ignore[misc]
 
     """
 
-    if scope not in ["app", "fragment"]:
+    if scope not in {"app", "fragment"}:
         raise StreamlitAPIException(
             f"'{scope}'is not a valid rerun scope. Valid scopes are 'app' and 'fragment'."
         )

streamlit/commands/logo.py

@@ -23,8 +23,10 @@ from streamlit.elements.lib.image_utils import AtomicImage, image_to_url
 from streamlit.elements.lib.layout_utils import LayoutConfig
 from streamlit.errors import StreamlitAPIException
 from streamlit.proto.ForwardMsg_pb2 import ForwardMsg
+from streamlit.proto.Logo_pb2 import Logo as LogoProto
 from streamlit.runtime.metrics_util import gather_metrics
 from streamlit.runtime.scriptrunner_utils.script_run_context import get_script_run_ctx
+from streamlit.string_util import is_emoji, validate_material_icon
 
 
 def _invalid_logo_text(field_name: str) -> str:
@@ -35,13 +37,59 @@ def _invalid_logo_text(field_name: str) -> str:
     )
 
 
+def _process_logo_image(
+    image: AtomicImage | str, image_id: str
+) -> tuple[LogoProto.ImageType.ValueType, str]:
+    """Detects the image type and prepares the image data for the frontend.
+
+    Parameters
+    ----------
+    image :
+        The image that was provided by the user. Can be an image file,
+        emoji, or material icon string.
+    image_id : str
+        The image ID used when serving local images via the media file manager.
+
+    Returns
+    -------
+    tuple[ImageType, str]
+        The detected image type and the prepared image data.
+
+    Raises
+    ------
+    StreamlitAPIException
+        If the image is an empty string or a plain text string that is not
+        a valid file path, URL, emoji, or material icon.
+    """
+    ImageType = LogoProto.ImageType  # noqa: N806
+
+    # Check if it's a material icon
+    if isinstance(image, str) and image.startswith(":material"):
+        return ImageType.ICON, validate_material_icon(image)
+
+    # Check if it's an emoji
+    if isinstance(image, str) and is_emoji(image):
+        return ImageType.EMOJI, image
+
+    # Otherwise, treat it as an image file
+    image_url = image_to_url(
+        image,
+        layout_config=LayoutConfig(width="content"),
+        clamp=False,
+        channels="RGB",
+        output_format="auto",
+        image_id=image_id,
+    )
+    return ImageType.IMAGE, image_url
+
+
 @gather_metrics("logo")
 def logo(
-    image: AtomicImage,
+    image: AtomicImage | str,
     *,  # keyword-only args:
     size: Literal["small", "medium", "large"] = "medium",
     link: str | None = None,
-    icon_image: AtomicImage | None = None,
+    icon_image: AtomicImage | str | None = None,
 ) -> None:
     r"""
     Renders a logo in the upper-left corner of your app and its sidebar.
@@ -60,12 +108,26 @@ def logo(
 
     Parameters
     ----------
-    image: Anything supported by st.image (except list)
+    image: Anything supported by st.image (except list) or str
         The image to display in the upper-left corner of your app and its
-        sidebar. This can be any of the types supported by |st.image|_ except
-        a list. If ``icon_image`` is also provided, then Streamlit will only
+        sidebar. If ``icon_image`` is also provided, then Streamlit will only
         display ``image`` in the sidebar.
 
+        ``image`` can be any of the types supported by |st.image|_ except
+        a list. Additionally, the following strings are valid:
+
+        - A single-character emoji. For example, you can set ``image="🏠"``
+          or ``image="🚀"``. Emoji short codes are not supported.
+
+        - An icon from the Material Symbols library (rounded style) in the
+          format ``":material/icon_name:"`` where "icon_name" is the name
+          of the icon in snake case.
+
+          For example, ``image=":material/home:"`` will display the
+          Home icon. Find additional icons in the `Material Symbols \
+          <https://fonts.google.com/icons?icon.set=Material+Symbols&icon.style=Rounded>`_
+          font library.
+
         Streamlit scales the image to a max height set by ``size`` and a max
         width to fit within the sidebar.
 
@@ -84,10 +146,10 @@ def logo(
         The external URL to open when a user clicks on the logo. The URL must
         start with "\http://" or "\https://". If ``link`` is ``None`` (default),
         the logo will not include a hyperlink.
-    icon_image: Anything supported by st.image (except list) or None
+    icon_image: Anything supported by st.image (except list), str, or None
         An optional, typically smaller image to replace ``image`` in the
         upper-left corner when the sidebar is closed. This can be any of the
-        types supported by ``st.image`` except a list. If ``icon_image`` is
+        types allowed for the ``image`` parameter. If ``icon_image`` is
         ``None`` (default), Streamlit will always display ``image`` in the
         upper-left corner, regardless of whether the sidebar is open or closed.
         Otherwise, Streamlit will render ``icon_image`` in the upper-left
@@ -143,15 +205,9 @@ def logo(
     fwd_msg = ForwardMsg()
 
     try:
-        image_url = image_to_url(
-            image,
-            layout_config=LayoutConfig(width="content"),
-            clamp=False,
-            channels="RGB",
-            output_format="auto",
-            image_id="logo",
-        )
-        fwd_msg.logo.image = image_url
+        image_type, image_value = _process_logo_image(image, "logo")
+        fwd_msg.logo.image = image_value
+        fwd_msg.logo.image_type = image_type
     except Exception as ex:
         raise StreamlitAPIException(_invalid_logo_text("image")) from ex
 
@@ -167,15 +223,11 @@ def logo(
 
     if icon_image:
         try:
-            icon_image_url = image_to_url(
-                icon_image,
-                layout_config=LayoutConfig(width="content"),
-                clamp=False,
-                channels="RGB",
-                output_format="auto",
-                image_id="icon-image",
+            icon_image_type, icon_image_value = _process_logo_image(
+                icon_image, "icon-image"
             )
-            fwd_msg.logo.icon_image = icon_image_url
+            fwd_msg.logo.icon_image = icon_image_value
+            fwd_msg.logo.icon_image_type = icon_image_type
         except Exception as ex:
             raise StreamlitAPIException(_invalid_logo_text("icon_image")) from ex
 

streamlit/commands/navigation.py

@@ -292,7 +292,7 @@ def navigation(
 
     """
     # Validate position parameter
-    if not isinstance(position, str) or position not in ["sidebar", "hidden", "top"]:
+    if not isinstance(position, str) or position not in {"sidebar", "hidden", "top"}:
         raise StreamlitAPIException(
             f'Invalid position "{position}". '
             'The position parameter must be one of "sidebar", "hidden", or "top".'

streamlit/components/types/base_custom_component.py

@@ -28,8 +28,6 @@ if TYPE_CHECKING:
 class MarshallComponentException(StreamlitAPIException):
     """Class for exceptions generated during custom component marshalling."""
 
-    pass
-
 
 class BaseCustomComponent(ABC):
     """Interface for CustomComponents."""

streamlit/components/v1/custom_component.py

@@ -40,8 +40,6 @@ if TYPE_CHECKING:
 class MarshallComponentException(StreamlitAPIException):
     """Class for exceptions generated during custom component marshalling."""
 
-    pass
-
 
 class CustomComponent(BaseCustomComponent):
     """A Custom Component declaration."""

streamlit/components/v2/bidi_component/main.py

@@ -480,7 +480,7 @@ class BidiComponentMixin:
             deserializer=serde.deserialize,
             serializer=serde.serialize,
             ctx=ctx,
-            callbacks=callbacks_by_event if callbacks_by_event else None,
+            callbacks=callbacks_by_event or None,
             value_type="json_value",
             presenter=presenter,
         )
@@ -495,7 +495,7 @@ class BidiComponentMixin:
             deserializer=deserialize_trigger_list,  # always returns list or None
             serializer=lambda v: json.dumps(v),  # send dict as JSON
             ctx=ctx,
-            callbacks=callbacks_by_event if callbacks_by_event else None,
+            callbacks=callbacks_by_event or None,
             value_type="json_trigger_value",
         )
 

streamlit/components/v2/component_path_utils.py

@@ -22,12 +22,12 @@ outside of a declared package root.
 
 from __future__ import annotations
 
-import os
 from pathlib import Path
 from typing import Final
 
 from streamlit.errors import StreamlitComponentRegistryError
 from streamlit.logger import get_logger
+from streamlit.path_security import is_unsafe_path_pattern
 
 _LOGGER: Final = get_logger(__name__)
 
@@ -132,7 +132,12 @@ class ComponentPathUtils:
 
     @staticmethod
     def _assert_relative_no_traversal(path: str, *, label: str) -> None:
-        """Raise if ``path`` is absolute or contains ``..`` segments.
+        """Raise if ``path`` is absolute, contains traversal, or has unsafe patterns.
+
+        This method uses the shared ``is_unsafe_path_pattern`` function to ensure
+        consistent security checks across the codebase. The shared function also
+        checks for additional patterns like null bytes, forward-slash UNC paths,
+        and drive-relative paths (e.g., ``C:foo``).
 
         Parameters
         ----------
@@ -141,34 +146,17 @@ class ComponentPathUtils:
         label : str
             Human-readable label used in error messages (e.g., "component paths").
         """
-        # Absolute path checks (POSIX, Windows drive-letter, UNC)
-        is_windows_drive_abs = (
-            len(path) >= 3
-            and path[0].isalpha()
-            and path[1] == ":"
-            and path[2] in ("/", "\\")
-        )
-        is_unc_abs = path.startswith("\\\\")
-
-        # Consider rooted backslash paths "\\dir" as absolute on Windows-like inputs
-        is_rooted_backslash = path.startswith("\\") and not is_unc_abs
-
-        if (
-            os.path.isabs(path)
-            or is_windows_drive_abs
-            or is_unc_abs
-            or is_rooted_backslash
-        ):
-            raise StreamlitComponentRegistryError(
-                f"Absolute paths are not allowed in {label}: {path}"
-            )
-
-        # Segment-based traversal detection to avoid false positives (e.g. "file..js")
-        normalized = path.replace("\\", "/")
-        segments = [seg for seg in normalized.split("/") if seg != ""]
-        if any(seg == ".." for seg in segments):
+        if is_unsafe_path_pattern(path):
+            # Determine appropriate error message based on pattern.
+            # Use segment-based check to avoid false positives like "file..js"
+            normalized = path.replace("\\", "/")
+            segments = [seg for seg in normalized.split("/") if seg]
+            if ".." in segments:
+                raise StreamlitComponentRegistryError(
+                    f"Path traversal attempts are not allowed in {label}: {path}"
+                )
             raise StreamlitComponentRegistryError(
-                f"Path traversal attempts are not allowed in {label}: {path}"
+                f"Unsafe paths are not allowed in {label}: {path}"
             )
 
     @staticmethod

streamlit/components/v2/manifest_scanner.py

@@ -187,8 +187,13 @@ def _is_likely_streamlit_component_package(
     bool
         True if the package might contain streamlit components, False otherwise.
     """
-    # Get package metadata
-    name = dist.name.lower()
+    dist_name = dist.name
+    if not isinstance(dist_name, str) or not dist_name:
+        # We do not expect a distribution to be missing its name, be defensive
+        # and fail closed to prevent runtime issues.
+        return False
+
+    name = dist_name.lower()
     summary = dist.metadata["Summary"].lower() if "Summary" in dist.metadata else ""
 
     # Filter 1: Package name suggests streamlit component
@@ -386,7 +391,7 @@ def _validate_pyproject_for_package(
             canonical_package = packaging_utils.canonicalize_name(package_name)
 
             # Check if project name matches either the distribution name or the package name
-            return canonical_project in (canonical_dist, canonical_package)
+            return canonical_project in {canonical_dist, canonical_package}
 
         # If we can't determine ownership, be conservative and reject it
         return False

streamlit/components/v2/presentation.py

@@ -127,7 +127,7 @@ def make_bidi_component_presenter(
                 # st.session_state[component_user_key][name] = value. Using a
                 # dict subclass ensures pretty-printing and JSON serialization
                 # behave as expected for st.write and logs.
-                class _WriteThrough(dict[str, object]):
+                class _WriteThrough(dict[str, object]):  # noqa: FURB189
                     def __init__(self, data: dict[str, object]) -> None:
                         super().__init__(data)
 

streamlit/config.py

@@ -99,11 +99,11 @@ class ShowErrorDetailsConfigOptions(str, Enum):
 
     @staticmethod
     def is_true_variation(val: str | bool) -> bool:
-        return val in ["true", "True", True]
+        return val in {"true", "True", True}
 
     @staticmethod
     def is_false_variation(val: str | bool) -> bool:
-        return val in ["false", "False", False]
+        return val in {"false", "False", False}
 
         # Config options can be set from several places including the command-line and
         # the user's script. Legacy config options (true/false) will have type string
@@ -617,6 +617,19 @@ _create_option(
     scriptable=True,
 )
 
+_create_option(
+    "client.showErrorLinks",
+    description="""
+        Controls whether to show external help links (Google, ChatGPT) in
+        error displays. The following values are valid:
+        - "auto" (default): Links are shown only on localhost.
+        - True: Links are shown on all domains.
+        - False: Links are never shown.
+    """,
+    default_val="auto",
+    type_=str,
+)
+
 # Config Section: Runner #
 
 _create_section("runner", "Settings for how Streamlit executes your script")
@@ -1077,9 +1090,11 @@ def _browser_server_port() -> int:
 
 
 _SSL_PRODUCTION_WARNING = [
-    "DO NOT USE THIS OPTION IN A PRODUCTION ENVIRONMENT. It has not gone through "
-    "security audits or performance tests. For a production environment, we "
-    "recommend performing SSL termination through a load balancer or reverse proxy."
+    (
+        "DO NOT USE THIS OPTION IN A PRODUCTION ENVIRONMENT. It has not gone through "
+        "security audits or performance tests. For a production environment, we "
+        "recommend performing SSL termination through a load balancer or reverse proxy."
+    )
 ]
 
 _create_option(
@@ -2279,6 +2294,35 @@ _create_theme_options(
     """,
 )
 
+_create_theme_options(
+    "chartDivergingColors",
+    categories=["theme"],
+    description="""
+        An array of ten colors to use for diverging chart data.
+
+        The ten colors create a diverging color scale, typically used for data
+        with a meaningful midpoint. These colors apply to Plotly, Altair, and
+        Vega-Lite charts.
+
+        Invalid color strings are skipped. If there are not exactly ten
+        valid colors specified, Streamlit uses a default set of colors.
+
+        The default colors are:
+        [
+            "#7d353b", #red100
+            "#bd4043", #red90
+            "#ff4b4b", #red70
+            "#ff8c8c", #red50
+            "#ffc7c7", #red30
+            "#a6dcff", #blue30
+            "#60b4ff", #blue50
+            "#1c83e1", #blue70
+            "#0054a3", #blue90
+            "#004280", #blue100
+        ]
+    """,
+)
+
 # Config Section: Secrets #
 
 _create_section("secrets", "Secrets configuration.")
@@ -2347,10 +2391,10 @@ def is_manually_set(option_name: str) -> bool:
         True if the option has been set by the user.
 
     """
-    return get_where_defined(option_name) not in (
+    return get_where_defined(option_name) not in {
         ConfigOption.DEFAULT_DEFINITION,
         ConfigOption.STREAMLIT_DEFINITION,
-    )
+    }
 
 
 def show_config() -> None:
@@ -2433,19 +2477,19 @@ def _is_valid_theme_section(section_path: str) -> bool:
 
     # theme.sidebar/light/dark is valid (2 parts: "theme" + section)
     if len(parts) == 2:
-        return parts[1] in [
+        return parts[1] in {
             CustomThemeCategories.SIDEBAR.value,
             CustomThemeCategories.LIGHT.value,
             CustomThemeCategories.DARK.value,
-        ]
+        }
 
     # theme.light.sidebar/theme.dark.sidebar are the only valid 3-part patterns
     if len(parts) == 3:
         # Only allow light/dark as the middle level, with sidebar as the final level
-        if parts[1] in [
+        if parts[1] in {
             CustomThemeCategories.LIGHT.value,
             CustomThemeCategories.DARK.value,
-        ]:
+        }:
             return parts[2] == CustomThemeCategories.SIDEBAR.value
         # sidebar cannot have nested sections (theme.sidebar.light/dark)
         return False
@@ -2517,11 +2561,11 @@ def _update_config_with_toml(raw_toml: str, where_defined: str) -> None:
         for name, value in section_data.items():
             option_name = f"{section_path}.{name}"
             # Only check for nested sections when we're already in a theme section
-            if section_path.startswith("theme") and name in [
+            if section_path.startswith("theme") and name in {
                 CustomThemeCategories.SIDEBAR.value,
                 CustomThemeCategories.LIGHT.value,
                 CustomThemeCategories.DARK.value,
-            ]:
+            }:
                 # Validate the theme section before processing
                 if not _is_valid_theme_section(option_name):
                     raise StreamlitInvalidThemeSectionError(