[{"_1":2,"_175":-5,"_176":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","8abab1f3bacc65052d6313ca736f41d897b49791","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_172":173,"_174":-5},"handle","Maruel","name","SchoolBank","path","backend/routes/auth.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":116,"_118":-5,"_119":32,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","6a95f676-3f39-11f0-8294-76b3cceeab13","createdAt",["D",1748817628235],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","07ccb4e0-3f38-11f0-ad5b-814c56c8abb0","pinnedFileId","50931c76-3f3a-11f0-8082-76b3cceeab13","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","cc8a6a3d-1729-4f5a-bbc2-ae35870cdd26","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4dlNLaWFyQVNwbTR5c3V2cVBFZk5PMmV0bSJ9","org",{"_94":95,"_135":132,"_12":112},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",17,"6a965b3e-3f39-11f0-8294-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":153,"_154":155,"_156":157,"_158":140,"_159":160,"_161":116,"_104":162,"_138":32,"_163":164,"_165":166,"_167":20,"_168":-5,"_98":169},"2e6d493c-3f3a-11f0-b1a1-76b3cceeab13","auth.ts","fileId","2e6d49d2-3f3a-11f0-b1a1-76b3cceeab13","parentId","a38b68eb-2a87-4bec-813b-659a5779f7fe","branchId","branchVersion",5,"latest",["D",1748817956795],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { getUserByUsername, validateUserPassword, getUserById } from \"../database/queries.ts\";\nimport type { LoginRequest, ApiResponse, User } from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Simple session management\nconst sessions = new Map();\n\nfunction generateSessionId(): string {\n return Math.random().toString(36).substring(2) + Date.now().toString(36);\n}\n\nfunction createSession(userId: number): string {\n const sessionId = generateSessionId();\n const expires = new Date(Date.now() + 24 * 60 * 60 * 1000); // 24 hours\n sessions.set(sessionId, { userId, expires });\n return sessionId;\n}\n\nfunction getSessionUser(sessionId: string): number | null {\n const session = sessions.get(sessionId);\n if (!session || session.expires < new Date()) {\n if (session) sessions.delete(sessionId);\n return null;\n }\n return session.userId;\n}\n\n// Middleware to check authentication\nexport function requireAuth() {\n return async (c: any, next: any) => {\n const sessionId = getCookie(c, 'session');\n if (!sessionId) {\n return c.json({ success: false, error: 'Not authenticated' }, 401);\n }\n \n const userId = getSessionUser(sessionId);\n if (!userId) {\n deleteCookie(c, 'session');\n return c.json({ success: false, error: 'Session expired' }, 401);\n }\n \n const user = await getUserById(userId);\n if (!user) {\n deleteCookie(c, 'session');\n return c.json({ success: false, error: 'User not found' }, 401);\n }\n \n c.set('user', user);\n await next();\n };\n}\n\n// Login endpoint\nauth.post('/login', async (c) => {\n try {\n const body: LoginRequest = await c.req.json();\n const { username, password } = body;\n \n if (!username || !password) {\n return c.json({ \n success: false, \n error: 'Username and password are required' \n }, 400);\n }\n \n const user = await validateUserPassword(username, password);\n if (!user) {\n return c.json({ \n success: false, \n error: 'Invalid username or password' \n }, 401);\n }\n \n const sessionId = createSession(user.id);\n setCookie(c, 'session', sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 24 * 60 * 60 // 24 hours\n });\n \n return c.json>({ \n success: true, \n data: user \n });\n } catch (error) {\n console.error('Login error:', error);\n return c.json({ \n success: false, \n error: 'Internal server error' \n }, 500);\n }\n});\n\n// Logout endpoint\nauth.post('/logout', (c) => {\n const sessionId = getCookie(c, 'session');\n if (sessionId) {\n sessions.delete(sessionId);\n }\n deleteCookie(c, 'session');\n \n return c.json({ success: true });\n});\n\n// Get current user\nauth.get('/me', requireAuth(), async (c) => {\n const user = c.get('user');\n return c.json>({ \n success: true, \n data: user \n });\n});\n\n// Check if user is authenticated (for frontend)\nauth.get('/check', async (c) => {\n const sessionId = getCookie(c, 'session');\n if (!sessionId) {\n return c.json({ success: false, error: 'Not authenticated' });\n }\n \n const userId = getSessionUser(sessionId);\n if (!userId) {\n deleteCookie(c, 'session');\n return c.json({ success: false, error: 'Session expired' });\n }\n \n const user = await getUserById(userId);\n if (!user) {\n deleteCookie(c, 'session');\n return c.json({ success: false, error: 'User not found' });\n }\n \n return c.json>({ \n success: true, \n data: user \n });\n});\n\nexport default auth;","deleted","label",[170,171,153],"backend","routes","permalink","https://www.val.town/x/Maruel/SchoolBank/code/backend/routes/auth.ts","extension","actionData","errors"]