[{"_1":2,"_173":-5,"_174":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","e3ca0a77ab07ff2ce3097208ffd6aa0e378d3c47","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_147":148,"_170":171,"_172":-5},"handle","Remna","name","Remnachat","path","backend/routes/auth.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":110,"_111":-5,"_12":112,"_113":-5,"_114":20,"_115":-5,"_116":32,"_14":117,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_23":127,"_130":131,"_133":134,"_146":20},"id","36374624-3fba-11f0-a2df-76b3cceeab13","createdAt",["D",1748872945452],"deletedAt","legacyEnvVars","privacy","public","description","This is my trial application","imageUrl","eaae0c60-3fb9-11f0-ad5b-814c56c8abb0","pinnedFileId","pinPreview","screenshotVersion","likeCount","68c28e20-3e36-4e5c-9d56-670c73be044e","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_128":129},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeHhIU3FucHFXZmdDM1lPbmRpanM4VDhlSGIifQ","org",{"_93":94,"_132":129},"avatar","branch",{"_135":136,"_95":43,"_101":137,"_138":102,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":96,"_145":94},"version",22,"3637e372-3fba-11f0-a2df-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":149,"_95":150,"_151":152,"_153":154,"_155":137,"_156":157,"_158":159,"_103":160,"_135":32,"_161":162,"_163":164,"_165":20,"_166":-5,"_97":167},"5cc265c0-3fbb-11f0-a321-76b3cceeab13","auth.ts","fileId","5cc26688-3fbb-11f0-a321-76b3cceeab13","parentId","d166f308-784f-4785-a8c1-f0a4d5a85ffb","branchId","branchVersion",6,"latest",true,["D",1748873439605],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { createUser, getUserByEmail, getUserPasswordHash, updateUserStatus } from \"../database/queries.ts\";\nimport type { AuthResponse } from \"../../shared/types.ts\";\n\nconst app = new Hono();\n\n// Simple password hashing (in production, use bcrypt or similar)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password);\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nasync function verifyPassword(password: string, hash: string): Promise {\n const passwordHash = await hashPassword(password);\n return passwordHash === hash;\n}\n\n// Generate simple JWT-like token (in production, use proper JWT library)\nfunction generateToken(userId: string): string {\n const payload = {\n userId,\n exp: Date.now() + (24 * 60 * 60 * 1000) // 24 hours\n };\n return btoa(JSON.stringify(payload));\n}\n\nfunction verifyToken(token: string): { userId: string } | null {\n try {\n const payload = JSON.parse(atob(token));\n if (payload.exp < Date.now()) {\n return null; // Token expired\n }\n return { userId: payload.userId };\n } catch {\n return null;\n }\n}\n\n// Register new user\napp.post(\"/register\", async (c) => {\n try {\n const { username, email, password, phone } = await c.req.json();\n \n // Validate input\n if (!username || !email || !password) {\n return c.json({\n success: false,\n error: \"Username, email, and password are required\"\n }, 400);\n }\n \n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({\n success: false,\n error: \"User with this email already exists\"\n }, 409);\n }\n \n // Hash password and create user\n const passwordHash = await hashPassword(password);\n const user = await createUser({\n username,\n email,\n phone,\n passwordHash,\n status: 'online',\n lastSeen: new Date().toISOString()\n });\n \n // Generate token\n const token = generateToken(user.id);\n \n // Update user status to online\n await updateUserStatus(user.id, 'online');\n \n return c.json({\n success: true,\n user: {\n id: user.id,\n username: user.username,\n email: user.email,\n phone: user.phone,\n avatar: user.avatar,\n status: user.status,\n lastSeen: user.lastSeen,\n createdAt: user.createdAt\n },\n token\n });\n \n } catch (error) {\n console.error(\"Registration error:\", error);\n return c.json({\n success: false,\n error: \"Internal server error\"\n }, 500);\n }\n});\n\n// Login user\napp.post(\"/login\", async (c) => {\n try {\n const { email, password } = await c.req.json();\n \n // Validate input\n if (!email || !password) {\n return c.json({\n success: false,\n error: \"Email and password are required\"\n }, 400);\n }\n \n // Get user and verify password\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({\n success: false,\n error: \"Invalid email or password\"\n }, 401);\n }\n \n const passwordHash = await getUserPasswordHash(email);\n if (!passwordHash || !(await verifyPassword(password, passwordHash))) {\n return c.json({\n success: false,\n error: \"Invalid email or password\"\n }, 401);\n }\n \n // Generate token\n const token = generateToken(user.id);\n \n // Update user status to online\n await updateUserStatus(user.id, 'online');\n \n return c.json({\n success: true,\n user,\n token\n });\n \n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({\n success: false,\n error: \"Internal server error\"\n }, 500);\n }\n});\n\n// Logout user\napp.post(\"/logout\", async (c) => {\n try {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ success: false, error: \"No token provided\" }, 401);\n }\n \n const token = authHeader.substring(7);\n const decoded = verifyToken(token);\n \n if (!decoded) {\n return c.json({ success: false, error: \"Invalid token\" }, 401);\n }\n \n // Update user status to offline\n await updateUserStatus(decoded.userId, 'offline');\n \n return c.json({ success: true, message: \"Logged out successfully\" });\n \n } catch (error) {\n console.error(\"Logout error:\", error);\n return c.json({ success: false, error: \"Internal server error\" }, 500);\n }\n});\n\n// Verify token and get current user\napp.get(\"/me\", async (c) => {\n try {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ success: false, error: \"No token provided\" }, 401);\n }\n \n const token = authHeader.substring(7);\n const decoded = verifyToken(token);\n \n if (!decoded) {\n return c.json({ success: false, error: \"Invalid token\" }, 401);\n }\n \n const user = await getUserByEmail(decoded.userId);\n if (!user) {\n return c.json({ success: false, error: \"User not found\" }, 404);\n }\n \n return c.json({\n success: true,\n user\n });\n \n } catch (error) {\n console.error(\"Token verification error:\", error);\n return c.json({ success: false, error: \"Internal server error\" }, 500);\n }\n});\n\n// Middleware to verify authentication\nexport function requireAuth() {\n return async (c: any, next: any) => {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ success: false, error: \"No token provided\" }, 401);\n }\n \n const token = authHeader.substring(7);\n const decoded = verifyToken(token);\n \n if (!decoded) {\n return c.json({ success: false, error: \"Invalid token\" }, 401);\n }\n \n c.set(\"userId\", decoded.userId);\n await next();\n };\n}\n\nexport const authRoutes = app;","deleted","label",[168,169,150],"backend","routes","permalink","https://www.val.town/x/Remna/Remnachat/code/backend/routes/auth.ts","extension","actionData","errors"]