[{"_1":2,"_172":-5,"_173":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","4665abaede64d7a40f12c22a2a13ecb98867c1ee","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_146":147,"_169":170,"_171":-5},"handle","aditya_2629","name","A","path","backend/routes/users.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":-5,"_113":20,"_114":-5,"_115":32,"_14":116,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_23":126,"_129":130,"_132":133,"_145":20},"id","a0ef2ad6-324a-11f0-aea8-569c3dd06744","createdAt",["D",1747395655746],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","b83fb250-318c-11f0-9f06-2f9e8959b1a6","pinnedFileId","pinPreview","screenshotVersion","likeCount","8ecce682-3092-49af-83f0-7de6d3658572","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_127":128},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4OEsydVpzRHRIcndGNjFDRFF3Z092YVE2OCJ9","org",{"_93":94,"_131":128,"_12":111},"avatar","branch",{"_134":135,"_95":43,"_101":136,"_137":102,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":96,"_144":94},"version",17,"a0ef7b12-324a-11f0-aea8-569c3dd06744","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":148,"_95":149,"_150":151,"_152":153,"_154":136,"_155":156,"_157":158,"_103":159,"_134":32,"_160":161,"_162":163,"_164":20,"_165":-5,"_97":166},"3a8e4000-3340-11f0-8a14-9e149126039e","users.ts","fileId","3a8e408c-3340-11f0-8a14-9e149126039e","parentId","e445b962-ca7a-4218-bad3-c5be39016196","branchId","branchVersion",10,"latest",true,["D",1747501140178],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getAllUsers, getUserById, updateUser, deleteUser, updateUserPassword } from \"../database/users.ts\";\nimport { verifyToken } from \"../auth.ts\";\nimport { ApiResponse, User } from \"../../shared/types.ts\";\n\nconst users = new Hono();\n\n// Middleware to check if user is authenticated\nasync function authMiddleware(c: any, next: () => Promise) {\n const authHeader = c.req.header(\"Authorization\");\n \n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json>({\n success: false,\n error: \"Unauthorized\",\n }, 401);\n }\n \n const token = authHeader.substring(7);\n const payload = await verifyToken(token);\n \n if (!payload) {\n return c.json>({\n success: false,\n error: \"Invalid or expired token\",\n }, 401);\n }\n \n c.set(\"user\", { id: payload.sub, username: payload.username, role: payload.role });\n await next();\n}\n\n// Middleware to check if user is admin\nasync function adminMiddleware(c: any, next: () => Promise) {\n const user = c.get(\"user\");\n \n if (user.role !== \"admin\") {\n return c.json>({\n success: false,\n error: \"Admin access required\",\n }, 403);\n }\n \n await next();\n}\n\n// Get all users (admin only)\nusers.get(\"/\", authMiddleware, adminMiddleware, async (c) => {\n try {\n const users = await getAllUsers();\n \n return c.json>({\n success: true,\n data: users,\n });\n } catch (error) {\n console.error(\"Get users error:\", error);\n return c.json>({\n success: false,\n error: \"An error occurred while fetching users\",\n }, 500);\n }\n});\n\n// Get user by ID\nusers.get(\"/:id\", authMiddleware, async (c) => {\n try {\n const id = parseInt(c.req.param(\"id\"));\n const requestUser = c.get(\"user\");\n \n // Users can only access their own data unless they're admin\n if (requestUser.id !== id && requestUser.role !== \"admin\") {\n return c.json>({\n success: false,\n error: \"Access denied\",\n }, 403);\n }\n \n const user = await getUserById(id);\n \n if (!user) {\n return c.json>({\n success: false,\n error: \"User not found\",\n }, 404);\n }\n \n return c.json>({\n success: true,\n data: user,\n });\n } catch (error) {\n console.error(\"Get user error:\", error);\n return c.json>({\n success: false,\n error: \"An error occurred while fetching the user\",\n }, 500);\n }\n});\n\n// Update user\nusers.put(\"/:id\", authMiddleware, async (c) => {\n try {\n const id = parseInt(c.req.param(\"id\"));\n const requestUser = c.get(\"user\");\n \n // Users can only update their own data unless they're admin\n if (requestUser.id !== id && requestUser.role !== \"admin\") {\n return c.json>({\n success: false,\n error: \"Access denied\",\n }, 403);\n }\n \n const { email, name, role } = await c.req.json<{ email?: string; name?: string; role?: \"admin\" | \"member\" }>();\n \n // Only admins can change roles\n if (role && requestUser.role !== \"admin\") {\n return c.json>({\n success: false,\n error: \"Only admins can change roles\",\n }, 403);\n }\n \n const updates = { email, name, role };\n const updatedUser = await updateUser(id, updates);\n \n if (!updatedUser) {\n return c.json>({\n success: false,\n error: \"User not found\",\n }, 404);\n }\n \n return c.json>({\n success: true,\n data: updatedUser,\n });\n } catch (error) {\n console.error(\"Update user error:\", error);\n return c.json>({\n success: false,\n error: \"An error occurred while updating the user\",\n }, 500);\n }\n});\n\n// Change password\nusers.put(\"/:id/password\", authMiddleware, async (c) => {\n try {\n const id = parseInt(c.req.param(\"id\"));\n const requestUser = c.get(\"user\");\n \n // Users can only change their own password\n if (requestUser.id !== id) {\n return c.json>({\n success: false,\n error: \"Access denied\",\n }, 403);\n }\n \n const { password } = await c.req.json<{ password: string }>();\n \n if (!password || password.length < 6) {\n return c.json>({\n success: false,\n error: \"Password must be at least 6 characters\",\n }, 400);\n }\n \n // In a real app, use a proper password hashing library\n const passwordHash = btoa(password);\n const success = await updateUserPassword(id, passwordHash);\n \n if (!success) {\n return c.json>({\n success: false,\n error: \"Failed to update password\",\n }, 500);\n }\n \n return c.json>({\n success: true,\n data: { message: \"Password updated successfully\" },\n });\n } catch (error) {\n console.error(\"Change password error:\", error);\n return c.json>({\n success: false,\n error: \"An error occurred while changing the password\",\n }, 500);\n }\n});\n\n// Delete user (admin only)\nusers.delete(\"/:id\", authMiddleware, adminMiddleware, async (c) => {\n try {\n const id = parseInt(c.req.param(\"id\"));\n const requestUser = c.get(\"user\");\n \n // Prevent admins from deleting themselves\n if (requestUser.id === id) {\n return c.json>({\n success: false,\n error: \"Cannot delete your own account\",\n }, 400);\n }\n \n const success = await deleteUser(id);\n \n if (!success) {\n return c.json>({\n success: false,\n error: \"User not found\",\n }, 404);\n }\n \n return c.json>({\n success: true,\n data: { message: \"User deleted successfully\" },\n });\n } catch (error) {\n console.error(\"Delete user error:\", error);\n return c.json>({\n success: false,\n error: \"An error occurred while deleting the user\",\n }, 500);\n }\n});\n\nexport default users;","deleted","label",[167,168,149],"backend","routes","permalink","https://www.val.town/x/aditya_2629/A/code/backend/routes/users.ts","extension","actionData","errors"]