[{"_1":2,"_175":-5,"_176":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","5c349ef9e7d7333839a0634dd567aae2d49623a6","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_172":173,"_174":-5},"handle","beekay","name","support_case","path","backend/routes/auth.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":-5,"_118":119,"_120":32,"_14":121,"_122":123,"_124":123,"_125":126,"_127":126,"_128":126,"_129":123,"_130":123,"_23":131,"_134":135,"_137":138,"_149":20},"id","9ed1e4b0-275e-11f0-86ff-569c3dd06744","createdAt",["D",1746194779342],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","486d6980-15d6-11f0-bab6-8581b0669677","pinnedFileId","9ed4559c-275e-11f0-86ff-569c3dd06744","pinPreview",true,"pinMigrated","screenshotVersion",20,"likeCount","7b5de6d7-9217-43bf-acbb-9165458e3f29","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_132":133},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ2V2kzNmVVeE42Um1lMmxEMXlwYmlEMmR1SCJ9","org",{"_94":95,"_136":133,"_12":112},"avatar","branch",{"_139":119,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version","9ed23f50-275e-11f0-86ff-569c3dd06744","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":153,"_154":155,"_156":157,"_158":140,"_159":160,"_161":116,"_104":162,"_139":32,"_163":164,"_165":166,"_167":20,"_168":-5,"_98":169},"93f51a40-37b1-11f0-a897-9e149126039e","auth.ts","fileId","93f51aea-37b1-11f0-a897-9e149126039e","parentId","12948923-d34f-4969-b33a-a6099eab863a","branchId","branchVersion",6,"latest",["D",1747989627946],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport type { AuthResponse } from \"../../shared/types.ts\";\nimport { \n createUser, \n getUserByEmail, \n createSession, \n deleteSession,\n getSessionByToken \n} from \"../database/queries.ts\";\n\nconst auth = new Hono();\n\n// Simple password hashing (in production, use bcrypt)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"budget_salt_2024\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nfunction generateToken(): string {\n return crypto.randomUUID() + Date.now().toString(36);\n}\n\n// Register new user\nauth.post(\"/register\", async (c) => {\n try {\n const { username, email, password } = await c.req.json();\n\n if (!username || !email || !password) {\n return c.json({ \n success: false, \n message: \"Username, email, and password are required\" \n }, 400);\n }\n\n if (password.length < 6) {\n return c.json({ \n success: false, \n message: \"Password must be at least 6 characters\" \n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({ \n success: false, \n message: \"User with this email already exists\" \n }, 400);\n }\n\n // Create user\n const passwordHash = await hashPassword(password);\n const user = await createUser(username, email, passwordHash);\n\n // Create session\n const token = generateToken();\n const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString(); // 30 days\n await createSession(user.id, token, expiresAt);\n\n return c.json({\n success: true,\n user: { ...user, password_hash: undefined } as any,\n token,\n message: \"User registered successfully\"\n });\n\n } catch (error) {\n console.error(\"Registration error:\", error);\n return c.json({ \n success: false, \n message: \"Registration failed\" \n }, 500);\n }\n});\n\n// Login user\nauth.post(\"/login\", async (c) => {\n try {\n const { email, password } = await c.req.json();\n\n if (!email || !password) {\n return c.json({ \n success: false, \n message: \"Email and password are required\" \n }, 400);\n }\n\n // Get user\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({ \n success: false, \n message: \"Invalid email or password\" \n }, 401);\n }\n\n // Verify password\n const passwordHash = await hashPassword(password);\n if (passwordHash !== (user as any).password_hash) {\n return c.json({ \n success: false, \n message: \"Invalid email or password\" \n }, 401);\n }\n\n // Create session\n const token = generateToken();\n const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString(); // 30 days\n await createSession(user.id, token, expiresAt);\n\n return c.json({\n success: true,\n user: { ...user, password_hash: undefined } as any,\n token,\n message: \"Login successful\"\n });\n\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({ \n success: false, \n message: \"Login failed\" \n }, 500);\n }\n});\n\n// Logout user\nauth.post(\"/logout\", async (c) => {\n try {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader?.startsWith(\"Bearer \")) {\n return c.json({ \n success: false, \n message: \"No token provided\" \n }, 401);\n }\n\n const token = authHeader.substring(7);\n await deleteSession(token);\n\n return c.json({\n success: true,\n message: \"Logout successful\"\n });\n\n } catch (error) {\n console.error(\"Logout error:\", error);\n return c.json({ \n success: false, \n message: \"Logout failed\" \n }, 500);\n }\n});\n\n// Verify token and get user\nauth.get(\"/me\", async (c) => {\n try {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader?.startsWith(\"Bearer \")) {\n return c.json({ \n success: false, \n message: \"No token provided\" \n }, 401);\n }\n\n const token = authHeader.substring(7);\n const session = await getSessionByToken(token);\n \n if (!session) {\n return c.json({ \n success: false, \n message: \"Invalid or expired token\" \n }, 401);\n }\n\n const { getUserById } = await import(\"../database/queries.ts\");\n const user = await getUserById(session.user_id);\n \n if (!user) {\n return c.json({ \n success: false, \n message: \"User not found\" \n }, 404);\n }\n\n return c.json({\n success: true,\n user: { ...user, password_hash: undefined } as any\n });\n\n } catch (error) {\n console.error(\"Auth verification error:\", error);\n return c.json({ \n success: false, \n message: \"Authentication failed\" \n }, 500);\n }\n});\n\nexport default auth;","deleted","label",[170,171,153],"backend","routes","permalink","https://www.val.town/x/beekay/support_case/code/backend/routes/auth.ts","extension","actionData","errors"]