\n \n \n Continue with GitHub\n \n

\n );\n }\n return (\n

\n Welcome,\n \n {user.name}!\n

\n Logout\n

\n );\n}\n\nconst client_id = Deno.env.get(\"GITHUB_OAUTH_CLIENT_ID\");\nconst client_secret = Deno.env.get(\"GITHUB_OAUTH_CLIENT_SECRET\");\nconst cookie_secret = Deno.env.get(\"SESSION_COOKIE_SECRET\");\n\nfunction Login(this: FC) {\n const state = crypto.randomUUID();\n const oauth_url =\n `https://github.com/login/oauth/authorize?client_id=${client_id}&scope=read:user+user:email&state=${state}`;\n this.session.set(\"oauth_state\", state);\n return ;\n}\n\nfunction Logout(this: FC) {\n this.session.destroy();\n return ;\n}\n\nasync function Callback(this: FC) {\n const { searchParams } = this.request.URL;\n const code = searchParams.get(\"code\");\n const state = searchParams.get(\"state\");\n const oauth_state = this.session.get(\"oauth_state\");\n if (!code) {\n return

Missing code

;\n }\n if (!state) {\n return

Missing state

;\n }\n if (state !== oauth_state) {\n return

Invalid state

;\n }\n const { access_token, error } = await fetch(\n \"https://github.com/login/oauth/access_token\",\n {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ client_id, client_secret, code }),\n },\n ).then((r) => r.json());\n if (error) {\n return

{error}

;\n }\n const { name, avatar_url } = await fetch(\"https://api.github.com/user\", {\n headers: {\n Accept: \"application/json\",\n Authorization: `token ${access_token}`,\n UserAgent: \"Deno/2.0.0\",\n },\n }).then((r) => r.json());\n this.session.delete(\"oauth_state\");\n this.session.set(\"user\", { name, avatar_url });\n return ;\n}\n\nconst routes = {\n \"/\": Index,\n \"/login\": Login,\n \"/logout\": Logout,\n \"/callback\": Callback,\n};\n\nexport default (req: Request) => (\n \n \n \n \n);","deleted","label",[98],"permalink","https://www.val.town/x/bigmoves/mono-jsx/code/session.tsx","extension","actionData","errors"]