Authenticate

Entry ${escape(entryId)} ${actionLabel.toLowerCase()}.

`;\n }\n\n const faviconImg = article.favicon\n ? ` $\"\"$ `\n : \"\";\n\n const titleHtml = article.url\n ? `${escape(article.title!)}`\n : `${escape(article.title!)}`;\n\n const feedHtml = article.feed\n ? ` (${escape(article.feed)})`\n : \"\";\n\n const publishedHtml = article.published\n ? ` — ${escape(article.published)}`\n : \"\";\n\n return `\n\n

✓ ${actionLabel}

\n ${faviconImg}${titleHtml}${feedHtml}${publishedHtml}\n

\n\n`;\n}\n\nfunction renderSecretPrompt(\n entryId: string,\n action: \"read\" | \"unread\",\n article: ArticleDetails | null,\n error?: string,\n): string {\n const title = article?.title || `Entry ${entryId}`;\n const actionLabel = action === \"read\" ? \"Mark as read\" : \"Mark as unread\";\n const errorHtml = error\n ? `

${escape(error)}

`\n : \"\";\n\n const faviconImg = article?.favicon\n ? ` $\"\"$ `\n : \"\";\n\n const articleHtml = article\n ? `

\n ${faviconImg}${escape(article.title!)}\n

\n ${article.feed ? `

${escape(article.feed)}

` : \"\"}\n

`\n : \"\";\n\n return `\n\n \n \n Authenticate\n\n\n

\n ${articleHtml}\n ${errorHtml}\n \n

\n\n \n\n`;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // GET request from email link - show secret prompt\n if (req.method === \"GET\") {\n const entryId = url.searchParams.get(\"entry_id\");\n const action =\n path === \"/read\" ? \"read\" : path === \"/unread\" ? \"unread\" : null;\n\n if (!entryId || isNaN(Number(entryId))) {\n return new Response(\"Missing or invalid entry_id parameter\", {\n status: 400,\n });\n }\n\n if (!action) {\n return new Response(\"Not found.\", { status: 404 });\n }\n\n const article = getArticleDetails(url.searchParams);\n return new Response(renderSecretPrompt(entryId, action, article), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // POST request from JavaScript - perform action with secret validation\n if (req.method === \"POST\") {\n let actionRequest: ActionRequest;\n try {\n actionRequest = await req.json();\n } catch {\n return new Response(\"Invalid JSON\", { status: 400 });\n }\n\n const { action, entry_id, secret, ...articleData } = actionRequest;\n\n if (!entry_id || isNaN(Number(entry_id))) {\n return new Response(\"Missing or invalid entry_id\", { status: 400 });\n }\n\n if (!action || ![\"read\", \"unread\"].includes(action)) {\n return new Response(\"Missing or invalid action\", { status: 400 });\n }\n\n if (!secret) {\n return new Response(\"Missing secret\", { status: 400 });\n }\n\n // Validate secret\n const configuredSecret = Deno.env.get(\"entry_actions_secret\");\n if (!configuredSecret) {\n console.error(\"entry_actions_secret environment variable not configured\");\n return new Response(\"Server configuration error\", { status: 500 });\n }\n\n const secretMatch = secretsMatch(secret, configuredSecret);\n if (!secretMatch) {\n // Return the prompt page again with an error message\n const article: ArticleDetails = {\n title: articleData.title || null,\n url: articleData.url || null,\n feed: articleData.feed || null,\n published: articleData.published || null,\n favicon: articleData.favicon || null,\n };\n return new Response(\n renderSecretPrompt(\n entry_id,\n action,\n article,\n \"Invalid secret. Please try again.\",\n ),\n {\n status: 401,\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n }\n\n // Secret is valid - perform the action\n const feedbinEndpoint = \"unread_entries.json\";\n const feedbinMethod = action === \"read\" ? \"DELETE\" : \"POST\";\n\n try {\n const res = await feedbin(feedbinEndpoint, feedbinMethod, {\n unread_entries: [Number(entry_id)],\n });\n\n if (!res.ok) {\n const body = await res.text();\n console.error(`Feedbin API error: ${res.status} ${body}`);\n return new Response(\n `Failed to update entry: ${res.status} - ${res.statusText}`,\n { status: 500 },\n );\n }\n\n const article: ArticleDetails = {\n title: articleData.title || null,\n url: articleData.url || null,\n feed: articleData.feed || null,\n published: articleData.published || null,\n favicon: articleData.favicon || null,\n };\n\n return new Response(renderConfirmationPage(action, entry_id, article), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n } catch (err) {\n console.error(`Error performing action: ${err}`);\n return new Response(\"Internal server error\", { status: 500 });\n }\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}\n","deleted","label",[102],"permalink","https://www.val.town/x/diminutivesloop/feedbin-email-digest/code/entry-actions.http.ts","extension","actionData","errors"]