[{"_1":2,"_174":-5,"_175":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","a31a1550ad486cf340b818a53bc6ddc8c7db0295","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_149":150,"_171":172,"_173":-5},"handle","flumadi","name","task_manager","path","backend/routes/auth.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":113,"_114":115,"_116":115,"_117":-5,"_118":32,"_14":119,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_23":129,"_132":133,"_135":136,"_148":20},"id","eaacd41c-3f37-11f0-b8bd-76b3cceeab13","createdAt",["D",1748816984141],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","1b7f3990-3f33-11f0-ad5b-814c56c8abb0","pinnedFileId","f492857a-3f38-11f0-a089-76b3cceeab13","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","019faf9a-792f-4bbc-992b-10757674eac0","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_130":131},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeHZPNnllaWpkb0hLM3VVWGNyNkttZkVrQzMifQ","org",{"_93":94,"_134":131,"_12":111},"avatar","branch",{"_137":138,"_95":43,"_101":139,"_140":102,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":96,"_147":94},"version",15,"eaad26a6-3f37-11f0-b8bd-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":151,"_95":152,"_153":154,"_155":156,"_157":139,"_158":159,"_160":115,"_103":161,"_137":32,"_162":163,"_164":165,"_166":20,"_167":-5,"_97":168},"dec646e6-3f38-11f0-bfcb-76b3cceeab13","auth.ts","fileId","dec647b8-3f38-11f0-bfcb-76b3cceeab13","parentId","207f2b92-6fd3-4a4e-9a38-822c21db01d1","branchId","branchVersion",5,"latest",["D",1748817393664],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport type { AuthRequest, AuthResponse } from \"../../shared/types.ts\";\nimport {\n createUser,\n getUserByUsername,\n getUserByEmail,\n getUserById,\n createSession,\n getSessionByToken,\n deleteSession\n} from \"../database/queries.ts\";\n\nconst auth = new Hono();\n\n// Simple password hashing (in production, use bcrypt or similar)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"salt_secret_key\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function verifyPassword(password: string, hash: string): Promise {\n const hashedInput = await hashPassword(password);\n return hashedInput === hash;\n}\n\nfunction generateToken(): string {\n return crypto.randomUUID() + \"-\" + Date.now().toString(36);\n}\n\n// Register endpoint\nauth.post(\"/register\", async (c) => {\n try {\n const body: AuthRequest = await c.req.json();\n const { username, email, password } = body;\n\n if (!username || !email || !password) {\n return c.json({\n success: false,\n message: \"Username, email, and password are required\"\n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByUsername(username);\n if (existingUser) {\n return c.json({\n success: false,\n message: \"Username already exists\"\n }, 400);\n }\n\n const existingEmail = await getUserByEmail(email);\n if (existingEmail) {\n return c.json({\n success: false,\n message: \"Email already registered\"\n }, 400);\n }\n\n // Create new user\n const passwordHash = await hashPassword(password);\n const user = await createUser(username, email, passwordHash);\n\n if (!user) {\n return c.json({\n success: false,\n message: \"Failed to create user\"\n }, 500);\n }\n\n // Create session\n const token = generateToken();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString(); // 7 days\n await createSession(user.id, token, expiresAt);\n\n // Set cookie\n setCookie(c, \"auth_token\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n maxAge: 7 * 24 * 60 * 60 // 7 days\n });\n\n return c.json({\n success: true,\n message: \"User registered successfully\",\n user: {\n id: user.id,\n username: user.username,\n email: user.email,\n created_at: user.created_at\n },\n token\n });\n } catch (error) {\n console.error(\"Registration error:\", error);\n return c.json({\n success: false,\n message: \"Internal server error\"\n }, 500);\n }\n});\n\n// Login endpoint\nauth.post(\"/login\", async (c) => {\n try {\n const body: AuthRequest = await c.req.json();\n const { username, password } = body;\n\n if (!username || !password) {\n return c.json({\n success: false,\n message: \"Username and password are required\"\n }, 400);\n }\n\n // Get user\n const user = await getUserByUsername(username);\n if (!user) {\n return c.json({\n success: false,\n message: \"Invalid username or password\"\n }, 401);\n }\n\n // Verify password\n const isValidPassword = await verifyPassword(password, user.password_hash);\n if (!isValidPassword) {\n return c.json({\n success: false,\n message: \"Invalid username or password\"\n }, 401);\n }\n\n // Create session\n const token = generateToken();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString(); // 7 days\n await createSession(user.id, token, expiresAt);\n\n // Set cookie\n setCookie(c, \"auth_token\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n maxAge: 7 * 24 * 60 * 60 // 7 days\n });\n\n return c.json({\n success: true,\n message: \"Login successful\",\n user: {\n id: user.id,\n username: user.username,\n email: user.email,\n created_at: user.created_at\n },\n token\n });\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({\n success: false,\n message: \"Internal server error\"\n }, 500);\n }\n});\n\n// Logout endpoint\nauth.post(\"/logout\", async (c) => {\n try {\n const token = getCookie(c, \"auth_token\");\n if (token) {\n await deleteSession(token);\n }\n \n deleteCookie(c, \"auth_token\");\n \n return c.json({\n success: true,\n message: \"Logged out successfully\"\n });\n } catch (error) {\n console.error(\"Logout error:\", error);\n return c.json({\n success: false,\n message: \"Internal server error\"\n }, 500);\n }\n});\n\n// Get current user endpoint\nauth.get(\"/me\", async (c) => {\n try {\n const token = getCookie(c, \"auth_token\");\n if (!token) {\n return c.json({\n success: false,\n message: \"Not authenticated\"\n }, 401);\n }\n\n const session = await getSessionByToken(token);\n if (!session) {\n deleteCookie(c, \"auth_token\");\n return c.json({\n success: false,\n message: \"Invalid or expired session\"\n }, 401);\n }\n\n const user = await getUserById(session.user_id);\n if (!user) {\n return c.json({\n success: false,\n message: \"User not found\"\n }, 404);\n }\n\n return c.json({\n success: true,\n message: \"User authenticated\",\n user\n });\n } catch (error) {\n console.error(\"Auth check error:\", error);\n return c.json({\n success: false,\n message: \"Internal server error\"\n }, 500);\n }\n});\n\nexport default auth;","deleted","label",[169,170,152],"backend","routes","permalink","https://www.val.town/x/flumadi/task_manager/code/backend/routes/auth.ts","extension","actionData","errors"]