[{"_1":2,"_176":-5,"_177":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","4e736cb42e83c17c10d9f33412034a74b06f3941","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_173":174,"_175":-5},"handle","ianmenethil","name","ZenServer","path","src/services/dbService.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":73,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":116,"_118":-5,"_119":32,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","619e7f00-58a9-11f0-a700-f69ea79377d9","createdAt",["D",1751614495896],"deletedAt","legacyEnvVars","privacy","unlisted","description","imageUrl","5856754a-b1b9-4358-87d1-77f1d9f79e45","pinnedFileId","9f5c41ce-58a9-11f0-947f-f69ea79377d9","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","7559f40a-a274-4a9b-8f8b-7486509c3949","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ycXU1U2ZIVEk3NnhGTXRySE0wbWdYQncxSnYifQ","org",{"_94":95,"_135":132,"_12":112},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",883,"619ecc08-58a9-11f0-a700-f69ea79377d9","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":153,"_154":155,"_156":157,"_158":140,"_159":160,"_161":116,"_104":162,"_138":163,"_164":165,"_166":167,"_168":20,"_169":-5,"_98":170},"17d800f6-5fcc-11f0-8d19-0224a6c84d84","dbService.ts","fileId","07f361b8-5fc6-11f0-99bd-0224a6c84d84","parentId","9ec2a1a4-58a9-11f0-9d42-f69ea79377d9","branchId","branchVersion",806,"latest",["D",1752399062557],1,"fileType","script","content","/**\r\n * Database Service for ZenServer\r\n * \r\n * Provides a clean, sanitized interface to SQLite database operations.\r\n * Handles CSRF sessions, nonces, bookings, and other data persistence.\r\n */\r\n\r\nimport { Database } from \"../database/database.ts\";\r\nimport { logger } from \"../utils/logger.ts\";\r\nimport { environment } from \"../config/environment.ts\";\r\n\r\n// ========================================\r\n// Type Definitions\r\n// ========================================\r\n\r\nexport interface CSRFSession {\r\n sessionId: string;\r\n xsrfToken: string;\r\n createdAt: Date;\r\n expiresAt: Date;\r\n}\r\n\r\nexport interface CSRFValidationResult {\r\n valid: boolean;\r\n error?: string;\r\n sessionId?: string;\r\n}\r\n\r\nexport interface SecurityContext {\r\n clientIP: string;\r\n userAgent?: string;\r\n origin?: string;\r\n}\r\n\r\n// ========================================\r\n// Database Service Class\r\n// ========================================\r\n\r\nexport class DatabaseService {\r\n private static instance: DatabaseService;\r\n private db: Database;\r\n\r\n private constructor() {\r\n this.db = new Database();\r\n }\r\n\r\n /**\r\n * Get singleton instance of DatabaseService\r\n */\r\n static getInstance(): DatabaseService {\r\n if (!DatabaseService.instance) {\r\n DatabaseService.instance = new DatabaseService();\r\n }\r\n return DatabaseService.instance;\r\n }\r\n\r\n /**\r\n * Initialize the database and create required tables\r\n */\r\n async initialize(): Promise {\r\n await this.db.initialize();\r\n await this.createCSRFSessionsTable();\r\n }\r\n\r\n // ========================================\r\n // CSRF Session Management\r\n // ========================================\r\n\r\n /**\r\n * Store a CSRF session in the database\r\n */\r\n async storeCSRFSession(session: CSRFSession): Promise {\r\n try {\r\n const sql = `\r\n INSERT OR REPLACE INTO csrf_sessions \r\n (session_id, xsrf_token, created_at, expires_at)\r\n VALUES (?, ?, ?, ?)\r\n `;\r\n \r\n await this.db.execute(sql, [\r\n session.sessionId,\r\n session.xsrfToken,\r\n session.createdAt.toISOString(),\r\n session.expiresAt.toISOString()\r\n ]);\r\n\r\n logger.debug(\"CSRF session stored\", {\r\n sessionId: session.sessionId.substring(0, 8) + \"...\",\r\n expiresAt: session.expiresAt.toISOString()\r\n });\r\n } catch (error) {\r\n logger.error(\"Failed to store CSRF session\", {\r\n error: error instanceof Error ? error.message : String(error),\r\n sessionId: session.sessionId.substring(0, 8) + \"...\"\r\n });\r\n throw new Error(\"Failed to store CSRF session\");\r\n }\r\n }\r\n\r\n /**\r\n * Validate CSRF token against stored session\r\n */\r\n async validateCSRFToken(sessionId: string, xsrfToken: string): Promise {\r\n try {\r\n const sql = `\r\n SELECT session_id, xsrf_token, expires_at \r\n FROM csrf_sessions \r\n WHERE session_id = ? AND expires_at > datetime('now')\r\n `;\r\n \r\n const result = await this.db.queryOne(sql, [sessionId]);\r\n\r\n if (!result) {\r\n return { valid: false, error: \"Invalid or expired session\" };\r\n }\r\n\r\n if (result.xsrf_token !== xsrfToken) {\r\n return { valid: false, error: \"CSRF token mismatch\" };\r\n }\r\n\r\n logger.debug(\"CSRF validation successful\", {\r\n sessionId: sessionId.substring(0, 8) + \"...\",\r\n xsrfToken: xsrfToken.substring(0, 8) + \"...\"\r\n });\r\n\r\n return { valid: true, sessionId };\r\n } catch (error) {\r\n logger.error(\"CSRF validation error\", {\r\n error: error instanceof Error ? error.message : String(error),\r\n sessionId: sessionId.substring(0, 8) + \"...\"\r\n });\r\n return { valid: false, error: \"CSRF validation failed\" };\r\n }\r\n }\r\n\r\n /**\r\n * Clean up expired CSRF sessions\r\n */\r\n async cleanupExpiredCSRFSessions(): Promise {\r\n try {\r\n const sql = \"DELETE FROM csrf_sessions WHERE expires_at <= datetime('now')\";\r\n const result = await this.db.execute(sql);\r\n \r\n if (result.rowsAffected > 0) {\r\n logger.debug(\"Cleaned up expired CSRF sessions\", {\r\n removed: result.rowsAffected\r\n });\r\n }\r\n } catch (error) {\r\n logger.error(\"Failed to cleanup expired CSRF sessions\", {\r\n error: error instanceof Error ? error.message : String(error)\r\n });\r\n }\r\n }\r\n\r\n // ========================================\r\n // Nonce Management (Use NonceService from publicPayNonceService.ts)\r\n // ========================================\r\n \r\n // Note: Nonce operations should use NonceService from publicPayNonceService.ts\r\n // which provides full-featured nonce handling with honeypot detection,\r\n // reuse logic, HMAC signatures, and enhanced security checks.\r\n\r\n // ========================================\r\n // General Database Operations\r\n // ========================================\r\n\r\n async query(sql: string, params: any[] = []): Promise {\r\n return this.db.query(sql, params);\r\n }\r\n\r\n async queryOne(sql: string, params: any[] = []): Promise {\r\n return this.db.queryOne(sql, params);\r\n }\r\n\r\n async execute(sql: string, params: any[] = []) {\r\n return this.db.execute(sql, params);\r\n }\r\n\r\n // ========================================\r\n // Private Methods\r\n // ========================================\r\n\r\n /**\r\n * Create CSRF sessions table if it doesn't exist\r\n */\r\n private async createCSRFSessionsTable(): Promise {\r\n try {\r\n const sql = `\r\n CREATE TABLE IF NOT EXISTS csrf_sessions (\r\n session_id TEXT PRIMARY KEY,\r\n xsrf_token TEXT NOT NULL,\r\n created_at TEXT NOT NULL,\r\n expires_at TEXT NOT NULL\r\n )\r\n `;\r\n \r\n await this.db.execute(sql);\r\n\r\n // Create index for efficient cleanup\r\n const indexSql = `\r\n CREATE INDEX IF NOT EXISTS idx_csrf_sessions_expires_at \r\n ON csrf_sessions(expires_at)\r\n `;\r\n \r\n await this.db.execute(indexSql);\r\n\r\n logger.debug(\"CSRF sessions table created/verified\");\r\n } catch (error) {\r\n logger.error(\"Failed to create CSRF sessions table\", {\r\n error: error instanceof Error ? error.message : String(error)\r\n });\r\n throw new Error(\"Failed to initialize CSRF sessions table\");\r\n }\r\n }\r\n}\r\n\r\n// ========================================\r\n// Convenience Functions\r\n// ========================================\r\n\r\n/**\r\n * Get initialized database service instance\r\n */\r\nexport async function getDB(): Promise {\r\n const dbService = DatabaseService.getInstance();\r\n await dbService.initialize();\r\n return dbService;\r\n}\r\n\r\n/**\r\n * Store CSRF session\r\n */\r\nexport async function storeCSRFSession(session: CSRFSession): Promise {\r\n const db = await getDB();\r\n return db.storeCSRFSession(session);\r\n}\r\n\r\n/**\r\n * Validate CSRF token\r\n */\r\nexport async function validateCSRFToken(sessionId: string, xsrfToken: string): Promise {\r\n const db = await getDB();\r\n return db.validateCSRFToken(sessionId, xsrfToken);\r\n}\r\n\r\n/**\r\n * Clean up expired CSRF sessions (call periodically)\r\n */\r\nexport async function cleanupExpiredCSRFSessions(): Promise {\r\n const db = await getDB();\r\n return db.cleanupExpiredCSRFSessions();\r\n}","deleted","label",[171,172,153],"src","services","permalink","https://www.val.town/x/ianmenethil/ZenServer/code/src/services/dbService.ts","extension","actionData","errors"]