[{"_1":2,"_172":-5,"_173":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","4ff166458996ccfe3bfa8627489090938620785a","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_146":147,"_169":170,"_171":-5},"handle","ikeali","name","my-first-val","path","backend/routes/auth.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":-5,"_113":20,"_114":-5,"_115":32,"_14":116,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_23":126,"_129":130,"_132":133,"_145":20},"id","33614708-3f9f-11f0-9765-76b3cceeab13","createdAt",["D",1748861344283],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","1ef380b0-3f9f-11f0-ad5b-814c56c8abb0","pinnedFileId","pinPreview","screenshotVersion","likeCount","175dd161-d97e-4dae-8110-5f4423725a9e","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_127":128},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeHd1OENvNzliczFIeTFodFNiYms3ejB3dTQifQ","org",{"_93":94,"_131":128},"avatar","branch",{"_134":135,"_95":43,"_101":136,"_137":102,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":96,"_144":94},"version",26,"336188a8-3f9f-11f0-9765-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":148,"_95":149,"_150":151,"_152":153,"_154":136,"_155":156,"_157":158,"_103":159,"_134":32,"_160":161,"_162":163,"_164":20,"_165":-5,"_97":166},"1b966e76-3fa1-11f0-a04b-76b3cceeab13","auth.ts","fileId","1b966fa2-3fa1-11f0-a04b-76b3cceeab13","parentId","0a2159b3-b20f-45b5-addf-0ec05fad8962","branchId","branchVersion",11,"latest",true,["D",1748862163351],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { setCookie, getCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport * as bcrypt from \"https://deno.land/x/bcrypt@v0.4.1/mod.ts\";\nimport { \n createUser, \n getUserByUsername, \n getUserByEmail, \n createSession, \n getSessionUser, \n deleteSession \n} from \"../database/queries.ts\";\nimport { isValidEmail, isValidUsername, isValidPassword, sanitizeInput } from \"../../shared/utils.ts\";\nimport type { LoginRequest, RegisterRequest, ApiResponse } from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Generate session ID\nfunction generateSessionId(): string {\n return crypto.randomUUID();\n}\n\n// Register endpoint\nauth.post(\"/register\", async (c) => {\n try {\n const body: RegisterRequest = await c.req.json();\n const { username, email, password } = body;\n\n // Validate input\n if (!username || !email || !password) {\n return c.json({ \n success: false, \n error: \"Username, email, and password are required\" \n }, 400);\n }\n\n const cleanUsername = sanitizeInput(username);\n const cleanEmail = sanitizeInput(email);\n\n if (!isValidUsername(cleanUsername)) {\n return c.json({ \n success: false, \n error: \"Username must be 3-20 characters, alphanumeric and underscores only\" \n }, 400);\n }\n\n if (!isValidEmail(cleanEmail)) {\n return c.json({ \n success: false, \n error: \"Invalid email format\" \n }, 400);\n }\n\n if (!isValidPassword(password)) {\n return c.json({ \n success: false, \n error: \"Password must be at least 6 characters\" \n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByUsername(cleanUsername) || await getUserByEmail(cleanEmail);\n if (existingUser) {\n return c.json({ \n success: false, \n error: \"Username or email already exists\" \n }, 409);\n }\n\n // Hash password\n const passwordHash = await bcrypt.hash(password, 12);\n\n // Create user\n const user = await createUser(cleanUsername, cleanEmail, passwordHash);\n\n // Create session\n const sessionId = generateSessionId();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days\n await createSession(sessionId, user.id, expiresAt);\n\n // Set session cookie\n setCookie(c, \"session_id\", sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n expires: expiresAt,\n path: \"/\"\n });\n\n // Return user without password hash\n const { password_hash, ...userResponse } = user;\n return c.json({ \n success: true, \n data: userResponse \n });\n\n } catch (error) {\n console.error(\"Registration error:\", error);\n return c.json({ \n success: false, \n error: \"Internal server error\" \n }, 500);\n }\n});\n\n// Login endpoint\nauth.post(\"/login\", async (c) => {\n try {\n const body: LoginRequest = await c.req.json();\n const { username, password } = body;\n\n if (!username || !password) {\n return c.json({ \n success: false, \n error: \"Username and password are required\" \n }, 400);\n }\n\n // Get user\n const user = await getUserByUsername(sanitizeInput(username));\n if (!user) {\n return c.json({ \n success: false, \n error: \"Invalid username or password\" \n }, 401);\n }\n\n // Verify password\n const isValidPassword = await bcrypt.compare(password, user.password_hash);\n if (!isValidPassword) {\n return c.json({ \n success: false, \n error: \"Invalid username or password\" \n }, 401);\n }\n\n // Create session\n const sessionId = generateSessionId();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days\n await createSession(sessionId, user.id, expiresAt);\n\n // Set session cookie\n setCookie(c, \"session_id\", sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n expires: expiresAt,\n path: \"/\"\n });\n\n // Return user without password hash\n const { password_hash, ...userResponse } = user;\n return c.json({ \n success: true, \n data: userResponse \n });\n\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({ \n success: false, \n error: \"Internal server error\" \n }, 500);\n }\n});\n\n// Logout endpoint\nauth.post(\"/logout\", async (c) => {\n try {\n const sessionId = getCookie(c, \"session_id\");\n \n if (sessionId) {\n await deleteSession(sessionId);\n }\n\n // Clear session cookie\n deleteCookie(c, \"session_id\", { path: \"/\" });\n\n return c.json({ success: true });\n\n } catch (error) {\n console.error(\"Logout error:\", error);\n return c.json({ \n success: false, \n error: \"Internal server error\" \n }, 500);\n }\n});\n\n// Get current user endpoint\nauth.get(\"/me\", async (c) => {\n try {\n const sessionId = getCookie(c, \"session_id\");\n \n if (!sessionId) {\n return c.json({ \n success: false, \n error: \"Not authenticated\" \n }, 401);\n }\n\n const user = await getSessionUser(sessionId);\n if (!user) {\n return c.json({ \n success: false, \n error: \"Invalid session\" \n }, 401);\n }\n\n // Return user without password hash\n const { password_hash, ...userResponse } = user;\n return c.json({ \n success: true, \n data: userResponse \n });\n\n } catch (error) {\n console.error(\"Get user error:\", error);\n return c.json({ \n success: false, \n error: \"Internal server error\" \n }, 500);\n }\n});\n\n// Middleware to check authentication\nexport async function requireAuth(c: any, next: any) {\n const sessionId = getCookie(c, \"session_id\");\n \n if (!sessionId) {\n return c.json({ \n success: false, \n error: \"Authentication required\" \n }, 401);\n }\n\n const user = await getSessionUser(sessionId);\n if (!user) {\n return c.json({ \n success: false, \n error: \"Invalid session\" \n }, 401);\n }\n\n // Add user to context\n c.set(\"user\", user);\n await next();\n}\n\nexport default auth;","deleted","label",[167,168,149],"backend","routes","permalink","https://www.val.town/x/ikeali/my-first-val/code/backend/routes/auth.ts","extension","actionData","errors"]