[{"_1":2,"_175":-5,"_176":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","5f8f00a127b1349c32de089cedf4e10bc7855654","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_149":150,"_172":173,"_174":-5},"handle","jeffy","name","refashioned","path","backend/routes/auth.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":-5,"_114":20,"_115":-5,"_116":-5,"_117":118,"_14":119,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_23":129,"_132":133,"_135":136,"_148":20},"id","a3530fc2-3f8d-11f0-9c27-76b3cceeab13","createdAt",["D",1748853801153],"deletedAt","legacyEnvVars","privacy","unlisted","description","imageUrl","c4bd24b0-3f7c-11f0-ad5b-814c56c8abb0","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"7e8dfb22-d9d4-4327-a157-92837309a0a4","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_130":131},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeHdRQjZEaWNlNG56cDExM1VzSkFDSk5XY3EifQ","org",{"_94":95,"_134":131,"_12":112},"avatar","branch",{"_137":138,"_96":44,"_102":139,"_140":103,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":97,"_147":95},"version",19,"a3535752-3f8d-11f0-9c27-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":151,"_96":152,"_153":154,"_155":156,"_157":139,"_158":159,"_160":161,"_104":162,"_137":32,"_163":164,"_165":166,"_167":20,"_168":-5,"_98":169},"ab72cc96-3f8e-11f0-a484-76b3cceeab13","auth.ts","fileId","ab72cd36-3f8e-11f0-a484-76b3cceeab13","parentId","c6e852b1-9c0a-44c4-807d-67b437192fe4","branchId","branchVersion",7,"latest",true,["D",1748854244272],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { sign, verify } from \"https://esm.sh/hono@3.11.7/jwt\";\nimport { setCookie, getCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { getUserByEmail, createUser } from \"../database/queries.ts\";\nimport type { LoginRequest, SignupRequest, ApiResponse } from \"../../shared/types.ts\";\nimport { validateEmail, validatePassword } from \"../../shared/utils.ts\";\n\nconst auth = new Hono();\n\n// Simple password hashing (in production, use bcrypt)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"salt123\"); // Use proper salt in production\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nasync function verifyPassword(password: string, hash: string): Promise {\n const hashedInput = await hashPassword(password);\n return hashedInput === hash;\n}\n\nconst JWT_SECRET = Deno.env.get(\"JWT_SECRET\") || \"your-secret-key-change-in-production\";\n\n// Login\nauth.post(\"/login\", async (c) => {\n try {\n const body: LoginRequest = await c.req.json();\n const { email, password } = body;\n\n if (!email || !password) {\n return c.json({\n success: false,\n error: \"Email and password are required\"\n }, 400);\n }\n\n if (!validateEmail(email)) {\n return c.json({\n success: false,\n error: \"Invalid email format\"\n }, 400);\n }\n\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({\n success: false,\n error: \"Invalid credentials\"\n }, 401);\n }\n\n const isValidPassword = await verifyPassword(password, user.passwordHash);\n if (!isValidPassword) {\n return c.json({\n success: false,\n error: \"Invalid credentials\"\n }, 401);\n }\n\n // Create JWT token\n const token = await sign({\n userId: user.id,\n email: user.email,\n isAdmin: user.isAdmin,\n exp: Math.floor(Date.now() / 1000) + (24 * 60 * 60) // 24 hours\n }, JWT_SECRET);\n\n // Set HTTP-only cookie\n setCookie(c, \"auth_token\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n maxAge: 24 * 60 * 60 // 24 hours\n });\n\n const { passwordHash, ...userWithoutPassword } = user;\n\n return c.json({\n success: true,\n data: {\n user: userWithoutPassword,\n token\n },\n message: \"Login successful\"\n });\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json({\n success: false,\n error: \"Internal server error\"\n }, 500);\n }\n});\n\n// Signup\nauth.post(\"/signup\", async (c) => {\n try {\n const body: SignupRequest = await c.req.json();\n const { email, password, firstName, lastName } = body;\n\n if (!email || !password || !firstName || !lastName) {\n return c.json({\n success: false,\n error: \"All fields are required\"\n }, 400);\n }\n\n if (!validateEmail(email)) {\n return c.json({\n success: false,\n error: \"Invalid email format\"\n }, 400);\n }\n\n const passwordValidation = validatePassword(password);\n if (!passwordValidation.isValid) {\n return c.json({\n success: false,\n error: passwordValidation.errors.join(\", \")\n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({\n success: false,\n error: \"User with this email already exists\"\n }, 409);\n }\n\n // Hash password and create user\n const passwordHash = await hashPassword(password);\n const user = await createUser({\n email,\n passwordHash,\n firstName,\n lastName\n });\n\n // Create JWT token\n const token = await sign({\n userId: user.id,\n email: user.email,\n isAdmin: user.isAdmin,\n exp: Math.floor(Date.now() / 1000) + (24 * 60 * 60) // 24 hours\n }, JWT_SECRET);\n\n // Set HTTP-only cookie\n setCookie(c, \"auth_token\", token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n maxAge: 24 * 60 * 60 // 24 hours\n });\n\n return c.json({\n success: true,\n data: {\n user,\n token\n },\n message: \"Account created successfully\"\n });\n } catch (error) {\n console.error(\"Signup error:\", error);\n return c.json({\n success: false,\n error: \"Internal server error\"\n }, 500);\n }\n});\n\n// Logout\nauth.post(\"/logout\", (c) => {\n setCookie(c, \"auth_token\", \"\", {\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\",\n maxAge: 0\n });\n\n return c.json({\n success: true,\n message: \"Logged out successfully\"\n });\n});\n\n// Get current user\nauth.get(\"/me\", async (c) => {\n try {\n const token = getCookie(c, \"auth_token\") || c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\");\n \n if (!token) {\n return c.json({\n success: false,\n error: \"No authentication token provided\"\n }, 401);\n }\n\n const payload = await verify(token, JWT_SECRET);\n const user = await getUserByEmail(payload.email);\n \n if (!user) {\n return c.json({\n success: false,\n error: \"User not found\"\n }, 404);\n }\n\n const { passwordHash, ...userWithoutPassword } = user;\n\n return c.json({\n success: true,\n data: userWithoutPassword\n });\n } catch (error) {\n console.error(\"Auth verification error:\", error);\n return c.json({\n success: false,\n error: \"Invalid or expired token\"\n }, 401);\n }\n});\n\n// Middleware to verify authentication\nexport async function authMiddleware(c: any, next: any) {\n try {\n const token = getCookie(c, \"auth_token\") || c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\");\n \n if (!token) {\n return c.json({\n success: false,\n error: \"Authentication required\"\n }, 401);\n }\n\n const payload = await verify(token, JWT_SECRET);\n c.set(\"user\", payload);\n \n await next();\n } catch (error) {\n return c.json({\n success: false,\n error: \"Invalid or expired token\"\n }, 401);\n }\n}\n\n// Middleware to verify admin access\nexport async function adminMiddleware(c: any, next: any) {\n const user = c.get(\"user\");\n \n if (!user || !user.isAdmin) {\n return c.json({\n success: false,\n error: \"Admin access required\"\n }, 403);\n }\n \n await next();\n}\n\nexport default auth;","deleted","label",[170,171,152],"backend","routes","permalink","https://www.val.town/x/jeffy/refashioned/code/backend/routes/auth.ts","extension","actionData","errors"]