[{"_1":2,"_172":-5,"_173":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","7037b4412b49b7328160fa57e59f17dfe8779fc7","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_146":147,"_169":170,"_171":-5},"handle","jex","name","io","path","backend/routes/auth.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":-5,"_113":20,"_114":-5,"_115":32,"_14":116,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_23":126,"_129":130,"_132":133,"_145":20},"id","77c1b38c-3947-11f0-b2d8-9e149126039e","createdAt",["D",1748163956311],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","06729840-3947-11f0-b940-6f99fbd8898f","pinnedFileId","pinPreview","screenshotVersion","likeCount","289d8aab-77c7-43d9-a1e8-d8dc0e3c1f1a","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_127":128},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeGE2SUNuVk1TaFdrWlFLRUhZd1B0UWNscDUifQ","org",{"_93":94,"_131":128,"_12":111},"avatar","branch",{"_134":135,"_95":43,"_101":136,"_137":102,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":96,"_144":94},"version",20,"77c20544-3947-11f0-b2d8-9e149126039e","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":148,"_95":149,"_150":151,"_152":153,"_154":136,"_155":156,"_157":158,"_103":159,"_134":32,"_160":161,"_162":163,"_164":20,"_165":-5,"_97":166},"c88cd436-3947-11f0-b898-9e149126039e","auth.ts","fileId","c88cd4ea-3947-11f0-b898-9e149126039e","parentId","a2485966-4f42-4a81-bdd0-dbd14d611097","branchId","branchVersion",6,"latest",true,["D",1748164091857],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { setCookie, getCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { createUser, getUserByEmail, getUserPasswordHash, getUserById } from \"../database/queries.ts\";\nimport { generateId, validateEmail, validateUsername, getRandomAvatar } from \"../../shared/utils.ts\";\nimport type { LoginRequest, RegisterRequest, ApiResponse, User } from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Simple password hashing (in production, use bcrypt or similar)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"bubblespace_salt\");\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nasync function verifyPassword(password: string, hash: string): Promise {\n const hashedInput = await hashPassword(password);\n return hashedInput === hash;\n}\n\n// Register new user\nauth.post('/register', async (c) => {\n try {\n const body: RegisterRequest = await c.req.json();\n \n // Validate input\n if (!body.username || !body.email || !body.password || !body.displayName) {\n return c.json>({\n success: false,\n error: 'All fields are required'\n }, 400);\n }\n\n if (!validateEmail(body.email)) {\n return c.json>({\n success: false,\n error: 'Invalid email format'\n }, 400);\n }\n\n if (!validateUsername(body.username)) {\n return c.json>({\n success: false,\n error: 'Username must be 3-20 characters and contain only letters, numbers, and underscores'\n }, 400);\n }\n\n if (body.password.length < 6) {\n return c.json>({\n success: false,\n error: 'Password must be at least 6 characters'\n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByEmail(body.email);\n if (existingUser) {\n return c.json>({\n success: false,\n error: 'User with this email already exists'\n }, 400);\n }\n\n // Create new user\n const userId = generateId();\n const passwordHash = await hashPassword(body.password);\n const avatar = getRandomAvatar();\n\n const user = await createUser({\n id: userId,\n username: body.username,\n email: body.email,\n passwordHash,\n displayName: body.displayName,\n avatar\n });\n\n // Set session cookie\n setCookie(c, 'session', userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 60 * 60 * 24 * 7 // 7 days\n });\n\n return c.json>({\n success: true,\n data: user\n });\n\n } catch (error) {\n console.error('Registration error:', error);\n return c.json>({\n success: false,\n error: 'Registration failed'\n }, 500);\n }\n});\n\n// Login user\nauth.post('/login', async (c) => {\n try {\n const body: LoginRequest = await c.req.json();\n \n if (!body.email || !body.password) {\n return c.json>({\n success: false,\n error: 'Email and password are required'\n }, 400);\n }\n\n // Get user and verify password\n const user = await getUserByEmail(body.email);\n if (!user) {\n return c.json>({\n success: false,\n error: 'Invalid email or password'\n }, 401);\n }\n\n const passwordHash = await getUserPasswordHash(body.email);\n if (!passwordHash || !(await verifyPassword(body.password, passwordHash))) {\n return c.json>({\n success: false,\n error: 'Invalid email or password'\n }, 401);\n }\n\n // Set session cookie\n setCookie(c, 'session', user.id, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 60 * 60 * 24 * 7 // 7 days\n });\n\n return c.json>({\n success: true,\n data: user\n });\n\n } catch (error) {\n console.error('Login error:', error);\n return c.json>({\n success: false,\n error: 'Login failed'\n }, 500);\n }\n});\n\n// Logout user\nauth.post('/logout', async (c) => {\n deleteCookie(c, 'session');\n return c.json>({\n success: true\n });\n});\n\n// Get current user\nauth.get('/me', async (c) => {\n try {\n const sessionId = getCookie(c, 'session');\n if (!sessionId) {\n return c.json>({\n success: false,\n error: 'Not authenticated'\n }, 401);\n }\n\n const user = await getUserById(sessionId);\n return c.json>({\n success: true,\n data: user\n });\n\n } catch (error) {\n console.error('Get user error:', error);\n return c.json>({\n success: false,\n error: 'Failed to get user'\n }, 500);\n }\n});\n\n// Middleware to check authentication\nexport async function requireAuth(c: any, next: any) {\n const sessionId = getCookie(c, 'session');\n if (!sessionId) {\n return c.json>({\n success: false,\n error: 'Authentication required'\n }, 401);\n }\n\n try {\n const user = await getUserById(sessionId);\n c.set('user', user);\n await next();\n } catch (error) {\n return c.json>({\n success: false,\n error: 'Invalid session'\n }, 401);\n }\n}\n\nexport default auth;","deleted","label",[167,168,149],"backend","routes","permalink","https://www.val.town/x/jex/io/code/backend/routes/auth.ts","extension","actionData","errors"]