[{"_1":2,"_174":-5,"_175":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","5c349ef9e7d7333839a0634dd567aae2d49623a6","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_148":149,"_171":172,"_173":-5},"handle","jibolad1","name","LearnEasy","path","backend/routes/auth.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":-5,"_114":20,"_115":-5,"_116":-5,"_117":32,"_14":118,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_23":128,"_131":132,"_134":135,"_147":20},"id","9a6bb110-3fbb-11f0-976c-76b3cceeab13","createdAt",["D",1748873543065],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","dfc821a0-3fb9-11f0-b6e9-ab0b2f88b858","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","e1b77b5f-4bdc-4e86-aa64-92dd8eff8f3e","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_129":130},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4eEhMek1DdnNLV2dZUVloVktrTngyNjZlSiJ9","org",{"_94":95,"_133":130,"_12":112},"avatar","branch",{"_136":137,"_96":44,"_102":138,"_139":103,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":97,"_146":95},"version",19,"9a6c253c-3fbb-11f0-976c-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":150,"_96":151,"_152":153,"_154":155,"_156":138,"_157":158,"_159":160,"_104":161,"_136":32,"_162":163,"_164":165,"_166":20,"_167":-5,"_98":168},"b17c9396-3fbc-11f0-b0ee-76b3cceeab13","auth.ts","fileId","b17c944a-3fbc-11f0-b0ee-76b3cceeab13","parentId","4757d82c-23f3-4a6c-b3fe-ee3ea6699320","branchId","branchVersion",5,"latest",true,["D",1748874011255],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { createUser, getUserByEmail, createSession, getSessionUser, deleteSession } from \"../database/queries.ts\";\nimport type { LoginForm, RegisterForm, ApiResponse, User } from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Simple password hashing (in production, use bcrypt or similar)\nasync function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"salt_string_here\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nfunction generateSessionId(): string {\n return crypto.randomUUID();\n}\n\n// Register new user\nauth.post(\"/register\", async (c) => {\n try {\n const body: RegisterForm = await c.req.json();\n \n // Validate required fields\n if (!body.name || !body.email || !body.password || !body.school || !body.grade_level) {\n return c.json>({ \n success: false, \n error: \"All fields except bio are required\" \n }, 400);\n }\n\n // Check if user already exists\n const existingUser = await getUserByEmail(body.email);\n if (existingUser) {\n return c.json>({ \n success: false, \n error: \"User with this email already exists\" \n }, 400);\n }\n\n // Hash password and create user\n const passwordHash = await hashPassword(body.password);\n const userId = await createUser({\n name: body.name,\n email: body.email,\n password_hash: passwordHash,\n school: body.school,\n grade_level: body.grade_level,\n bio: body.bio\n });\n\n // Create session\n const sessionId = generateSessionId();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days\n await createSession(sessionId, userId, expiresAt);\n\n // Set session cookie\n setCookie(c, \"session\", sessionId, {\n expires: expiresAt,\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\"\n });\n\n return c.json>({ \n success: true, \n data: { userId } \n });\n\n } catch (error) {\n console.error(\"Registration error:\", error);\n return c.json>({ \n success: false, \n error: \"Registration failed\" \n }, 500);\n }\n});\n\n// Login user\nauth.post(\"/login\", async (c) => {\n try {\n const body: LoginForm = await c.req.json();\n \n if (!body.email || !body.password) {\n return c.json>({ \n success: false, \n error: \"Email and password are required\" \n }, 400);\n }\n\n // Find user and verify password\n const user = await getUserByEmail(body.email);\n if (!user) {\n return c.json>({ \n success: false, \n error: \"Invalid email or password\" \n }, 401);\n }\n\n const passwordHash = await hashPassword(body.password);\n if (passwordHash !== user.password_hash) {\n return c.json>({ \n success: false, \n error: \"Invalid email or password\" \n }, 401);\n }\n\n // Create session\n const sessionId = generateSessionId();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days\n await createSession(sessionId, user.id, expiresAt);\n\n // Set session cookie\n setCookie(c, \"session\", sessionId, {\n expires: expiresAt,\n httpOnly: true,\n secure: true,\n sameSite: \"Strict\"\n });\n\n return c.json }>>({ \n success: true, \n data: { \n user: {\n id: user.id,\n name: user.name,\n email: user.email,\n school: user.school,\n grade_level: user.grade_level,\n bio: user.bio,\n reputation_stars: user.reputation_stars,\n total_sessions: user.total_sessions,\n created_at: user.created_at\n }\n } \n });\n\n } catch (error) {\n console.error(\"Login error:\", error);\n return c.json>({ \n success: false, \n error: \"Login failed\" \n }, 500);\n }\n});\n\n// Logout user\nauth.post(\"/logout\", async (c) => {\n try {\n const sessionId = getCookie(c, \"session\");\n if (sessionId) {\n await deleteSession(sessionId);\n }\n \n deleteCookie(c, \"session\");\n \n return c.json>({ success: true });\n\n } catch (error) {\n console.error(\"Logout error:\", error);\n return c.json>({ \n success: false, \n error: \"Logout failed\" \n }, 500);\n }\n});\n\n// Get current user\nauth.get(\"/me\", async (c) => {\n try {\n const sessionId = getCookie(c, \"session\");\n if (!sessionId) {\n return c.json>({ \n success: false, \n error: \"Not authenticated\" \n }, 401);\n }\n\n const user = await getSessionUser(sessionId);\n if (!user) {\n return c.json>({ \n success: false, \n error: \"Invalid session\" \n }, 401);\n }\n\n return c.json }>>({ \n success: true, \n data: { \n user: {\n id: user.id,\n name: user.name,\n email: user.email,\n school: user.school,\n grade_level: user.grade_level,\n bio: user.bio,\n reputation_stars: user.reputation_stars,\n total_sessions: user.total_sessions,\n created_at: user.created_at\n }\n } \n });\n\n } catch (error) {\n console.error(\"Get user error:\", error);\n return c.json>({ \n success: false, \n error: \"Failed to get user\" \n }, 500);\n }\n});\n\n// Middleware to check authentication\nexport async function requireAuth(c: any, next: any) {\n const sessionId = getCookie(c, \"session\");\n if (!sessionId) {\n return c.json>({ \n success: false, \n error: \"Authentication required\" \n }, 401);\n }\n\n const user = await getSessionUser(sessionId);\n if (!user) {\n return c.json>({ \n success: false, \n error: \"Invalid session\" \n }, 401);\n }\n\n c.set(\"user\", user);\n await next();\n}\n\nexport default auth;","deleted","label",[169,170,151],"backend","routes","permalink","https://www.val.town/x/jibolad1/LearnEasy/code/backend/routes/auth.ts","extension","actionData","errors"]