Invalid or expired link

This magic link has expired or has already been used.

\n Go back to Third Timer\n `,\n 400,\n );\n }\n\n const { token: sessionToken } = await createUserSession(result.userId);\n const cookie = buildSessionCookie(sessionToken);\n\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": cookie,\n },\n });\n});\n\n// POST /logout\nauthApp.post(\"/logout\", async (c) => {\n const sessionToken = c.get(\"sessionToken\");\n\n if (sessionToken) {\n await invalidateSession(sessionToken);\n }\n\n clearSessionCookie(c);\n return c.json({ success: true });\n});\n\n// POST /link-account — link an ownerToken to the authenticated user\nauthApp.post(\"/link-account\", async (c) => {\n const user = c.get(\"user\");\n if (!user) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n\n const { ownerToken } = await c.req.json();\n if (!ownerToken || typeof ownerToken !== \"string\") {\n return c.json({ error: \"ownerToken is required\" }, 400);\n }\n\n await linkOwnerToken(ownerToken, user.id);\n return c.json({ success: true });\n});\n\n// POST /change-email — authenticated; sends a confirmation link to the new address\nauthApp.post(\"/change-email\", async (c) => {\n const user = c.get(\"user\");\n if (!user) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n\n const { email } = await c.req.json();\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n\n const newEmail = email.trim().toLowerCase();\n if (!newEmail.includes(\"@\")) {\n return c.json({ error: \"Invalid email\" }, 400);\n }\n\n if (newEmail === user.email) {\n return c.json({ error: \"That is already your email address\" }, 400);\n }\n\n const existing = await getUserByEmail(newEmail);\n if (existing) {\n return c.json({ error: \"That email is already in use\" }, 400);\n }\n\n const { token } = await createEmailChangeToken(user.id, newEmail);\n const url = new URL(c.req.url);\n const changeUrl = `${url.origin}/auth/change-email/${token}`;\n\n await emailService.sendChangeEmailLink(newEmail, changeUrl);\n\n return c.json({ success: true });\n});\n\n// GET /change-email/:token — verify and update email\nauthApp.get(\"/change-email/:token\", async (c) => {\n const token = c.req.param(\"token\");\n const result = await verifyEmailChangeToken(token);\n\n if (!result) {\n return c.html(\n `\n

Invalid or expired link

This email change link has expired or has already been used.

\n Go back to Third Timer\n `,\n 400,\n );\n }\n\n return new Response(null, {\n status: 302,\n headers: { Location: \"/?email_changed=1\" },\n });\n});\n\n// GET /me — return current user or null\nauthApp.get(\"/me\", async (c) => {\n const user = c.get(\"user\");\n return c.json({ user: user || null });\n});\n\nexport default authApp;\n","deleted","label",[188,189,190,170],"src","backend","routes","permalink","https://www.val.town/x/ozanatgreenpt/thirdTimer/code/src/backend/routes/auth.ts","extension","actionData","errors"]