ANOMALY (VAL TOWN)

\n \n

AVAILABLE: PLASMA RIFLE (50 CR)

\n \n

\n \n

\n \n

ACCESS CHECK (REQUIRES RIFLE)

\n \n \n

[ STANDING BY ]

\n\n \n \n`));\n\n// 2. INVOICE\napp.post(\"/invoice\", (c) => {\n const inv = { offer: \"PLASMA_RIFLE\", amount: 50, nonce: crypto.randomUUID() };\n const fakeJwt = `head.${btoa(JSON.stringify(inv))}.sig`;\n return c.json({ invoice: fakeJwt });\n});\n\n// 3. ENTER (The Critical Step)\napp.post(\"/enter\", async (c) => {\n const { token } = await c.req.json();\n if (!token) return c.json({ authorized: false, error: \"No Token\" });\n\n const payload = JSON.parse(atob(token.split(\".\")[1]));\n\n if (payload.iss !== REGISTRY_URL) {\n return c.json({ authorized: false, error: \"UNTRUSTED ISSUER\" });\n }\n\n try {\n // PURE PUBLIC INTERNET CALL\n // Since Val Town is NOT Cloudflare, this request will succeed!\n const targetUrl = `${REGISTRY_URL}/status/${payload.sub}`;\n\n const checkReq = await fetch(targetUrl, {\n method: \"GET\",\n headers: { \"User-Agent\": \"ValTown-Node/1.0\" },\n });\n\n if (!checkReq.ok) {\n return c.json({\n authorized: false,\n error: `REGISTRY ERROR: ${checkReq.status}`,\n });\n }\n\n const checkData = await checkReq.json();\n\n if (payload.v !== checkData.v) {\n return c.json({ authorized: false, error: \"TOKEN OLD/REVOKED\" });\n }\n\n const items = payload.cap.items || [];\n if (!items.includes(\"PLASMA_RIFLE\")) {\n return c.json({ authorized: false, error: \"NO WEAPON FOUND\" });\n }\n\n return c.json({ authorized: true });\n } catch (e: any) {\n return c.json({\n authorized: false,\n error: \"CONNECTION FAILED: \" + e.message,\n });\n }\n});\n\n// Val Town Entry Point\nexport default app.fetch;","deleted","label",[100],"permalink","https://www.val.town/x/pgs/node-6798/code/main.ts","extension","actionData","errors"]