[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_111":112,"_113":114},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","pikachu","name","Quickstart-Full-Stack","path","backend/auth.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":58,"_59":60,"_61":62,"_63":34,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/pikachu/Quickstart-Full-Stack/code/backend/auth.ts","extension","id","53172d31-689a-47ce-8184-66b134f9728c","auth.ts","fileId","e9910464-4f02-11f1-a74a-ee650bb23af1","parentId","8630361c-4951-11f1-a193-42b51c65c3df","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","branchVersion",342,"latest",true,"createdAt",["D",1788140102664],"version",3,"fileType","script","content","// auth.ts — Val Town OAuth user context helpers.\n// Docs: https://docs.val.town/guides/auth/#sign-in-with-val-town\n\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { getUser, upsertUser } from \"./db.ts\";\nimport { env } from \"./shared.ts\";\n\n// -----------------------------------------------------------------------------\n// types\n// -----------------------------------------------------------------------------\n\nexport interface UserProfile {\n username: string;\n id?: string;\n name?: string;\n email?: string;\n avatarUrl?: string;\n}\n\nexport interface UserCxt {\n user: UserProfile | null;\n isAuthed: boolean;\n isAdmin: boolean;\n isSuperAdmin: boolean;\n}\n\nexport class AuthError extends Error {\n constructor(message: string, readonly status: number) {\n super(message);\n this.name = \"AuthError\";\n }\n}\n\n// -----------------------------------------------------------------------------\n// middleware\n// -----------------------------------------------------------------------------\n\nexport function withValTownAuth(\n handler: (req: Request) => Response | Promise,\n): (req: Request) => Promise {\n return oauthMiddleware(handler) as (req: Request) => Promise;\n}\n\n// -----------------------------------------------------------------------------\n// user context\n// -----------------------------------------------------------------------------\n\n/** Resolve user context. Tracks login in DB when user is authenticated. */\nexport async function getUc(\n req: Request,\n trackLogin = false,\n): Promise {\n const session = await getOAuthUserData(req);\n const user = normalizeUser(session?.user);\n\n if (!user) return { user: null, isAuthed: false, isAdmin: false, isSuperAdmin: false };\n\n const isSuperAdmin = superAdmins().has(norm(user.username));\n\n // Track login in DB (best-effort — don't break request on SQLite failure)\n let isDbAdmin = false;\n try {\n if (trackLogin) await upsertUser(user.username, user.email);\n const dbUser = await getUser(user.username);\n isDbAdmin = dbUser?.is_admin ?? false;\n } catch { /* off-platform or DB unavailable */ }\n\n return { user, isAuthed: true, isAdmin: isDbAdmin || isSuperAdmin, isSuperAdmin };\n}\n\n/** Like getUc but always tracks login. Used for page loads. */\nexport async function getUcWithTracking(req: Request): Promise {\n return getUc(req, true);\n}\n\n/** Require an authenticated user — any signed-in Val Town account, no admin role needed. */\nexport async function getAuthedUc(req: Request): Promise {\n const uc = await getUc(req, false);\n if (!uc.user) throw new AuthError(\"Sign in with Val Town\", 401);\n return uc;\n}\n\n/** Require authenticated admin (DB admin or super-admin). */\nexport async function getAdminUc(req: Request): Promise {\n const uc = await getUc(req, false);\n if (!uc.user) throw new AuthError(\"Sign in with Val Town\", 401);\n if (!uc.isAdmin) throw new AuthError(\"Admin access required\", 403);\n return uc;\n}\n\n/** Require super-admin (env var only). */\nexport async function getSuperAdminUc(req: Request): Promise {\n const uc = await getUc(req, false);\n if (!uc.user) throw new AuthError(\"Sign in with Val Town\", 401);\n if (!uc.isSuperAdmin) throw new AuthError(\"Super-admin access required\", 403);\n return uc;\n}\n\nexport function isAuthError(error: unknown): error is AuthError {\n return error instanceof AuthError;\n}\n\n// -----------------------------------------------------------------------------\n// helpers\n// -----------------------------------------------------------------------------\n\nfunction superAdmins(): Set {\n return new Set(\n env(\"AUTH_SUPER_ADMINS\")\n .split(\",\")\n .map((user) => norm(user))\n .filter(Boolean),\n );\n}\n\nfunction normalizeUser(raw: unknown): UserProfile | null {\n if (!isRecord(raw)) return null;\n\n const username = str(raw.username) ?? str(raw.handle);\n if (!username) return null;\n\n return {\n username,\n id: str(raw.id),\n name: str(raw.name),\n email: str(raw.email),\n avatarUrl: str(raw.avatarUrl) ?? str(raw.avatar_url),\n };\n}\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null;\n}\n\nfunction str(value: unknown): string | undefined {\n if (typeof value === \"string\" && value.length > 0) return value;\n if (typeof value === \"number\") return String(value);\n return undefined;\n}\n\nfunction norm(value: string): string {\n return value.trim().toLowerCase();\n}\n","deleted",false,"label",[47,24],"backend","5a09ae54-4895-11f1-80ec-42b51c65c3df",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789531199&sig=25e0839584bbf63595c6ac6dbd78175c0b770a9cb42a70bb0a297f376a4b3c61","userId","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_110":106},"org",{"_9":10,"_103":104,"_105":106,"_59":60,"_107":108,"_109":44},"branch",{"_37":93,"_11":94,"_22":30,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":12,"_102":10},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789531199&sig=05babba3fe8cea299fe2e8213e88092eb4dfe7ad37c094bcfea9f9ef7e96f614","tier","free","canRestrictVals","profileImageUrl","ctx",{"_86":-5,"_144":145,"_146":147,"_148":149,"_150":44,"_151":44,"_152":44,"_153":34,"_154":-5,"_155":-7,"_156":-7,"_157":158,"_159":44,"_160":44,"_161":-5,"_162":44,"_163":44,"_164":44,"_165":-5},"ENV",{"_115":116,"_117":118,"_119":94,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139,"_140":141,"_142":143},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount",0,"flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]