[{"_1":2,"_169":-5,"_170":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","ef3ea8f1dae7292ec07ba068df0da1cbbc96c24e","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_148":149,"_166":167,"_168":-5},"handle","pomdtr","name","auth_middleware","path","main.tsx","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":107,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":-5,"_114":107,"_115":-5,"_116":117,"_14":118,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_23":128,"_131":132,"_134":135,"_147":20},"id","487b69da-277f-11f0-b46e-569c3dd06744","createdAt",["D",1746208807884],"deletedAt","legacyEnvVars",true,"privacy","public","description","imageUrl","8a86e3e7-cae8-48ea-a1d8-c8cf7b30d88c","pinnedFileId","pinPreview","screenshotVersion","likeCount",1,"4b933fb9-e150-4558-9d0a-845e595c8c78","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_129":130},"profileImageUrl","https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg","org",{"_93":94,"_133":130},"avatar","branch",{"_136":137,"_95":43,"_101":138,"_139":102,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":96,"_146":94},"version",103,"487bb5ca-277f-11f0-b46e-569c3dd06744","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":150,"_95":98,"_151":152,"_153":-5,"_154":138,"_155":137,"_156":107,"_103":157,"_136":158,"_159":160,"_161":162,"_163":20,"_164":-5,"_97":165},"4ada6ac8-277f-11f0-b46e-569c3dd06744","fileId","487e1374-277f-11f0-b46e-569c3dd06744","parentId","branchId","branchVersion","latest",["D",1715004523845],102,"fileType","script","content","import * as cookie from \"https://deno.land/std/http/cookie.ts\";\nimport { html } from \"https://esm.town/v/stevekrouse/html?v=5\";\nimport jwt from \"npm:jsonwebtoken\";\n\nconst loginPage = `\n \n \n \n \n \n

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype User = {\n id: string;\n username: string;\n};\n\nasync function fetchUser(token: string): Promise {\n const resp = await fetch(\"https://api.val.town/v1/me\", {\n headers: {\n Authorization: `Bearer ${token}`,\n },\n });\n\n if (resp.status !== 200) {\n throw new Error(\"Could not fetch user\");\n }\n\n return resp.json();\n}\n\nasync function isCurrentUser(userID: string) {\n const currentUser = await fetchUser(Deno.env.get(\"valtown\"));\n return userID == currentUser.id;\n}\n\nfunction signout() {\n const res = redirect(\"/\");\n cookie.setCookie(res.headers, {\n name: \"user-jwt\",\n value: \"\",\n httpOnly: true,\n secure: true,\n sameSite: \"None\",\n maxAge: 0,\n });\n return res;\n}\n\nexport function auth(handler) {\n const secretKey = Deno.env.get(\"AUTH_SECRET_KEY\");\n if (!secretKey) {\n throw new Error(\"env var AUTH_SECRET_KEY not set\");\n }\n return async (req: Request) => {\n const { pathname, hostname, origin } = new URL(req.url);\n\n if (pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage);\n }\n\n if (pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const token = formData.get(\"token\").toString();\n const user = await fetchUser(token);\n if (await isCurrentUser(user.id)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n\n const webToken = jwt.sign(user, secretKey, { expiresIn: \"7d\" });\n const res = redirect(\"/\");\n cookie.setCookie(res.headers, {\n name: \"user-jwt\",\n value: webToken,\n httpOnly: true,\n secure: true,\n sameSite: \"None\",\n });\n return res;\n }\n\n if (pathname == \"/signout\") {\n return signout();\n }\n\n const webToken = cookie.getCookies(req.headers)[\"user-jwt\"];\n if (!webToken) {\n return redirect(\"/signin\");\n }\n try {\n const user = jwt.verify(webToken, secretKey) as User;\n if (!(await isCurrentUser(user.id))) {\n return new Response(`Unauthorized`, {\n status: 403,\n });\n }\n } catch (err) {\n return signout();\n }\n\n return handler(req);\n };\n}\n","deleted","label",[98],"permalink","https://www.val.town/x/pomdtr/auth_middleware/code/main.tsx","extension","actionData","errors"]