Sign In as ${NAME.split(\"/\")[0]}

\n `;\n\n const clientToken = qs.get(\"clientToken\");\n let clientPayload;\n try {\n clientPayload = clientToken && await verifyThirdParty(clientToken, {\n audience: NAME,\n custom(payload) {\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n const returnTo = payload.returnTo?.match(/^@\\w+\\/\\w+/)?.[0];\n return {\n scope: `${returnTo}/requestAuth`,\n };\n },\n });\n } catch (e) {\n console.log(\"error verifying clientPayload\", e);\n }\n\n if (qs.get(\"logout\")) {\n const res = htmlResponse`\n ${Layout`\n ${header}\n Successfully signed out! You may close this tab\n `}\n `;\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!clientPayload) {\n return htmlResponse`\n ${Layout`\n ${header}\n Invalid request. Maybe it expired?
\n Go Back\n `}\n `;\n }\n\n const { returnTo } = clientPayload;\n\n if (qs.get(\"token\")) {\n try {\n await verify(qs.get(\"token\"), {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/signin`,\n },\n });\n const cookie = await generate({\n scope: `${NAME}/auth`,\n aud: NAME,\n iss: NAME,\n sub: NAME,\n }, \"1h\");\n const redirectQS = new URLSearchParams();\n redirectQS.set(\"clientToken\", clientToken);\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: \"/?\" + redirectQS.toString(),\n },\n });\n setAuthCookie(res, cookie);\n return res;\n } catch (e) {\n console.log(\"signin token validation failed\", e);\n }\n }\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verify(cookie, {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/auth`,\n },\n });\n } catch (e) {\n console.log(\"cookie token validation failed\", e);\n }\n\n if (!payload) {\n if (req.method === \"POST\") {\n emailSignInLink(clientToken);\n return htmlResponse`\n ${Layout`\n ${header}\n Please check your email to find the sign in link. You may close this tab\n `}\n `;\n }\n\n return htmlResponse`\n ${Layout`\n ${header}\n \n `}\n `;\n }\n\n const requiredScopes = [\n `${NAME}/id`,\n ];\n\n if (req.method !== \"POST\") {\n const scopeDescriptions = await authDescribeScopes([\n ...requiredScopes,\n ...clientPayload.requestScope,\n ]);\n\n const res = htmlResponse`\n ${Layout`\n ${header}\n

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n \n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = scope.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await generate({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }, \"4h\"),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n }\n\n return {\n SCOPES,\n handler,\n };\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n if (token === undefined) {\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: \"\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n });\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\n\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}","deleted","label",[99],"permalink","https://www.val.town/x/postpostscript/authIdBase/code/main.tsx","extension","actionData","errors"]