Login

\n \n

\n );\n}\n\nfunction App() {\n const [podcasts, setPodcasts] = React.useState([]);\n const [searchQuery, setSearchQuery] = React.useState('');\n const [searchResults, setSearchResults] = React.useState([]);\n const [isAuthenticated, setIsAuthenticated] = React.useState(false);\n const [csrfToken, setCsrfToken] = React.useState(\"\");\n\n React.useEffect(() => {\n checkAuthentication();\n fetch(\"/csrf-token\").then(res => res.json()).then(data => setCsrfToken(data.csrfToken));\n }, []);\n\n async function checkAuthentication() {\n const res = await fetch(\"/check-auth\");\n const auth = await res.json();\n setIsAuthenticated(auth.authenticated);\n if (auth.authenticated) {\n loadPodcasts();\n }\n }\n\n async function loadPodcasts() {\n try {\n const result = await podcast_blob_admin.list();\n setPodcasts(result.items);\n } catch (error) {\n console.error('Error loading podcasts:', error);\n }\n }\n\n async function handleSearch() {\n try {\n const results = await podcast_blob_admin.search(searchQuery);\n setSearchResults(results);\n } catch (error) {\n console.error('Error searching podcasts:', error);\n }\n }\n\n async function handleLogout() {\n const res = await fetch(\"/logout\", {\n method: \"POST\",\n headers: {\n \"X-CSRF-Token\": csrfToken\n }\n });\n if (res.ok) {\n setIsAuthenticated(false);\n window.location.href = \"/\";\n }\n }\n\n if (!isAuthenticated) {\n return ;\n }\n\n return (\n

Podcast Admin

\n \n

\n setSearchQuery(e.target.value)} \n placeholder=\"Search podcasts\"\n />\n \n

All Podcasts

{podcast}

Search Results

\n {result.key} - {result.metadata.title || 'Untitled'}\n

\n );\n}\n\nfunction client() {\n createRoot(document.getElementById(\"root\")).render();\n}\nif (typeof document !== \"undefined\") { client(); }\n\nasync function handleStore(request: Request): Promise {\n const formData = await request.formData();\n const file = formData.get('file') as File | null;\n\n if (!file) {\n return new Response('No file uploaded', { status: 400 });\n }\n\n if (!ALLOWED_MIME_TYPES.includes(file.type)) {\n return new Response(`Invalid file type. Allowed types are: ${ALLOWED_MIME_TYPES.join(', ')}`, { status: 400 });\n }\n\n const fileId = podcast_blob_admin.generateUniqueKey();\n await podcast_blob_admin.set(fileId, file);\n\n return new Response(JSON.stringify({ fileId }), {\n headers: { 'Content-Type': 'application/json' },\n });\n}\n\nasync function handleStream(request: Request): Promise {\n const url = new URL(request.url);\n const fileId = url.pathname.split('/').pop();\n\n if (!fileId) {\n return new Response('File ID not provided', { status: 400 });\n }\n\n const audioStream = await podcast_blob_admin.streamAudio(fileId);\n\n if (!audioStream) {\n return new Response('File not found', { status: 404 });\n }\n\n const metadata = await podcast_blob_admin.getMetadata(fileId);\n\n return new Response(audioStream, {\n headers: {\n 'Content-Type': metadata?.mimeType || 'audio/mpeg',\n },\n });\n}\n\nasync function handleDelete(request: Request): Promise {\n const url = new URL(request.url);\n const fileId = url.pathname.split('/').pop();\n\n if (!fileId) {\n return new Response('File ID not provided', { status: 400 });\n }\n\n await podcast_blob_admin.delete(fileId);\n\n return new Response('File deleted successfully', { status: 200 });\n}\n\nexport default async function server(request: Request): Promise {\n const url = new URL(request.url);\n const path = url.pathname;\n const cookie = request.headers.get(\"Cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"authToken=\"))?.split(\"=\")[1];\n const auth = await checkAuth(request);\n\n if (path === \"/check-auth\") {\n return Response.json(auth);\n }\n\n if (path === \"/csrf-token\") {\n return Response.json({ csrfToken: auth.csrfToken || \"\" });\n }\n\n if (path === \"/login\" && request.method === \"POST\") {\n const body = await request.json();\n const reqCsrf = request.headers.get(\"X-CSRF-Token\");\n if (!reqCsrf || reqCsrf !== auth.csrfToken) {\n return new Response(JSON.stringify({ success: false, message: \"Invalid CSRF token\" }), { status: 403 });\n }\n const result = await login(body.username, body.password);\n if (result.success) {\n return new Response(JSON.stringify(result), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": `authToken=${result.token}; HttpOnly; Path=/; SameSite=Strict`\n }\n });\n } else {\n return Response.json(result, { status: 401 });\n }\n }\n\n if (path === \"/logout\" && request.method === \"POST\") {\n const reqCsrf = request.headers.get(\"X-CSRF-Token\");\n if (!reqCsrf || reqCsrf !== auth.csrfToken) {\n return new Response(JSON.stringify({ success: false, message: \"Invalid CSRF token\" }), { status: 403 });\n }\n return new Response(\"Logged out\", {\n headers: {\n \"Set-Cookie\": `authToken=; Max-Age=0; Path=/; HttpOnly`,\n \"Content-Type\": \"application/json\"\n }\n });\n }\n\n if (!auth.authenticated && path !== \"/\") {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n try {\n if (path === '/store' && request.method === 'POST') {\n return await handleStore(request);\n } else if (path.startsWith('/stream/') && request.method === 'GET') {\n return await handleStream(request);\n } else if (path.startsWith('/file/') && request.method === 'DELETE') {\n return await handleDelete(request);\n } else if (path === '/' || path === '/adminDashboard') {\n return new Response(`\n \n \n \n \n Podcast Admin\n \n \n \n \n

\n \n \n \n \n `, {\n headers: {\n \"Content-Type\": \"text/html\"\n }\n });\n } else {\n return new Response('Not Found', { status: 404 });\n }\n } catch (error) {\n console.error('Server error:', error);\n return new Response('Internal Server Error', { status: 500 });\n }\n}\n\nconst css = `\nbody {\n font-family: Arial, sans-serif;\n line-height: 1.6;\n color: #333;\n max-width: 800px;\n margin: 0 auto;\n padding: 20px;\n}\n\nh1, h2 {\n color: #2c3e50;\n}\n\ninput[type=\"text\"] {\n width: 70%;\n padding: 10px;\n margin-right: 10px;\n}\n\nbutton {\n padding: 10px 20px;\n background-color: #3498db;\n color: white;\n border: none;\n cursor: pointer;\n}\n\nbutton:hover {\n background-color: #2980b9;\n}\n\nul {\n list-style-type: none;\n padding: 0;\n}\n\nli {\n background-color: #f9f9f9;\n margin-bottom: 10px;\n padding: 10px;\n border-radius: 5px;\n}\n`;","deleted","label",[98],"permalink","https://www.val.town/x/toowired/podcast_blob_admin/code/main.tsx","extension","actionData","errors"]