[{"_1":2,"_171":-5,"_172":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","5c349ef9e7d7333839a0634dd567aae2d49623a6","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_168":169,"_170":-5},"handle","yawnxyz","name","hnCloneOAuth","path","main.tsx","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":108,"_109":110,"_111":-5,"_112":-5,"_12":113,"_114":-5,"_115":108,"_116":-5,"_117":-5,"_118":119,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","070b27d8-2793-11f0-9d52-569c3dd06744","createdAt",["D",1746217288031],"deletedAt","legacyEnvVars",true,"privacy","public","description","imageUrl","a8270e74-6479-475a-8025-9b69544ee0e7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",2,"8319defa-6e1a-46d4-ba66-2114ffd3360b","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://images.clerk.dev/oauth_github/img_2NnaHhpxNuH1xWRIRjQNoo16TVc.jpeg","org",{"_94":95,"_135":132,"_12":113},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",21,"070b6be4-2793-11f0-9d52-569c3dd06744","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":99,"_153":154,"_155":-5,"_156":140,"_157":139,"_158":108,"_104":159,"_138":160,"_161":162,"_163":164,"_165":20,"_166":-5,"_98":167},"0788051e-2793-11f0-9d52-569c3dd06744","fileId","070e00ac-2793-11f0-9d52-569c3dd06744","parentId","branchId","branchVersion","latest",["D",1725400118255],20,"fileType","script","content","import { getCookie, setCookie } from \"npm:hono/cookie\";\nimport { Lucia } from \"npm:lucia@3.0.1\";\nimport { ValTownAdapter } from \"https://esm.town/v/yawnxyz/luciaValtownSqlite\";\nimport { generateState, OAuth2RequestError, generateCodeVerifier, GitHub, Google } from \"npm:arctic\";\n\nclass LuciaAuthMiddleware {\n constructor(config = {}) {\n this.config = {\n userTable: \"lucia_users_1\",\n sessionTable: \"lucia_sessions_1\",\n adapter: ValTownAdapter,\n sessionCookie: {\n attributes: {\n sameSite: \"none\",\n },\n },\n getUserAttributes: (attributes) => ({\n github_id: attributes.github_id,\n username: attributes.username,\n }),\n services: {},\n ...config\n };\n\n this.adapter = new this.config.adapter({\n userTable: this.config.userTable,\n sessionTable: this.config.sessionTable\n });\n\n this.lucia = new Lucia(this.adapter, {\n sessionCookie: this.config.sessionCookie,\n getUserAttributes: this.config.getUserAttributes,\n });\n\n this.initializeOAuthServices();\n }\n\n initializeOAuthServices() {\n this.oauthServices = {};\n for (const [service, config] of Object.entries(this.config.services)) {\n switch (service) {\n case 'github':\n this.oauthServices.github = new GitHub(config.clientId, config.clientSecret);\n break;\n case 'google':\n this.oauthServices.google = new Google(config.clientId, config.clientSecret, config.redirectUri);\n break;\n // Add more services here as needed\n }\n }\n }\n\n middleware() {\n return async (c, next) => {\n const sessionId = getCookie(c, this.lucia.sessionCookieName) ?? null;\n if (!sessionId) {\n c.set(\"user\", null);\n c.set(\"session\", null);\n return next();\n }\n const { session, user } = await this.lucia.validateSession(sessionId);\n if (session && session.fresh) {\n c.header(\"Set-Cookie\", this.lucia.createSessionCookie(session.id).serialize(), {\n append: true,\n });\n }\n if (!session) {\n c.header(\"Set-Cookie\", this.lucia.createBlankSessionCookie().serialize(), {\n append: true,\n });\n }\n c.set(\"user\", user);\n c.set(\"session\", session);\n return next();\n };\n }\n\n setupRoutes(app) {\n // Signup route\n app.get(\"/auth/signup\", (c) => {\n return c.html(`\n \n `);\n });\n\n app.post(\"/auth/signup\", async (c) => {\n const { username, password } = await c.req.parseBody();\n if (typeof username !== \"string\" || typeof password !== \"string\") {\n return c.text(\"Invalid input\", 400);\n }\n\n try {\n const userId = await this.adapter.createUser({ username, password });\n const session = await this.lucia.createSession(userId, {});\n c.header(\"Set-Cookie\", this.lucia.createSessionCookie(session.id).serialize(), { append: true });\n return c.redirect(\"/\");\n } catch (err) {\n return c.text(\"User creation failed: \" + err.message, 400);\n }\n });\n\n // Login route\n app.get(\"/auth/login\", (c) => {\n let html = `\n \n `;\n \n for (const service of Object.keys(this.oauthServices)) {\n html += `Sign in with ${service.charAt(0).toUpperCase() + service.slice(1)}`;\n }\n \n return c.html(html);\n });\n\n app.post(\"/auth/login\", async (c) => {\n const { username, password } = await c.req.parseBody();\n if (typeof username !== \"string\" || typeof password !== \"string\") {\n return c.text(\"Invalid input\", 400);\n }\n\n const user = await this.adapter.getUser({ username });\n if (!user) {\n return c.text(\"Invalid credentials\", 400);\n }\n\n const validPassword = await this.adapter.verifyPassword(user.hashed_password, password);\n if (!validPassword) {\n return c.text(\"Invalid credentials\", 400);\n }\n\n const session = await this.lucia.createSession(user.id, {});\n c.header(\"Set-Cookie\", this.lucia.createSessionCookie(session.id).serialize(), { append: true });\n return c.redirect(\"/\");\n });\n\n // OAuth routes\n for (const [service, oauthClient] of Object.entries(this.oauthServices)) {\n app.get(`/auth/${service}`, async (c) => {\n const state = generateState();\n const codeVerifier = generateCodeVerifier();\n \n // Log the redirect URI\n console.log(`Redirect URI for ${service}:`, `[${this.config.services[service].redirectUri}]`);\n \n const url = await oauthClient.createAuthorizationURL(state, codeVerifier, {\n scopes: [\"profile\", \"email\"]\n });\n \n // Log the full authorization URL\n console.log(`Full authorization URL for ${service}:`, url.toString());\n\n\n setCookie(c, `${service}_oauth_state`, state, {\n httpOnly: true,\n maxAge: 60 * 10,\n path: \"/\",\n });\n setCookie(c, `${service}_oauth_code_verifier`, codeVerifier, {\n httpOnly: true,\n maxAge: 60 * 10,\n path: \"/\",\n });\n\n return c.redirect(url.toString());\n });\n\n // Handle both with and without trailing slash\n const callbackHandler = async (c) => {\n console.log(`Incoming callback request for ${service}:`, c.req.url);\n \n const state = c.req.query(\"state\");\n const code = c.req.query(\"code\");\n const storedState = getCookie(c, `${service}_oauth_state`);\n const codeVerifier = getCookie(c, `${service}_oauth_code_verifier`);\n\n if (!state || !storedState || !code || !codeVerifier || storedState !== state) {\n return c.text(\"Invalid state or missing code verifier\", 400);\n }\n\n try {\n const tokens = await oauthClient.validateAuthorizationCode(code, codeVerifier);\n const userInfoResponse = await fetch(this.config.services[service].userInfoUrl, {\n headers: {\n Authorization: `Bearer ${tokens.accessToken}`\n }\n });\n const oauthUser = await userInfoResponse.json();\n \n let user = await this.adapter.getUser({ username: oauthUser.email || oauthUser.login });\n if (!user) {\n const userId = await this.adapter.createUser({\n username: oauthUser.email || oauthUser.login,\n password: Math.random().toString(36).slice(-8),\n [`${service}_id`]: oauthUser.id || oauthUser.sub\n });\n user = await this.adapter.getUser({ id: userId });\n }\n\n const session = await this.lucia.createSession(user.id, {});\n c.header(\"Set-Cookie\", this.lucia.createSessionCookie(session.id).serialize(), { append: true });\n return c.redirect(\"/\");\n } catch (e) {\n if (e instanceof OAuth2RequestError) {\n return c.text(`${service} OAuth2 request error: ` + e.message, 400);\n }\n return c.text(\"Authentication failed: \" + e.message, 500);\n }\n };\n\n // Register the callback route both with and without trailing slash\n app.get(`/auth/${service}/callback*`, callbackHandler);\n app.get(`/auth/${service}/callback/`, callbackHandler);\n }\n\n // Logout route\n app.get(\"/auth/logout\", async (c) => {\n const sessionId = getCookie(c, this.lucia.sessionCookieName);\n if (sessionId) {\n await this.lucia.invalidateSession(sessionId);\n c.header(\"Set-Cookie\", this.lucia.createBlankSessionCookie().serialize(), { append: true });\n }\n return c.redirect(\"/\");\n });\n\n // Add username to response headers if user is authenticated\n app.use(\"*\", async (c, next) => {\n await next();\n const user = c.get(\"user\");\n if (user) {\n c.res.headers.set(\"X-Lucia-Username\", user.username);\n }\n });\n }\n}\n\nexport default LuciaAuthMiddleware;","deleted","label",[99],"permalink","https://www.val.town/x/yawnxyz/hnCloneOAuth/code/main.tsx","extension","actionData","errors"]