Sign up

\n < form\n method=\"post\"\n action=\"/auth/signup\"\n style=\"display: flex; flex-direction: column; gap: 0.5rem; align-items: center;\"\n >\n

\n \n

\n < div >\n \n

\n < input type=\"submit\" value=\"Sign up\" />\n \n ,\n ));\n app.post(\"/auth/signup\", async c => {\n const body = await c.req.parseBody();\n if (typeof body.username !== \"string\" || typeof body.password !== \"string\") {\n return new Response(\"Invalid login\", {\n status: 400,\n });\n }\n\n const username = body.username;\n const password = body.password;\n\n if (\n username.length < 3\n || username.length > 31\n || !/^[a-z0-9_-]+$/.test(username)\n ) {\n return new Response(\"Invalid username: needs to be > 3 and < 31 characters and match regex: ^[a-z0-9_-]+$\", {\n status: 400,\n });\n }\n\n if (password.length < 6 || password.length > 255) {\n return new Response(\"Invalid password: needs to be > 6 and < 255 characters\", {\n status: 400,\n });\n }\n\n try {\n const userID = await createUser({\n userTable,\n sessionTable,\n username,\n password,\n });\n const session = await lucia.createSession(userID, {});\n c.header(\"Set-Cookie\", lucia.createSessionCookie(session.id).serialize(), {\n append: true,\n });\n console.log(\"Created user\", userID);\n } catch (err) {\n c.status(400);\n return c.body(\"User already exists // \" + err.message);\n }\n\n return c.redirect(\"/\");\n });\n app.get(\"/auth/login\", c =>\n c.render(\n

Sign in

\n < form\n method=\"post\"\n action=\"/auth/login\"\n style=\"display: flex; flex-direction: column; gap: 0.5rem; align-items: center;\"\n >\n

\n \n

\n < div >\n \n

\n < input type=\"submit\" value=\"Sign in\" />\n

\n Sign in with GitHub \n

\n \n ,\n ));\n \n app.post(\"/auth/login\", async c => {\n const body = await c.req.parseBody();\n if (typeof body.username !== \"string\" || typeof body.password !== \"string\") {\n return new Response(\"Bad login\", {\n status: 400,\n });\n }\n\n const user = await getUser({ userTable, sessionTable, username: body.username });\n if (!user) {\n return new Response(\"Bad login\", {\n status: 400,\n });\n }\n\n const validPassword = await verifyPassword(user.hashed_password, body.password);\n if (!validPassword) {\n return new Response(\"Bad login\", {\n status: 400,\n });\n }\n\n const session = await lucia.createSession(user.id, {});\n const sessionCookie = lucia.createSessionCookie(session.id);\n\n c.header(\"Set-Cookie\", sessionCookie.serialize(), {\n append: true,\n });\n\n return c.redirect(\"/\");\n });\n\n app.get(\"/auth/github\", async (c): Promise => {\n try {\n console.log('trying github')\n const state = generateState();\n const url = await github.createAuthorizationURL(state);\n\n c.header(\"Set-Cookie\", serializeCookie(\"github_oauth_state\", state, {\n httpOnly: true,\n maxAge: 60 * 10, // 10 minutes\n path: \"/\"\n }));\n\n return c.redirect(url.toString());\n } catch (e) {\n console.error(e);\n return new Response(e.message, {\n status: 500\n });\n }\n });\n\n app.get(\"/auth/github/callback\", async (c) => {\n const stateCookie = getCookie(c, \"github_oauth_state\") ?? null;\n\n const state = c.req.query(\"state\");\n const code = c.req.query(\"code\");\n\n // verify state\n if (!state || !stateCookie || !code || stateCookie !== state) {\n return c.text(\"No github state?\", 400);\n }\n\n try {\n const tokens = await github.validateAuthorizationCode(code);\n const githubUserResponse = await fetch(\"https://api.github.com/user\", {\n headers: {\n Authorization: `Bearer ${tokens.accessToken}`\n }\n });\n const githubUserResult: GitHubUserResult = await githubUserResponse.json();\n const existingUser = await getUser({ userTable, sessionTable, username: githubUserResult.login });\n\n if (existingUser) {\n const session = await lucia.createSession(existingUser.id, {});\n const sessionCookie = lucia.createSessionCookie(session.id);\n\n c.header(\"Set-Cookie\", sessionCookie.serialize(), {\n append: true,\n });\n\n return c.redirect(\"/\");\n }\n\n const userId = await createUser({\n userTable,\n sessionTable,\n username: githubUserResult.login,\n password: Math.random().toString(36).slice(-8),\n github_id: githubUserResult.id\n });\n\n const session = await lucia.createSession(userId, {});\n c.header(\"Set-Cookie\", lucia.createSessionCookie(session.id).serialize(), {\n append: true,\n });\n return c.redirect(\"/\");\n } catch (e) {\n console.log(e);\n if (e instanceof OAuth2RequestError) {\n return c.text(`Github Oauth2 request error? ${e.message}`, 400);\n }\n return c.text(e.message, 500);\n }\n });\n\n\n app.get(\"/what\", (c) => {\n try {\n const cookieOptions = {\n httpOnly: true,\n maxAge: 60 * 10, // 10 minutes\n path: \"/\", // Ensure path is set to root\n };\n\n setCookie(c, 'chocolate', 'no??', cookieOptions);\n setCookie(c, 'banana', 'yes!!!', cookieOptions);\n\n return c.text(\"what\")\n } catch (e) {\n console.error(e);\n return new Response(e.message, {\n status: 500\n });\n }\n });\n\n\n\n app.get(\"/auth/google\", async (c) => {\n try {\n const state = generateState();\n const codeVerifier = generateCodeVerifier();\n\n const url = await google.createAuthorizationURL(state, codeVerifier, {\n scopes: [\"profile\", \"email\"]\n });\n\n // url.searchParams.set(\"access_type\", \"offline\");\n const cookieOptions = {\n httpOnly: true,\n maxAge: 60 * 10, // 10 minutes\n path: \"/\", // Ensure path is set to root\n };\n\n setCookie(c, 'google_oauth_code_verifier', codeVerifier, cookieOptions);\n setCookie(c, 'google_oauth_state', state, cookieOptions);\n\n return c.redirect(url.toString());\n } catch (e) {\n console.error(e);\n return new Response(e.message, {\n status: 500\n });\n }\n });\n\n app.get(\"/auth/google/callback\", async (c) => {\n const stateCookie = getCookie(c, \"google_oauth_state\") ?? null;\n const codeVerifier = getCookie(c, \"google_oauth_code_verifier\") ?? null;\n\n const state = c.req.query(\"state\");\n const code = c.req.query(\"code\");\n\n // https://yawnxyz-hncloneluciaoauth.web.val.run/auth/google/callback?state=e1ntsxqPFLaBZe9tXQ7SwwGHJ5Cr2nAvwNtWtQNtRVk&code=4%2F0AQlEd8yAzO8cETotI28YAdDu7kMaWfwsBY6mBLtA3Mz0dO0-REGYfsHQcNsQzw1bE1mNyA&scope=email+profile+openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&authuser=0&prompt=consent\n\n // verify state\n // if (!state || !stateCookie || !code || stateCookie !== state || !codeVerifier) {\n if (!state || !stateCookie || !code || !codeVerifier) {\n // return c.json(null, 400);\n return c.json({ message: `Google Auth callback no state?`,\n state,\n stateCookie,\n code,\n codeVerifier\n }, 400);\n }\n\n try {\n\n console.log('code: ', stateCookie, codeVerifier)\n const tokens = await google.validateAuthorizationCode(code, codeVerifier);\n\n console.log('trying to get the user info: ', tokens)\n const userInfoResponse = await fetch(\"https://openidconnect.googleapis.com/v1/userinfo\", {\n headers: {\n Authorization: `Bearer ${tokens.accessToken}`\n }\n });\n const googleUserResult = await userInfoResponse.json();\n const existingUser = await getUser({ userTable, sessionTable, username: googleUserResult.email });\n\n if (existingUser) {\n const session = await lucia.createSession(existingUser.id, {});\n const sessionCookie = lucia.createSessionCookie(session.id);\n\n c.header(\"Set-Cookie\", sessionCookie.serialize(), {\n append: true,\n });\n\n return c.redirect(\"/\");\n }\n\n const userId = await createUser({\n userTable,\n sessionTable,\n username: googleUserResult.email,\n password: Math.random().toString(36).slice(-8),\n google_id: googleUserResult.sub\n });\n\n const session = await lucia.createSession(userId, {});\n c.header(\"Set-Cookie\", lucia.createSessionCookie(session.id).serialize(), {\n append: true,\n });\n return c.redirect(\"/\");\n } catch (e) {\n console.log(e);\n if (e instanceof OAuth2RequestError) {\n return c.json({\n message: \"Google OAuth2 error: \" + e.message,\n state,\n stateCookie,\n code,\n codeVerifier\n }, 400);\n }\n return c.text(\"Google Oauth callback general error:\" + e.message, 500);\n }\n });\n\n\n app.all(\"/auth/logout\", async c => {\n const session = c.get(\"session\");\n if (!session) {\n c.redirect(\"/\");\n }\n await lucia.invalidateSession(session.id);\n c.header(\"Set-Cookie\", lucia.createBlankSessionCookie().serialize(), {\n append: true,\n });\n\n return c.redirect(\"/\");\n });\n app.all(\"*\", async (c) => {\n const rawRequest = c.req.raw.clone();\n if (c.get(\"user\")) {\n rawRequest.headers.set(\"X-Lucia-Username\", c.get(\"user\").username);\n }\n\n const response = await handler(rawRequest);\n\n // Copy headers from Hono context to the response\n c.res.headers.forEach((value, key) => {\n response.headers.append(key, value);\n });\n\n return response;\n });\n return app.fetch;\n};","deleted","label",[98],"permalink","https://www.val.town/x/yawnxyz/lucia_middleware/code/main.tsx","extension","actionData","errors"]