Fiberplane OpenTelemetry Trace Collector on ValTown

\n Visit /fp to view the Fiberplane API explorer.\n

\n\n\n\n`.trim());\n});\n\nexport default app;",[],[184,340],"7114d72a-56a3-11f0-b69c-f69ea79377d9","auth.ts","c050f892-bdf4-49dc-be11-063f2ab584fb",["D",1751392042447],"import { timingSafeEqual } from \"https://deno.land/std/crypto/mod.ts\";\n\nimport { HTTPException } from \"../deps/hono.ts\";\nimport type { AppMiddleware } from \"./types.ts\";\n\n/**\n * Middleware that authenticates requests with a Bearer token.\n * Assumes that `AUTH_TOKEN` is set in the environment.\n *\n * @TODO - Improve token comparison.\n * Simple string comparison is not very secure against timing attacks.\n */\nexport const authenticate: AppMiddleware = async (ctx, next) => {\n const authHeader = ctx.req.header(\"Authorization\");\n\n if (!authHeader?.startsWith(\"Bearer \")) {\n throw new HTTPException(401, {\n message: \"Missing or invalid bearer token\",\n });\n }\n\n const token = authHeader.slice(7);\n\n const isValid = timingSafeTokenComparison(token, ctx.env.AUTH_TOKEN);\n\n if (!isValid) {\n throw new HTTPException(401, {\n message: \"Invalid token\",\n });\n }\n\n await next();\n};\n\n/**\n * Token comparison that mitigates against timing based attacks\n */\nfunction timingSafeTokenComparison(userToken: string, appToken: string) {\n const userTokenByes = new TextEncoder().encode(userToken);\n const appTokenBytes = new TextEncoder().encode(appToken);\n \n // Check if lengths match (this is considered acceptable to reveal)\n if (userTokenByes.length !== appTokenBytes.length) {\n return false;\n }\n \n // Perform constant-time comparison\n const isValid = timingSafeEqual(userTokenByes, appTokenBytes);\n\n return isValid;\n}",[],[184,347],["D",1751392042447],[198,199,200,201],[184],["D",1751392042447],{"_11":12,"_91":87},{"_11":12,"_85":-5,"_86":87,"_46":47,"_88":89,"_90":40},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_78":42,"_79":80,"_81":82,"_83":14,"_84":12},"ctx",{"_71":-5,"_115":393,"_394":395,"_396":397,"_398":40,"_399":40,"_400":40,"_401":51,"_402":-5,"_403":-7,"_404":-7,"_405":55,"_406":40,"_407":40,"_408":-5,"_409":40,"_410":40,"_411":40,"_412":-5},"ENV",{"_364":365,"_366":367,"_368":26,"_369":370,"_371":372,"_373":374,"_375":376,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","c73f21da490985bff19c279eb0e09db24d688e4f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1