Welcome, {user.name || user.login}!

\n $\"Avatar\"$ \n \n

\n ) : (\n

Please sign in

\n \n

\n )}\n

\n );\n}\n\nexport default App;\n```\n\n## Backend Integration (Node.js/Express)\n\n```javascript\nconst express = require('express');\nconst fetch = require('node-fetch');\n\nconst app = express();\nconst AUTH_SERVICE_URL = 'https://your-auth-service.web.val.run';\n\n// Middleware to validate auth token\nasync function validateAuth(req, res, next) {\n const token = req.headers.authorization?.replace('Bearer ', '');\n \n if (!token) {\n return res.status(401).json({ error: 'No token provided' });\n }\n\n try {\n const response = await fetch(`${AUTH_SERVICE_URL}/auth/validate?token=${token}`);\n const data = await response.json();\n \n if (data.valid) {\n req.user = data.user;\n next();\n } else {\n res.status(401).json({ error: 'Invalid token' });\n }\n } catch (error) {\n res.status(500).json({ error: 'Token validation failed' });\n }\n}\n\n// Protected route\napp.get('/api/profile', validateAuth, (req, res) => {\n res.json({ user: req.user });\n});\n\napp.listen(3000);\n```\n\n## Security Best Practices\n\n1. **Token Storage**: Store tokens securely (httpOnly cookies for web apps)\n2. **Token Validation**: Always validate tokens on the server side for protected routes\n3. **HTTPS Only**: Only use this service over HTTPS in production\n4. **Token Expiry**: Tokens expire after 7 days - implement refresh logic\n5. **Environment Variables**: Never expose your GitHub client secret\n\n## Error Handling\n\n```javascript\n// Handle common errors\nasync function handleAuthError(error) {\n if (error.message.includes('Invalid token')) {\n // Token expired or invalid - redirect to sign in\n localStorage.removeItem('auth_token');\n signInWithGitHub();\n } else if (error.message.includes('Network')) {\n // Network error - show retry option\n showRetryDialog();\n } else {\n // Other errors\n console.error('Auth error:', error);\n }\n}\n```",[],[182,189],[182],{"_102":198,"_95":199,"_152":200,"_154":-5,"_155":137,"_156":201,"_158":159,"_104":202,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_166":203,"_98":212},"70f53b88-3b3a-11f0-80d6-9e149126039e","frontend","90b9c8f1-c38a-4131-8404-ddca091f8c60",5,["D",1748378263766],[204],{"_102":205,"_95":206,"_152":207,"_154":200,"_155":137,"_156":201,"_158":159,"_104":208,"_99":32,"_161":192,"_163":209,"_164":22,"_165":-5,"_166":210,"_98":211},"70f4f5b0-3b3a-11f0-80d6-9e149126039e","index.html","70f4f68c-3b3a-11f0-80d6-9e149126039e",["D",1748378263766],"\n\n\n \n \n GitHub Authentication\n \n \n\n\n

\n \n

\n GitHub Authentication\n

\n Secure authentication service for your applications\n

\n\n

\n \n Redirect URI (where to send users after auth)\n \n \n

\n\n \n

\n\n

\n \n

\n\n

This service provides secure GitHub OAuth authentication.

After authentication, you'll be redirected back to your application with a secure token.

\n\n \n

API Usage

Initiate Sign In:

\n \n GET /auth/signin?redirect_uri=YOUR_APP_URL\n \n

Validate Token:

\n \n GET /auth/validate?token=JWT_TOKEN\n \n

Required Environment Variables:

GITHUB_CLIENT_ID
GITHUB_CLIENT_SECRET
JWT_SECRET

\n\n \n\n",[],[199,206],[199],{"_102":214,"_95":215,"_152":216,"_154":-5,"_155":137,"_156":217,"_158":159,"_104":218,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_166":219,"_98":229},"4df6514e-3b3a-11f0-b246-9e149126039e","shared","39885a88-d8a3-4095-87bd-5bd287e5cbc3",3,["D",1748378205053],[220],{"_102":221,"_95":222,"_152":223,"_154":216,"_155":137,"_156":217,"_158":159,"_104":224,"_99":32,"_161":225,"_163":226,"_164":22,"_165":-5,"_166":227,"_98":228},"4df5f6f4-3b3a-11f0-b246-9e149126039e","types.ts","4df5f7b2-3b3a-11f0-b246-9e149126039e",["D",1748378205053],"script","// Shared types for GitHub OAuth authentication\n\nexport interface GitHubUser {\n id: number;\n login: string;\n name: string | null;\n email: string | null;\n avatar_url: string;\n html_url: string;\n}\n\nexport interface AuthToken {\n user: GitHubUser;\n iat: number;\n exp: number;\n}\n\nexport interface GitHubTokenResponse {\n access_token: string;\n token_type: string;\n scope: string;\n}\n\nexport interface AuthError {\n error: string;\n error_description?: string;\n}",[],[215,222],[215],{"_102":231,"_95":232,"_152":233,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":234,"_99":117,"_161":192,"_163":235,"_164":22,"_165":-5,"_166":236,"_98":237},"bbc17d02-3b3a-11f0-93e0-9e149126039e","README.md","47d0ef0e-3b3a-11f0-9a11-9e149126039e",["D",1748378389257],"# GitHub OAuth Authentication Service\n\nA Val Town service for handling GitHub OAuth authentication with redirect support for external applications.\n\n## Features\n\n- GitHub OAuth sign-in flow\n- JWT token generation for authenticated users\n- Redirect support for external applications\n- Secure token validation\n- User profile retrieval\n- Graceful handling of missing configuration\n\n## Setup\n\n### 1. Create a GitHub OAuth App\n\n1. Go to GitHub Settings > Developer settings > OAuth Apps\n2. Click \"New OAuth App\"\n3. Fill in the details:\n - **Application name**: Your app name\n - **Homepage URL**: Your main application URL\n - **Authorization callback URL**: `https://[your-val-url]/auth/callback`\n4. Click \"Register application\"\n5. Note down your **Client ID** and generate a **Client Secret**\n\n### 2. Configure Environment Variables\n\nIn your Val Town environment, set these variables:\n\n- `GITHUB_CLIENT_ID`: Your GitHub OAuth app client ID\n- `GITHUB_CLIENT_SECRET`: Your GitHub OAuth app client secret \n- `JWT_SECRET`: A secure random string for signing JWT tokens (generate with `openssl rand -base64 32`)\n\n### 3. Test the Service\n\nVisit your Val Town URL to see the auth page and verify configuration.\n\n## Usage\n\n### Sign In Flow\n\n1. Redirect users to: `https://[your-val-url]/auth/signin?redirect_uri=[your-app-url]`\n2. Users will be redirected to GitHub for authentication\n3. After successful auth, users are redirected back to your app with a token: `[your-app-url]?token=[jwt-token]`\n\n### Token Validation\n\nMake a GET request to: `https://[your-val-url]/auth/validate?token=[jwt-token]`\n\nReturns user profile if token is valid:\n\n```json\n{\n \"valid\": true,\n \"user\": {\n \"id\": 12345,\n \"login\": \"username\",\n \"name\": \"User Name\",\n \"email\": \"user@example.com\",\n \"avatar_url\": \"https://avatars.githubusercontent.com/u/12345\",\n \"html_url\": \"https://github.com/username\"\n },\n \"expires_at\": 1640995200\n}\n```\n\n## API Endpoints\n\n- `GET /` - Auth page UI with configuration status\n- `GET /auth/signin?redirect_uri=URL` - Initiate GitHub OAuth flow\n- `GET /auth/callback` - Handle GitHub OAuth callback (internal)\n- `GET /auth/validate?token=JWT` - Validate JWT token and return user info\n- `GET /health` - Health check with configuration status\n\n## Integration Examples\n\nSee `/examples/client-integration.md` for detailed integration examples including:\n\n- JavaScript/TypeScript frontend integration\n- React component example\n- Node.js backend middleware\n- Security best practices\n\n## File Structure\n\n```\n├── backend/\n│ └── index.ts # Main Hono server with OAuth routes\n├── frontend/\n│ └── index.html # Auth page UI\n├── shared/\n│ └── types.ts # Shared TypeScript types\n├── examples/\n│ └── client-integration.md # Integration examples\n└── README.md # This file\n```\n\n## Security Features\n\n- JWT tokens with 7-day expiration\n- State parameter validation to prevent CSRF\n- Secure token signing with configurable secret\n- Input validation and error handling\n- HTTPS-only operation in production\n\n## Error Handling\n\nThe service provides clear error messages for:\n\n- Missing configuration\n- Invalid redirect URIs\n- GitHub OAuth errors\n- Token validation failures\n- Network issues\n\n## Development\n\nThe service gracefully handles missing environment variables during development, showing configuration warnings in the UI and API responses.",[],[232],"files",[149,168,180,187,197,204,213,220,230],"counts",{"_242":32,"_243":117,"_244":32,"_245":217},"pulls","branches","forks","envVars","contents",[248,251,254,257,260],{"_102":150,"_95":151,"_152":153,"_154":-5,"_155":137,"_156":157,"_158":159,"_104":249,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_98":250},["D",1748378225973],[151],{"_102":181,"_95":182,"_152":183,"_154":-5,"_155":137,"_156":184,"_158":159,"_104":252,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_98":253},["D",1748378365359],[182],{"_102":198,"_95":199,"_152":200,"_154":-5,"_155":137,"_156":201,"_158":159,"_104":255,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_98":256},["D",1748378263766],[199],{"_102":214,"_95":215,"_152":216,"_154":-5,"_155":137,"_156":217,"_158":159,"_104":258,"_99":32,"_161":162,"_163":-5,"_164":22,"_165":-5,"_98":259},["D",1748378205053],[215],{"_102":231,"_95":232,"_152":233,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":261,"_99":117,"_161":192,"_163":235,"_164":22,"_165":-5,"_98":262},["D",1748378389257],[232],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.environment-variables",{"_93":94,"_95":96,"_100":271,"_245":276},{"_102":103,"_95":96,"_104":272,"_106":-5,"_107":22,"_108":109,"_110":-5,"_111":-5,"_14":112,"_113":-5,"_114":22,"_115":-5,"_116":117,"_16":118,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_23":273,"_131":274,"_134":275,"_146":22},["D",1748377929808],{"_93":94,"_129":130},{"_93":94,"_133":130},{"_99":136,"_95":43,"_102":137,"_138":103,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":96,"_145":94},[277,283,286],{"_278":279,"_104":280,"_281":-5,"_110":72,"_282":22},"key","JWT_SECRET",["D",1748380644451],"updatedAt","isEmpty",{"_278":284,"_104":285,"_281":-5,"_110":72,"_282":22},"GITHUB_CLIENT_SECRET",["D",1748380511405],{"_278":287,"_104":288,"_281":-5,"_110":72,"_282":22},"GITHUB_CLIENT_ID",["D",1748380473448],"actionData","errors"]

Key	Description
JWT_SECRET
GITHUB_CLIENT_SECRET
GITHUB_CLIENT_ID

c15r

GHauth

Environment variables