[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_192":193,"_194":195},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_68":139,"_40":-7,"_140":-5,"_17":141,"_142":143,"_144":145,"_146":147,"_148":149,"_97":-5,"_150":151,"_152":153,"_154":46,"_155":156,"_157":46,"_158":-5,"_159":-5,"_160":161},"routes/_app.x.$handle.$name.compare.$branch",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":-5},"handle","charmaine","name","password_auth","branchName","main","project",{"_32":55,"_13":14,"_34":101,"_44":-5,"_102":26,"_47":48,"_103":48,"_104":-5,"_105":-5,"_106":107,"_108":-5,"_109":26,"_110":-5,"_111":-5,"_112":56,"_51":113,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_127":128,"_129":130,"_131":28,"_45":46},"ahead",4,"behind",90,"diff",{"_60":61,"_62":63,"_64":65},"hasChanges",true,"sourceBranch",{"_40":20,"_13":16,"_32":54,"_38":55,"_41":33,"_42":56,"_57":48,"_58":39,"_59":52,"_53":14,"_49":12},"targetBranch",{"_32":33,"_34":35,"_36":37,"_13":16,"_38":39,"_40":22,"_41":-5,"_42":-5,"_43":-5,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":52,"_53":14},"pull","id","e85571b2-277f-11f0-b46e-569c3dd06744","createdAt",["D",1746209076068],"updatedAt",["D",1755789148862],"projectId","e8551e38-277f-11f0-b46e-569c3dd06744","version","forkedBranchId","forkedBranchVersion","lockfileKey","deletedAt","isOwned",false,"privacy","public","userHandle","pomdtr","orgId","4b933fb9-e150-4558-9d0a-845e595c8c78","projectName","363172b6-279c-11f0-9d52-569c3dd06744","36312658-279c-11f0-9d52-569c3dd06744",0,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","added",[66,67],"deleted",[],"modified",[],{"_68":91,"_70":-7,"_71":92},{"_68":69,"_70":-7,"_71":72},"path","main.tsx","targetFile","sourceFile",{"_32":73,"_13":69,"_74":75,"_76":-5,"_77":54,"_78":20,"_79":26,"_34":80,"_40":81,"_82":83,"_84":85,"_62":46,"_86":-5,"_87":-7,"_68":88,"_89":90},"3644c29e-279c-11f0-9d52-569c3dd06744","fileId","36347d4e-279c-11f0-9d52-569c3dd06744","parentId","branchId","branchVersion","latest",["D",1746050572760],3,"fileType","script","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport { inferRequestVal } from \"https://esm.town/v/shouser/inferRequestVal@9-main/inferRequestVal\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { html } from \"https://esm.town/v/stevekrouse/html?v=5\";\nimport { zip } from \"npm:lodash-es\";\nimport { nanoid } from \"npm:nanoid\";\n\ntype Session = {\n id: string;\n expiresAt: number;\n};\n\nasync function createSessionTable(tableName: string) {\n await sqlite.execute(`CREATE TABLE ${tableName} (\n id TEXT NOT NULL PRIMARY KEY,\n expires_at INTEGER NOT NULL,\n val_slug STRING NOT NULL\n );`);\n}\n\nasync function createSession(tableName: string, valSlug: string): Promise {\n try {\n const expires_at = new Date();\n expires_at.setDate(expires_at.getDate() + 7);\n const session: Session = { id: nanoid(), expiresAt: expires_at.getTime() };\n await sqlite.execute({\n sql: `INSERT INTO ${tableName} (id, val_slug, expires_at) VALUES (?, ?, ?)`,\n args: [session.id, valSlug, session.expiresAt],\n });\n return session;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n await createSessionTable(tableName);\n return createSession(tableName, valSlug);\n }\n\n throw e;\n }\n}\n\nasync function getSession(tableName: string, sessionID: string, valSlug: string): Promise {\n try {\n const { rows, columns } = await sqlite.execute({\n sql: `SELECT * FROM ${tableName} WHERE id = ? AND val_slug = ?`,\n args: [sessionID, valSlug],\n });\n\n if (rows.length == 0) {\n return null;\n }\n\n return Object.fromEntries(zip(columns, rows.at(0))) as Session;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n return null;\n }\n\n throw e;\n }\n}\n\nconst loginPage = `\n \n \n \n \n \n

This website is protected behind a password.

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n verifyPassword: (password: string) => boolean | Promise;\n sessionTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function passwordAuth(next, options?: PasswordAuthOptions) {\n const sessionTable = options?.sessionTable || \"password_auth_session\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage);\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n if (!await options.verifyPassword(password)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n const session = await createSession(sessionTable, valSlug);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (req.headers.has(\"Authorization\")) {\n const requestToken = req.headers.get(\"Authorization\").replace(\"Bearer \", \"\").trim();\n if (!await options.verifyPassword(requestToken)) {\n return new Response(null, {\n status: 403,\n });\n }\n return next(req);\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signin\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req);\n };\n}","label","children",[69],"contentHash","1fb5eea3932659f840cfec19427778b61be51f2f4d6b18a7ca52945df7f0b63a","README.md",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":95,"_79":26,"_34":96,"_40":56,"_82":97,"_84":98,"_62":46,"_86":-5,"_87":-7,"_68":99,"_89":100},"363484ec-279c-11f0-9d52-569c3dd06744","36348564-279c-11f0-9d52-569c3dd06744",1,["D",1746050503807],"file","# Password Auth Middleware\n\nProtect your vals behind a password. Use session cookies to persist authentication.\n\n![6ed0648ae8813e958dbe79468572cb52f578239c0fae55857a13660beebdc5fd.png](https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/36c1dc4f-4e19-457b-ad89-0bf139754e00/public)\n\n## Usage\n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth?v=84\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { verifyPassword: (password) => password == Deno.env.get(\"VAL_PASSWORD\") });\n```\n\nIf you want to use an [api token](https://www.val.town/settings/api) to authenticate: \n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth?v=84\";\nimport { verifyToken } from \"https://esm.town/v/pomdtr/verifyToken\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { verifyPassword: verifyToken });\n```\n\n## TODO\n\n- [x] allow to authenticate using a val town token\n- [ ] add a way to send an email to ask a password from the val owner\n- [ ] automatically extend the session\n- [ ] automatically remove expired sessions\n\n## FAQ\n\n> How to sign out ?\n\nNavigate to `/signout`.",[91],"0fd46a0a89d487302e6f3671d74f49c404e57f43720f80eea8918e080310d9b8",["D",1746221232603],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","c156eb0e-8b9d-4104-a055-502e9a0eb441","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","2019e55b-c541-4c51-bef0-008eef10ef88","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_138":134},"org",{"_11":12,"_132":-5,"_133":134,"_106":107,"_135":136,"_137":46},"branch","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ4cFpFME5pSXNZamJNd296dlZSYVJ0OVF1RSJ9","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":55,"_13":14,"_34":188,"_44":-5,"_102":26,"_47":48,"_103":48,"_104":-5,"_105":-5,"_106":107,"_108":-5,"_109":26,"_110":-5,"_111":-5,"_112":56,"_51":113,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_127":189,"_129":190,"_131":191,"_45":46},"tree",[182,183],"files",[182,183],"counts",{"_172":56,"_173":95,"_174":56,"_175":176,"_177":178},"contents",[166,167],"upstreamProject",{"_32":39,"_13":14,"_104":-5,"_105":-5,"_47":48,"_127":164},"upstreamBranch",{"_32":33,"_34":162,"_36":163,"_13":16,"_38":39,"_40":22,"_41":-5,"_42":-5,"_43":-5,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":52,"_53":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746209076068],["D",1755789148862],{"_11":50,"_138":165},"https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":95,"_79":26,"_34":170,"_40":56,"_82":97,"_84":98,"_62":46,"_86":-5,"_68":171},{"_32":73,"_13":69,"_74":75,"_76":-5,"_77":54,"_78":20,"_79":26,"_34":168,"_40":81,"_82":83,"_84":85,"_62":46,"_86":-5,"_68":169},["D",1746050572760],[69],["D",1746050503807],[91],"pulls","branches","forks","envVars",{"_179":56,"_181":56},"connections",{"_179":56,"_180":56},"count","unfilledCount","emptyCount",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":95,"_79":26,"_34":96,"_40":56,"_82":97,"_84":98,"_62":46,"_86":-5,"_87":186,"_68":187},{"_32":73,"_13":69,"_74":75,"_76":-5,"_77":54,"_78":20,"_79":26,"_34":80,"_40":81,"_82":83,"_84":85,"_62":46,"_86":-5,"_87":184,"_68":185},[],[69],[],[91],["D",1746221232603],{"_11":12,"_138":134},{"_11":12,"_132":-5,"_133":134,"_106":107,"_135":136,"_137":46},{"_40":20,"_13":16,"_32":54,"_38":55,"_41":33,"_42":56,"_57":48,"_58":39,"_59":52,"_53":14,"_49":12},"ctx",{"_127":-5,"_159":225,"_226":227,"_228":229,"_230":46,"_231":46,"_232":46,"_233":26,"_234":-5,"_235":-7,"_236":-7,"_237":56,"_238":46,"_239":46,"_240":-5,"_241":46,"_242":46,"_243":46,"_244":-5},"ENV",{"_196":197,"_198":199,"_200":16,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergecharmaine/mainintopomdtr/main

README.md+39-0

main.tsx+170-0