Access denied

This admin is private.

You are signed in as @{session.user.username ?? \"unknown\"}, but only the owner can view these signups.

\n \n

\n ,\n 403,\n );\n }\n\n const signups = await listEmailSignups();\n return c.html();\n});\n\napp.get(\"/admin.csv\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.id !== OWNER_USER_ID) return c.text(\"Forbidden\", 403);\n\n const signups = await listEmailSignups();\n const rows = [\n [\"id\", \"email\", \"created_at\"].map(csvCell).join(\",\"),\n ...signups.map((signup) => [signup.id, signup.email, signup.created_at].map(csvCell).join(\",\")),\n ];\n\n return c.body(rows.join(\"\\r\\n\"), 200, {\n \"Content-Type\": \"text/csv; charset=utf-8\",\n \"Content-Disposition\": 'attachment; filename=\"email-signups.csv\"',\n \"Cache-Control\": \"private, no-store\",\n });\n});\n\napp.get(\"/submissions\", (c) => c.redirect(\"/admin\", 301));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.onError((err) => Promise.reject(err));\n\nexport default oauthMiddleware(app.fetch);\n","deleted","label","charlie-email-signup",[64],"76413ec1-eb15-4475-ab95-761d9e5d9344","db.ts","019f8a2a-024f-740a-9a80-ce9122a4adf4",["D",1784729518212],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface EmailSignup {\n id: number;\n email: string;\n created_at: string;\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS email_signups (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL UNIQUE COLLATE NOCASE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nexport async function addEmailSignup(email: string): Promise<\"created\" | \"exists\"> {\n const result = await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO email_signups (email) VALUES (?)\",\n args: [email],\n });\n\n return result.rowsAffected === 1 ? \"created\" : \"exists\";\n}\n\nexport async function listEmailSignups(): Promise {\n const result = await sqlite.execute(\n \"SELECT id, email, created_at FROM email_signups ORDER BY id DESC\",\n );\n\n return result.rows as unknown as EmailSignup[];\n}\n",[85],"de476fee-7f6a-45f3-bf22-2e7cc7f080ca","README.md","019f8a2a-024f-740a-9a80-c85300f5c299",["D",1784729435570],"# What's the easiest way to put a form online and save submissions?\n\nRemix this val. It serves a contact form (name, email, message) at `/`, saves every submission to the val's own SQLite database, and lists everything received at `/submissions`. No external services, no API keys, no env vars.\n\n## Setup\n\n1. Remix this val.\n2. Open the HTTP endpoint of `main.tsx` — that is your live form. Share the URL.\n3. Visit `/submissions` on the same URL to see what people sent.\n\nEach remix gets its own private SQLite database, so your submissions stay with your copy.\n\n## Files\n\n- `main.tsx` — Hono routes: GET `/` (form), POST `/submit` (save), GET `/submissions` (list)\n- `db.ts` — creates the `submissions` table and holds the two queries\n- `components/Layout.tsx` — shared page shell with Tailwind (via Twind)\n- `components/FormPage.tsx` — the form\n- `components/SubmissionsPage.tsx` — the list\n\n## Notes\n\n- `/submissions` is public by default. If your form collects anything sensitive, protect that route before sharing the form URL.\n- No client-side JavaScript: the form is a plain HTML POST.\n",[92],"3aab88c1-13c9-4d65-ab2f-dcb246e9dc50","components","019f8a2a-024f-740a-9a80-c72ac8a94a86",["D",1784729435570],"directory",[98],{"_35":97,"_13":98,"_65":99,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":117,"_17":33,"_76":101,"_78":-5,"_80":50,"_81":-5,"_108":118,"_18":119},{"_35":91,"_13":92,"_65":93,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":114,"_17":33,"_76":24,"_78":95,"_80":50,"_81":-5,"_108":115,"_18":116},{"_35":84,"_13":85,"_65":86,"_67":-5,"_68":69,"_70":75,"_72":73,"_37":111,"_17":43,"_76":88,"_78":89,"_80":50,"_81":-5,"_108":112,"_18":113},{"_35":63,"_13":64,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":73,"_37":107,"_17":75,"_76":77,"_78":79,"_80":50,"_81":82,"_108":109,"_18":110},["D",1784729678311],"children",[],[64],["D",1784729518212],[],[85],["D",1784729435570],[],[92],["D",1784729435570],[120,121,122],[98],{"_35":139,"_13":140,"_65":141,"_67":99,"_68":69,"_70":142,"_72":73,"_37":143,"_17":43,"_76":88,"_78":144,"_80":50,"_81":-5,"_108":145,"_18":146},{"_35":131,"_13":132,"_65":133,"_67":99,"_68":69,"_70":134,"_72":73,"_37":135,"_17":43,"_76":88,"_78":136,"_80":50,"_81":-5,"_108":137,"_18":138},{"_35":123,"_13":124,"_65":125,"_67":99,"_68":69,"_70":126,"_72":73,"_37":127,"_17":43,"_76":88,"_78":128,"_80":50,"_81":-5,"_108":129,"_18":130},"09cc9b07-92e4-4b80-94c5-06b157f24b2f","SubmissionsPage.tsx","019f8a2a-024f-740a-9a80-c3d77289637a",5,["D",1784729579543],"/** @jsxImportSource npm:hono/jsx */\nimport type { EmailSignup } from \"../db.ts\";\nimport Layout from \"./Layout.tsx\";\n\nexport default function AdminPage({\n signups,\n username,\n}: {\n signups: EmailSignup[];\n username: string;\n}) {\n return (\n \n

Private admin

Email signups

\n {signups.length} {signups.length === 1 ? \"subscriber\" : \"subscribers\"} · signed in as @{username}\n

\n \n Download CSV\n \n \n Public page\n \n \n

\n\n

\n {signups.length === 0\n ? (\n

No signups yet

Share the public page and the first signup will appear here.

\n )\n : (\n

\n \n \n \n \n \n \n \n \n \n {signups.map((signup) => (\n \n \n \n \n \n ))}\n \n

#	Email	Signed up (UTC)
{signup.id}	\n {signup.email}\n	{signup.created_at}

\n )}\n

\n\n \n \n );\n}\n",[],[98,124],"e3ecbed2-10df-48c1-8d64-8f850e9d7684","Layout.tsx","019f8a2a-024f-740a-9a80-bc65133ec8f9",3,["D",1784729529898],"/** @jsxImportSource npm:hono/jsx */\n\nexport default function Layout({\n title,\n children,\n wide = false,\n}: {\n title: string;\n children?: unknown;\n wide?: boolean;\n}) {\n return (\n \n \n \n \n \n {title}\n \n \n \n \n

\n {children}\n

\n \n \n );\n}\n",[],[98,132],"4fd58d72-6680-4514-b35b-f04c96527aaa","FormPage.tsx","019f8a2a-024f-740a-9a80-bb93c6ff9228",4,["D",1784729552306],"/** @jsxImportSource npm:hono/jsx */\nimport Layout from \"./Layout.tsx\";\n\nexport default function FormPage({ status }: { status?: string }) {\n const joined = status === \"joined\";\n const exists = status === \"exists\";\n const invalid = status === \"invalid\";\n\n return (\n \n

\n \n Email updates\n

\n Stay in the loop.\n

\n Get occasional updates delivered directly to your inbox. No spam, no noise, and you can unsubscribe anytime.\n

\n\n {joined && (\n

\n You’re on the list. Check your inbox for future updates.\n

\n )}\n {exists && (\n

\n That email is already on the list.\n

\n )}\n {invalid && (\n

\n Enter a valid email address.\n

\n )}\n\n \n\n

\n Your email stays private.\n

\n Admin\n View source\n

\n \n );\n}\n",[],[98,140],"5261ca2e-1d74-41b4-8caf-8944db26b3f2",["D",1784729435570],"legacyEnvVars","httpPrivacy","description","Email signup with private admin and CSV","imageUrl","userId","9319c175-2593-4f88-ba21-04f2ef7b1c28","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","d663a026-6449-42f6-9156-1d4a2d64d38c","tursoName","5261ca2e1d7441b48caf8944db26b3f2","tursoHostname","5261ca2e1d7441b48caf8944db26b3f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_194":190},"org",{"_11":12,"_187":188,"_189":190,"_154":155,"_191":192,"_193":50},"branch",{"_17":71,"_13":16,"_35":69,"_41":147,"_44":36,"_45":43,"_184":52,"_185":42,"_186":56,"_57":14,"_53":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Charlie","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3e904faa-3764-4629-c475-f561a49b0000/square512?exp=1789552799&sig=9e2f7c6ad81bfe0a417f4ee593a56f46019d3f18deb24441c667547de12b5000","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":147,"_13":14,"_37":258,"_48":-5,"_149":50,"_51":52,"_150":52,"_151":152,"_153":-5,"_154":155,"_156":66,"_157":73,"_158":-5,"_159":-5,"_160":33,"_55":161,"_162":163,"_164":165,"_166":259,"_168":-5,"_169":170,"_171":170,"_172":173,"_174":173,"_175":173,"_176":170,"_177":170,"_178":260,"_180":261,"_182":262,"_49":50},[237,241,242,243],"files",[237,238,239,240,241,242,243],"counts",{"_228":33,"_229":43,"_230":33,"_34":231,"_232":233},[220,221,222,223],"upstreamProject",{"_35":42,"_13":58,"_151":217,"_153":-5,"_51":52,"_178":218},"upstreamBranch",{"_35":36,"_37":215,"_39":216,"_13":16,"_41":42,"_17":43,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781134761362],["D",1781134761362],"Put a form online and save submissions to SQLite",{"_11":54,"_194":219},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789552799&sig=d49f90d93e120483cdf15d03d3545ffc812712f79bb9ed726650e50aa3216f06",{"_35":97,"_13":98,"_65":99,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":100,"_17":33,"_76":101,"_78":-5,"_80":50,"_81":-5,"_18":227},{"_35":91,"_13":92,"_65":93,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":94,"_17":33,"_76":24,"_78":95,"_80":50,"_81":-5,"_18":226},{"_35":84,"_13":85,"_65":86,"_67":-5,"_68":69,"_70":75,"_72":73,"_37":87,"_17":43,"_76":88,"_78":89,"_80":50,"_81":-5,"_18":225},{"_35":63,"_13":64,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":73,"_37":74,"_17":75,"_76":77,"_78":79,"_80":50,"_81":82,"_18":224},[64],[85],[92],[98],"pulls","branches","forks",{"_234":33,"_236":33},"connections",{"_234":33,"_235":33},"count","unfilledCount","emptyCount",{"_35":97,"_13":98,"_65":99,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":117,"_17":33,"_76":101,"_78":-5,"_80":50,"_81":-5,"_108":256,"_18":257},{"_35":139,"_13":140,"_65":141,"_67":99,"_68":69,"_70":142,"_72":73,"_37":143,"_17":43,"_76":88,"_78":144,"_80":50,"_81":-5,"_108":254,"_18":255},{"_35":131,"_13":132,"_65":133,"_67":99,"_68":69,"_70":134,"_72":73,"_37":135,"_17":43,"_76":88,"_78":136,"_80":50,"_81":-5,"_108":252,"_18":253},{"_35":123,"_13":124,"_65":125,"_67":99,"_68":69,"_70":126,"_72":73,"_37":127,"_17":43,"_76":88,"_78":128,"_80":50,"_81":-5,"_108":250,"_18":251},{"_35":91,"_13":92,"_65":93,"_67":-5,"_68":69,"_70":43,"_72":73,"_37":114,"_17":33,"_76":24,"_78":95,"_80":50,"_81":-5,"_108":248,"_18":249},{"_35":84,"_13":85,"_65":86,"_67":-5,"_68":69,"_70":75,"_72":73,"_37":111,"_17":43,"_76":88,"_78":89,"_80":50,"_81":-5,"_108":246,"_18":247},{"_35":63,"_13":64,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":73,"_37":107,"_17":75,"_76":77,"_78":79,"_80":50,"_81":82,"_108":244,"_18":245},[],[64],[],[85],[],[92],[],[98,124],[],[98,132],[],[98,140],[238,239,240],[98],["D",1784729435570],["D",1789473046147],{"_11":12,"_194":190},{"_11":12,"_187":188,"_189":190,"_154":155,"_191":192,"_193":50},{"_17":71,"_13":16,"_35":69,"_41":147,"_44":36,"_45":43,"_184":52,"_185":42,"_186":56,"_57":14,"_53":12},"ctx",{"_178":-5,"_212":296,"_297":298,"_299":300,"_301":50,"_302":50,"_303":50,"_304":73,"_305":-5,"_306":-7,"_307":-7,"_308":33,"_309":50,"_310":50,"_311":-5,"_312":50,"_313":50,"_314":50,"_315":-5},"ENV",{"_267":268,"_269":270,"_271":16,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code