Access denied

This admin is private.

You are signed in as @{session.user.username ?? \"unknown\"}, but only the owner can view these signups.

\n \n

\n ,\n 403,\n );\n }\n\n const signups = await listEmailSignups();\n return c.html();\n});\n\napp.get(\"/admin.csv\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.id !== OWNER_USER_ID) return c.text(\"Forbidden\", 403);\n\n const signups = await listEmailSignups();\n const rows = [\n [\"id\", \"email\", \"created_at\"].map(csvCell).join(\",\"),\n ...signups.map((signup) => [signup.id, signup.email, signup.created_at].map(csvCell).join(\",\")),\n ];\n\n return c.body(rows.join(\"\\r\\n\"), 200, {\n \"Content-Type\": \"text/csv; charset=utf-8\",\n \"Content-Disposition\": 'attachment; filename=\"email-signups.csv\"',\n \"Cache-Control\": \"private, no-store\",\n });\n});\n\napp.get(\"/submissions\", (c) => c.redirect(\"/admin\", 301));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.onError((err) => Promise.reject(err));\n\nexport default oauthMiddleware(app.fetch);\n","label","charlie-email-signup","children",[75],"contentHash","8ec0afbd1f8c4bce8dcc9157e2e1bfb019ec270cb085432fa9329c8a56f37468","0bcd4b7b-4987-4fd6-8d3a-452a7bd57b5c","019eb3e7-9e0e-75d5-89dd-d1cbbcb576b4",["D",1781134761362],"/** @jsxImportSource npm:hono/jsx */\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport FormPage from \"./components/FormPage.tsx\";\nimport SubmissionsPage from \"./components/SubmissionsPage.tsx\";\nimport { addSubmission, listSubmissions } from \"./db.ts\";\n\nconst app = new Hono();\n\napp.get(\"/\", (c) => c.html());\n\napp.post(\"/submit\", async (c) => {\n const form = await c.req.formData();\n const name = String(form.get(\"name\") ?? \"\").trim();\n const email = String(form.get(\"email\") ?? \"\").trim();\n const message = String(form.get(\"message\") ?? \"\").trim();\n if (!name || !email || !message) {\n return c.text(\"Name, email, and message are all required.\", 400);\n }\n await addSubmission(name, email, message);\n return c.redirect(\"/submissions\");\n});\n\napp.get(\"/submissions\", async (c) => {\n const submissions = await listSubmissions();\n return c.html();\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n",[75],"3444614cf3e968b28a07c7de8077c4c708eab1479f005f0a1bd9aa0a664fabb8","db.ts",{"_32":115,"_13":105,"_81":116,"_83":-5,"_84":33,"_85":41,"_86":26,"_34":117,"_40":22,"_89":111,"_91":118,"_65":48,"_93":-5,"_95":-7,"_74":119,"_97":120},{"_32":108,"_13":105,"_81":109,"_83":-5,"_84":58,"_85":88,"_86":26,"_34":110,"_40":41,"_89":111,"_91":112,"_65":48,"_93":-5,"_95":-7,"_74":113,"_97":114},"76413ec1-eb15-4475-ab95-761d9e5d9344","019f8a2a-024f-740a-9a80-ce9122a4adf4",["D",1784729518212],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface EmailSignup {\n id: number;\n email: string;\n created_at: string;\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS email_signups (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL UNIQUE COLLATE NOCASE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nexport async function addEmailSignup(email: string): Promise<\"created\" | \"exists\"> {\n const result = await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO email_signups (email) VALUES (?)\",\n args: [email],\n });\n\n return result.rowsAffected === 1 ? \"created\" : \"exists\";\n}\n\nexport async function listEmailSignups(): Promise {\n const result = await sqlite.execute(\n \"SELECT id, email, created_at FROM email_signups ORDER BY id DESC\",\n );\n\n return result.rows as unknown as EmailSignup[];\n}\n",[105],"7bb3971ee51aee91c1385f385e6fe3cad3c5a56a1227c9b286083aeb67094c3b","de425f0c-092f-42c8-85b0-92ccf1f6de9b","019eb3e7-9e0e-75d5-89dd-cc01edb75581",["D",1781134761362],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface Submission {\n id: number;\n name: string;\n email: string;\n message: string;\n created_at: string;\n}\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS submissions (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n email TEXT NOT NULL,\n message TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`);\n\nexport async function addSubmission(name: string, email: string, message: string) {\n await sqlite.execute({\n sql: \"INSERT INTO submissions (name, email, message) VALUES (?, ?, ?)\",\n args: [name, email, message],\n });\n}\n\nexport async function listSubmissions(): Promise {\n const result = await sqlite.execute(\n \"SELECT id, name, email, message, created_at FROM submissions ORDER BY id DESC\",\n );\n return result.rows as unknown as Submission[];\n}\n",[105],"c2c07edcd11f5670074bbc6a45b0a56e4af7c5b69a64dfaf3e4c833eccc17ecd","components/SubmissionsPage.tsx",{"_32":134,"_13":125,"_81":135,"_83":136,"_84":33,"_85":41,"_86":26,"_34":137,"_40":22,"_89":111,"_91":138,"_65":48,"_93":-5,"_95":-7,"_74":139,"_97":140},{"_32":124,"_13":125,"_81":126,"_83":127,"_84":58,"_85":128,"_86":26,"_34":129,"_40":41,"_89":111,"_91":130,"_65":48,"_93":-5,"_95":-7,"_74":131,"_97":132},"09cc9b07-92e4-4b80-94c5-06b157f24b2f","SubmissionsPage.tsx","019f8a2a-024f-740a-9a80-c3d77289637a","019f8a2a-024f-740a-9a80-c72ac8a94a86",5,["D",1784729579543],"/** @jsxImportSource npm:hono/jsx */\nimport type { EmailSignup } from \"../db.ts\";\nimport Layout from \"./Layout.tsx\";\n\nexport default function AdminPage({\n signups,\n username,\n}: {\n signups: EmailSignup[];\n username: string;\n}) {\n return (\n \n

Private admin

Email signups

\n {signups.length} {signups.length === 1 ? \"subscriber\" : \"subscribers\"} · signed in as @{username}\n

\n \n Download CSV\n \n \n Public page\n \n \n

\n\n

\n {signups.length === 0\n ? (\n

No signups yet

Share the public page and the first signup will appear here.

\n )\n : (\n

\n \n \n \n \n \n \n \n \n \n {signups.map((signup) => (\n \n \n \n \n \n ))}\n \n

#	Email	Signed up (UTC)
{signup.id}	\n {signup.email}\n	{signup.created_at}

\n )}\n

\n\n \n \n );\n}\n",[133,125],"157b6c4ea43025f94b9983caaa80d26ccca931a0abd38410334d67d9290ec975","components","691b3474-6bf0-417c-9095-c4af0e6735aa","019eb3e7-9e0e-75d5-89dd-c21d1fee16ae","019eb3e7-9e0e-75d5-89dd-c676b3994f07",["D",1781134761362],"/** @jsxImportSource npm:hono/jsx */\nimport type { Submission } from \"../db.ts\";\nimport Layout from \"./Layout.tsx\";\n\nexport default function SubmissionsPage({ submissions }: { submissions: Submission[] }) {\n return (\n \n

Submissions ({submissions.length})

\n {submissions.length === 0\n ?

Nothing yet. Be the first to submit the form.

\n : (\n

\n
\n {s.name}\n {s.created_at}\n
\n
{s.email}
\n
{s.message}
\n

\n )}\n

\n back to form\n view source\n

\n \n );\n}\n",[133,125],"643e416908fb792558e3fee8fee20463211a82b3ebe1ad2ce830bef35200e180","components/Layout.tsx",{"_32":152,"_13":145,"_81":153,"_83":136,"_84":33,"_85":41,"_86":26,"_34":154,"_40":22,"_89":111,"_91":155,"_65":48,"_93":-5,"_95":-7,"_74":156,"_97":157},{"_32":144,"_13":145,"_81":146,"_83":127,"_84":58,"_85":147,"_86":26,"_34":148,"_40":41,"_89":111,"_91":149,"_65":48,"_93":-5,"_95":-7,"_74":150,"_97":151},"e3ecbed2-10df-48c1-8d64-8f850e9d7684","Layout.tsx","019f8a2a-024f-740a-9a80-bc65133ec8f9",3,["D",1784729529898],"/** @jsxImportSource npm:hono/jsx */\n\nexport default function Layout({\n title,\n children,\n wide = false,\n}: {\n title: string;\n children?: unknown;\n wide?: boolean;\n}) {\n return (\n \n \n \n \n \n {title}\n \n \n \n \n

\n {children}\n

\n \n \n );\n}\n",[133,145],"0d0bafb7ec583d60116160539379c5d18883421b886cd701f300d1264c064c32","40e83c0d-3089-4920-8dc8-7de707bfa83b","019eb3e7-9e0e-75d5-89dd-bc3144787be0",["D",1781134761362],"/** @jsxImportSource npm:hono/jsx */\n\nexport default function Layout({ title, children }: { title: string; children?: unknown }) {\n return (\n \n \n \n \n {title}\n \n \n \n \n

{children}

\n \n \n );\n}\n",[133,145],"ca2a221c6e5ad35aa4c2856f9b352abd01253269ec2290659c81d61062ebca0f","components/FormPage.tsx",{"_32":169,"_13":162,"_81":170,"_83":136,"_84":33,"_85":41,"_86":26,"_34":171,"_40":22,"_89":111,"_91":172,"_65":48,"_93":-5,"_95":-7,"_74":173,"_97":174},{"_32":161,"_13":162,"_81":163,"_83":127,"_84":58,"_85":164,"_86":26,"_34":165,"_40":41,"_89":111,"_91":166,"_65":48,"_93":-5,"_95":-7,"_74":167,"_97":168},"4fd58d72-6680-4514-b35b-f04c96527aaa","FormPage.tsx","019f8a2a-024f-740a-9a80-bb93c6ff9228",4,["D",1784729552306],"/** @jsxImportSource npm:hono/jsx */\nimport Layout from \"./Layout.tsx\";\n\nexport default function FormPage({ status }: { status?: string }) {\n const joined = status === \"joined\";\n const exists = status === \"exists\";\n const invalid = status === \"invalid\";\n\n return (\n \n

\n \n Email updates\n

\n Stay in the loop.\n

\n Get occasional updates delivered directly to your inbox. No spam, no noise, and you can unsubscribe anytime.\n

\n\n {joined && (\n

\n You’re on the list. Check your inbox for future updates.\n

\n )}\n {exists && (\n

\n That email is already on the list.\n

\n )}\n {invalid && (\n

\n Enter a valid email address.\n

\n )}\n\n \n\n

\n Your email stays private.\n

\n Admin\n View source\n

\n \n );\n}\n",[133,162],"00983ea80f7ddc7500f7009b79fa2aa2308242beaa28bc5867d9f48685e04914","08b65428-ac5c-40c7-ab6e-e17652aa1862","019eb3e7-9e0e-75d5-89dd-b84986c1d8ca",["D",1781134761362],"/** @jsxImportSource npm:hono/jsx */\nimport Layout from \"./Layout.tsx\";\n\nexport default function FormPage() {\n return (\n \n

Contact form

\n Submissions are saved to this val's SQLite database.\n

\n \n

\n view submissions\n view source\n

\n \n );\n}\n",[133,162],"ab9a2d842536393d2700e91840403100070684e4a9facec495a83c1e5b1c4acc",["D",1784729435570],"legacyEnvVars","httpPrivacy","description","Email signup with private admin and CSV","imageUrl","userId","9319c175-2593-4f88-ba21-04f2ef7b1c28","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","d663a026-6449-42f6-9156-1d4a2d64d38c","tursoName","5261ca2e1d7441b48caf8944db26b3f2","tursoHostname","5261ca2e1d7441b48caf8944db26b3f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_217":213},"org",{"_11":12,"_210":211,"_212":213,"_181":182,"_214":215,"_216":48},"branch","displayName","Charlie","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3e904faa-3764-4629-c475-f561a49b0000/square512?exp=1789552799&sig=9e2f7c6ad81bfe0a417f4ee593a56f46019d3f18deb24441c667547de12b5000","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":59,"_13":14,"_34":298,"_46":-5,"_176":48,"_49":50,"_177":50,"_178":179,"_180":-5,"_181":182,"_183":82,"_184":26,"_185":-5,"_186":-5,"_187":22,"_53":188,"_189":190,"_191":192,"_193":299,"_195":-5,"_196":197,"_198":197,"_199":200,"_201":200,"_202":200,"_203":197,"_204":197,"_205":300,"_207":301,"_209":302,"_47":48},"tree",[275,279,280,281],"files",[275,276,277,278,279,280,281],"counts",{"_265":22,"_266":41,"_267":22,"_268":269,"_270":271},"contents",[247,248,249,250],"file","upstreamProject",{"_32":39,"_13":56,"_178":244,"_180":-5,"_49":50,"_205":245},"upstreamBranch",{"_32":33,"_34":242,"_36":243,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781134761362],["D",1781134761362],"Put a form online and save submissions to SQLite",{"_11":52,"_217":246},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789552799&sig=d49f90d93e120483cdf15d03d3545ffc812712f79bb9ed726650e50aa3216f06",{"_32":261,"_13":133,"_81":127,"_83":-5,"_84":58,"_85":41,"_86":26,"_34":262,"_40":22,"_89":263,"_91":-5,"_65":48,"_93":-5,"_74":264},{"_32":255,"_13":256,"_81":257,"_83":-5,"_84":58,"_85":41,"_86":26,"_34":258,"_40":22,"_89":229,"_91":259,"_65":48,"_93":-5,"_74":260},{"_32":108,"_13":105,"_81":109,"_83":-5,"_84":58,"_85":88,"_86":26,"_34":253,"_40":41,"_89":111,"_91":112,"_65":48,"_93":-5,"_74":254},{"_32":80,"_13":75,"_81":82,"_83":-5,"_84":58,"_85":57,"_86":26,"_34":251,"_40":88,"_89":90,"_91":92,"_65":48,"_93":94,"_74":252},["D",1784729678311],[75],["D",1784729518212],[105],"de476fee-7f6a-45f3-bf22-2e7cc7f080ca","README.md","019f8a2a-024f-740a-9a80-c85300f5c299",["D",1784729435570],"# What's the easiest way to put a form online and save submissions?\n\nRemix this val. It serves a contact form (name, email, message) at `/`, saves every submission to the val's own SQLite database, and lists everything received at `/submissions`. No external services, no API keys, no env vars.\n\n## Setup\n\n1. Remix this val.\n2. Open the HTTP endpoint of `main.tsx` — that is your live form. Share the URL.\n3. Visit `/submissions` on the same URL to see what people sent.\n\nEach remix gets its own private SQLite database, so your submissions stay with your copy.\n\n## Files\n\n- `main.tsx` — Hono routes: GET `/` (form), POST `/submit` (save), GET `/submissions` (list)\n- `db.ts` — creates the `submissions` table and holds the two queries\n- `components/Layout.tsx` — shared page shell with Tailwind (via Twind)\n- `components/FormPage.tsx` — the form\n- `components/SubmissionsPage.tsx` — the list\n\n## Notes\n\n- `/submissions` is public by default. If your form collects anything sensitive, protect that route before sharing the form URL.\n- No client-side JavaScript: the form is a plain HTML POST.\n",[256],"3aab88c1-13c9-4d65-ab2f-dcb246e9dc50",["D",1784729435570],"directory",[133],"pulls","branches","forks","envVars",{"_272":22,"_274":22},"connections",{"_272":22,"_273":22},"count","unfilledCount","emptyCount",{"_32":261,"_13":133,"_81":127,"_83":-5,"_84":58,"_85":41,"_86":26,"_34":295,"_40":22,"_89":263,"_91":-5,"_65":48,"_93":-5,"_95":296,"_74":297},{"_32":161,"_13":162,"_81":163,"_83":127,"_84":58,"_85":164,"_86":26,"_34":165,"_40":41,"_89":111,"_91":166,"_65":48,"_93":-5,"_95":293,"_74":294},{"_32":144,"_13":145,"_81":146,"_83":127,"_84":58,"_85":147,"_86":26,"_34":148,"_40":41,"_89":111,"_91":149,"_65":48,"_93":-5,"_95":291,"_74":292},{"_32":124,"_13":125,"_81":126,"_83":127,"_84":58,"_85":128,"_86":26,"_34":129,"_40":41,"_89":111,"_91":130,"_65":48,"_93":-5,"_95":289,"_74":290},{"_32":255,"_13":256,"_81":257,"_83":-5,"_84":58,"_85":41,"_86":26,"_34":286,"_40":22,"_89":229,"_91":259,"_65":48,"_93":-5,"_95":287,"_74":288},{"_32":108,"_13":105,"_81":109,"_83":-5,"_84":58,"_85":88,"_86":26,"_34":110,"_40":41,"_89":111,"_91":112,"_65":48,"_93":-5,"_95":284,"_74":285},{"_32":80,"_13":75,"_81":82,"_83":-5,"_84":58,"_85":57,"_86":26,"_34":87,"_40":88,"_89":90,"_91":92,"_65":48,"_93":94,"_95":282,"_74":283},[],[75],[],[105],["D",1784729435570],[],[256],[],[133,125],[],[133,145],[],[133,162],["D",1784729435570],[276,277,278],[133],["D",1784729435570],["D",1789473046147],{"_11":12,"_217":213},{"_11":12,"_210":211,"_212":213,"_181":182,"_214":215,"_216":48},{"_40":57,"_13":16,"_32":58,"_38":59,"_42":33,"_43":41,"_60":50,"_61":39,"_62":54,"_55":14,"_51":12},"ctx",{"_205":-5,"_239":336,"_337":338,"_339":340,"_341":48,"_342":48,"_343":48,"_344":26,"_345":-5,"_346":-7,"_347":-7,"_348":22,"_349":48,"_350":48,"_351":-5,"_352":48,"_353":48,"_354":48,"_355":-5},"ENV",{"_307":308,"_309":310,"_311":16,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergedcm31/mainintotemplates/main

components/FormPage.tsx+61-25

components/Layout.tsx+15-3

components/SubmissionsPage.tsx+69-24

db.ts+13-14

Hmain.tsx+73-18