\n \n \n \n \n \n \n\n",[],[248,250],"020d093e-c646-11f0-ba09-42dde27851f2","Setup.tsx","019aa2b6-3c0d-749c-b569-b4dc7d2f6b00","019aa2b6-3c0d-749c-b569-b943b65e24c1",["D",1763666443214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface BearerToken {\n id: string;\n name: string;\n token: string;\n createdAt: string;\n}\n\ninterface SetupProps {\n user: User;\n}\n\nexport function Setup({ user }: SetupProps) {\n const [tokens, setTokens] = useState([]);\n const [selectedToken, setSelectedToken] = useState('');\n const [loading, setLoading] = useState(true);\n const [currentStep, setCurrentStep] = useState(1);\n\n useEffect(() => {\n loadTokens();\n }, []);\n\n const loadTokens = async () => {\n try {\n const response = await fetch('/api/auth/tokens');\n if (response.ok) {\n const data = await response.json();\n setTokens(data.tokens || []);\n if (data.tokens && data.tokens.length > 0) {\n setSelectedToken(data.tokens[0].id);\n }\n }\n } catch (error) {\n console.error('Failed to load tokens:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const createToken = async () => {\n try {\n const response = await fetch('/api/auth/tokens', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ name: 'iOS Shortcut Token' }),\n });\n\n if (response.ok) {\n const data = await response.json();\n const newToken = { ...data, token: data.token };\n setTokens([...tokens, newToken]);\n setSelectedToken(newToken.id);\n return newToken.token;\n }\n } catch (error) {\n console.error('Token creation error:', error);\n }\n return null;\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text).then(() => {\n alert('Copied to clipboard!');\n });\n };\n\n const getSelectedTokenValue = () => {\n const token = tokens.find(t => t.id === selectedToken);\n return token?.token || '';\n };\n\n const getShortcutURL = () => {\n const baseURL = window.location.origin;\n return `https://www.icloud.com/shortcuts/your-shortcut-id`;\n };\n\n const getShortcutCode = () => {\n const baseURL = window.location.origin;\n const token = getSelectedTokenValue();\n \n return `// iOS Shortcut Configuration\n// 1. Get input from Share Sheet\n// 2. Determine content type\n// 3. Send to backend\n\nconst content = getSharedContent();\nconst contentType = determineContentType(content);\n\nconst payload = {\n type: contentType,\n content: content,\n title: getTitle(),\n metadata: {\n source: \"iOS Share Sheet\",\n timestamp: new Date().toISOString()\n }\n};\n\nconst response = await fetch(\"${baseURL}/api/content\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer ${token}\"\n },\n body: JSON.stringify(payload)\n});\n\nif (response.ok) {\n showNotification(\"Content saved successfully!\");\n} else {\n showNotification(\"Failed to save content\");\n}`;\n };\n\n if (loading) {\n return (\n

📱

Loading setup guide...

\n );\n }\n\n return (\n

\n {/* Header */}\n

📱 iOS Shortcut Setup

Configure your iOS device to share content

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 🏠 Dashboard\n \n

\n\n

\n {/* Progress Steps */}\n

\n {[1, 2, 3, 4].map((step) => (\n

\n = step\n ? 'bg-blue-500 text-white'\n : 'bg-gray-200 text-gray-600'\n }`}\n >\n {step}\n

\n {step < 4 && (\n step ? 'bg-blue-500' : 'bg-gray-200'\n }`}\n />\n )}\n

\n ))}\n

\n Step {currentStep} of 4: {\n currentStep === 1 ? 'Get API Token' :\n currentStep === 2 ? 'Download Shortcut' :\n currentStep === 3 ? 'Configure Token' :\n 'Test & Use'\n }\n

\n\n {/* Step 1: API Token */}\n {currentStep === 1 && (\n

🔑 Step 1: Get Your API Token

\n You need an API token to authenticate your iOS shortcuts with this backend.\n

\n\n {tokens.length === 0 ? (\n

No API tokens found. Create one to continue.

\n {\n const token = await createToken();\n if (token) {\n setCurrentStep(2);\n }\n }}\n className=\"bg-blue-500 text-white px-6 py-3 rounded-lg hover:bg-blue-600 transition-colors\"\n >\n ➕ Create API Token\n \n

\n ) : (\n

\n \n Select an existing token:\n \n setSelectedToken(e.target.value)}\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500\"\n >\n {tokens.map((token) => (\n \n ))}\n \n

\n\n

\n setCurrentStep(2)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Use Selected Token →\n \n {\n const token = await createToken();\n if (token) {\n setCurrentStep(2);\n }\n }}\n className=\"bg-green-500 text-white px-6 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n ➕ Create New Token\n \n

\n )}\n

\n )}\n\n {/* Step 2: Download Shortcut */}\n {currentStep === 2 && (\n

📥 Step 2: Download the iOS Shortcut

\n Download and install the pre-configured iOS shortcut that will send content to your backend.\n

\n\n

📱 Shortcut Features:

\n ✅\n Share text from any app\n
\n ✅\n Share URLs and web pages\n
\n ✅\n Share images and photos\n
\n ✅\n Automatic content type detection\n
\n ✅\n Success/error notifications\n

\n\n

\n \n 📥 Download iOS Shortcut\n \n

\n This will open the Shortcuts app on your iOS device\n

\n\n

\n setCurrentStep(1)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n setCurrentStep(3)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Next: Configure Token →\n \n

\n )}\n\n {/* Step 3: Configure Token */}\n {currentStep === 3 && (\n

⚙️ Step 3: Configure Your API Token

\n Add your API token to the shortcut so it can authenticate with your backend.\n

\n\n

\n \n Your API Token:\n \n

\n \n copyToClipboard(getSelectedTokenValue())}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 📋 Copy\n \n

\n\n

📝 Configuration Steps:

Open the downloaded shortcut in the Shortcuts app
Tap \"Edit\" to modify the shortcut
Find the \"Text\" action that contains the API token placeholder
Replace the placeholder with your actual API token (copied above)
Verify the backend URL is correct: {window.location.origin}
Save the shortcut

\n\n

🔧 Technical Details:

Backend URL: {window.location.origin}/api/content

Method: POST

Headers: Authorization: Bearer [your-token]

Content-Type: application/json

\n\n

\n setCurrentStep(2)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n setCurrentStep(4)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Next: Test & Use →\n \n

\n )}\n\n {/* Step 4: Test & Use */}\n {currentStep === 4 && (\n

🎉 Step 4: Test & Start Using!

\n Your iOS shortcut is now configured! Here's how to test it and start sharing content.\n

\n\n

✅ Testing Your Shortcut:

Open any app with shareable content (Safari, Photos, Notes, etc.)
Tap the Share button
Find and tap your new shortcut in the share sheet
Wait for the success notification
Check your dashboard to see the shared content

\n\n

📱 Supported Content Types:

📝

Text

Notes, messages, selected text

🔗

URLs

Web pages, links, bookmarks

🖼️

Images

Photos, screenshots, pictures

\n\n

🔧 Troubleshooting:

\n Shortcut not appearing in share sheet:\n

Make sure you've added the shortcut to your library and it's enabled for sharing.

\n Authentication errors:\n

Double-check that your API token is correctly pasted in the shortcut.

\n Content not appearing:\n

Refresh your dashboard and check that the shortcut completed successfully.

\n\n

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-8 py-3 rounded-lg hover:bg-blue-600 transition-colors text-lg font-medium\"\n >\n 🏠 Go to Dashboard\n \n

\n Start sharing content from your iOS device!\n

\n\n

\n setCurrentStep(3)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n

\n )}\n\n {/* Quick Actions */}\n

🚀 Quick Actions

\n window.location.href = '/'}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

📊

View Dashboard

See your shared content

\n \n copyToClipboard(getSelectedTokenValue())}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

🔑

Copy API Token

For shortcut configuration

\n \n copyToClipboard(window.location.origin + '/api/content')}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

🌐

Copy API URL

Backend endpoint

\n \n

\n \n \n );\n}",[],[248,264,257],"components","020cf7c8-c646-11f0-ba09-42dde27851f2","Dashboard.tsx","019aa2b6-3c0d-749c-b569-b10086d30fdf",["D",1763666443214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface ContentItem {\n id: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: any;\n createdAt: string;\n}\n\ninterface BearerToken {\n id: string;\n name: string;\n lastUsedAt?: string;\n createdAt: string;\n}\n\ninterface DashboardProps {\n user: User;\n}\n\nexport function Dashboard({ user }: DashboardProps) {\n const [content, setContent] = useState([]);\n const [tokens, setTokens] = useState([]);\n const [loading, setLoading] = useState(true);\n const [activeTab, setActiveTab] = useState<'content' | 'tokens'>('content');\n const [showTokenForm, setShowTokenForm] = useState(false);\n const [newTokenName, setNewTokenName] = useState('');\n const [createdToken, setCreatedToken] = useState(null);\n\n useEffect(() => {\n loadData();\n }, []);\n\n const loadData = async () => {\n try {\n setLoading(true);\n \n // Load content and tokens in parallel\n const [contentResponse, tokensResponse] = await Promise.all([\n fetch('/api/content'),\n fetch('/api/auth/tokens')\n ]);\n\n if (contentResponse.ok) {\n const contentData = await contentResponse.json();\n setContent(contentData.items || []);\n }\n\n if (tokensResponse.ok) {\n const tokensData = await tokensResponse.json();\n setTokens(tokensData.tokens || []);\n }\n } catch (error) {\n console.error('Failed to load dashboard data:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const deleteContent = async (id: string) => {\n if (!confirm('Are you sure you want to delete this content?')) return;\n\n try {\n const response = await fetch(`/api/content/${id}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setContent(content.filter(item => item.id !== id));\n } else {\n alert('Failed to delete content');\n }\n } catch (error) {\n console.error('Delete error:', error);\n alert('Failed to delete content');\n }\n };\n\n const createToken = async (e: React.FormEvent) => {\n e.preventDefault();\n if (!newTokenName.trim()) return;\n\n try {\n const response = await fetch('/api/auth/tokens', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ name: newTokenName.trim() }),\n });\n\n if (response.ok) {\n const data = await response.json();\n setCreatedToken(data.token);\n setNewTokenName('');\n loadData(); // Refresh tokens list\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to create token');\n }\n } catch (error) {\n console.error('Token creation error:', error);\n alert('Failed to create token');\n }\n };\n\n const deleteToken = async (id: string) => {\n if (!confirm('Are you sure you want to delete this token? Any shortcuts using it will stop working.')) return;\n\n try {\n const response = await fetch(`/api/auth/tokens/${id}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setTokens(tokens.filter(token => token.id !== id));\n } else {\n alert('Failed to delete token');\n }\n } catch (error) {\n console.error('Token deletion error:', error);\n alert('Failed to delete token');\n }\n };\n\n const formatDate = (dateString: string) => {\n return new Date(dateString).toLocaleString();\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text).then(() => {\n alert('Copied to clipboard!');\n });\n };\n\n if (loading) {\n return (\n

📊

Loading your dashboard...

\n );\n }\n\n return (\n

\n {/* Header */}\n

📊 Dashboard

Welcome back, {user.name}

\n window.location.href = '/setup'}\n className=\"bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n 📱 Setup Guide\n \n {user.isAdmin && (\n window.location.href = '/admin'}\n className=\"bg-yellow-500 text-white px-4 py-2 rounded hover:bg-yellow-600 transition-colors\"\n >\n 🔧 Admin Panel\n \n )}\n {\n fetch('/api/auth/logout', { method: 'POST' })\n .then(() => window.location.href = '/');\n }}\n className=\"bg-red-500 text-white px-4 py-2 rounded hover:bg-red-600 transition-colors\"\n >\n Logout\n \n

\n\n

\n {/* Tab Navigation */}\n

\n setActiveTab('content')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'content'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📋 Content ({content.length})\n \n setActiveTab('tokens')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'tokens'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 🔑 API Tokens ({tokens.length})\n \n

\n\n {/* Content Tab */}\n {activeTab === 'content' && (\n

📋 Your Shared Content

\n {content.length === 0 ? (\n

📭 No content shared yet

\n Use the iOS Share Sheet to send content to this backend!\n

\n window.location.href = '/setup'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 📱 Setup iOS Shortcut\n \n

\n ) : (\n

\n {content.map((item) => (\n \n

\n \n {formatDate(item.createdAt)}\n \n

\n \n {item.type}\n \n deleteContent(item.id)}\n className=\"text-red-500 hover:text-red-700 text-sm\"\n >\n 🗑️\n \n

\n {item.type === 'url' && (\n \n 🔗 {item.content}\n \n )}\n {item.type === 'text' && (\n

📝 {item.content}

\n )}\n {item.type === 'image' && (\n

🖼️ Image: {item.title || 'Untitled'}

\n {item.content.startsWith('data:image/') ? (\n {item.title

\n ) : (\n

Image URL: {item.content}

\n )}\n

\n ))}\n

\n )}\n

\n )}\n\n {/* Tokens Tab */}\n {activeTab === 'tokens' && (\n

🔑 API Tokens

\n setShowTokenForm(true)}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n ➕ Create Token\n \n

\n\n {/* Token Creation Form */}\n {showTokenForm && (\n

\n \n Token Name\n \n setNewTokenName(e.target.value)}\n placeholder=\"e.g., iPhone Shortcut, iPad Share\"\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500\"\n required\n />\n

\n \n Create Token\n \n {\n setShowTokenForm(false);\n setNewTokenName('');\n setCreatedToken(null);\n }}\n className=\"bg-gray-500 text-white px-4 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n Cancel\n \n

\n )}\n\n {/* New Token Display */}\n {createdToken && (\n

✅ Token Created!

\n Copy this token now - you won't be able to see it again:\n

\n {createdToken}\n

\n copyToClipboard(createdToken)}\n className=\"bg-green-500 text-white px-3 py-1 rounded text-sm hover:bg-green-600 transition-colors\"\n >\n 📋 Copy Token\n \n setCreatedToken(null)}\n className=\"bg-gray-500 text-white px-3 py-1 rounded text-sm hover:bg-gray-600 transition-colors\"\n >\n Done\n \n

\n )}\n\n {/* Tokens List */}\n {tokens.length === 0 ? (\n

🔑 No API tokens created yet

\n Create a token to use with iOS shortcuts for sharing content.\n

\n ) : (\n

\n {tokens.map((token) => (\n \n

{token.name}

\n Created: {formatDate(token.createdAt)}\n {token.lastUsedAt && (\n \n Last used: {formatDate(token.lastUsedAt)}\n \n )}\n

\n deleteToken(token.id)}\n className=\"text-red-500 hover:text-red-700 px-3 py-1 rounded\"\n >\n 🗑️ Delete\n \n

\n ))}\n

\n )}\n

\n \n )}\n \n \n );\n}",[],[248,264,266],"020cf00c-c646-11f0-ba09-42dde27851f2","Auth.tsx","019aa2b6-3c0d-749c-b569-ae9318372ee9",["D",1763666443214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"react\";\n\ninterface AuthProps {\n mode: 'login' | 'register';\n onSuccess: () => void;\n}\n\nfunction base64urlToBase64(base64url: string): string {\n // Convert base64url to base64\n let base64 = base64url.replace(/-/g, '+').replace(/_/g, '/');\n // Add padding if needed\n while (base64.length % 4) {\n base64 += '=';\n }\n return base64;\n}\n\nexport function Auth({ mode, onSuccess }: AuthProps) {\n const [email, setEmail] = useState('');\n const [name, setName] = useState('');\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState('');\n const [step, setStep] = useState<'form' | 'webauthn'>('form');\n\n const isRegister = mode === 'register';\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setError('');\n setLoading(true);\n\n try {\n if (!email || (isRegister && !name)) {\n throw new Error(isRegister ? 'Email and name are required' : 'Email is required');\n }\n\n // Start WebAuthn flow\n const startEndpoint = isRegister ? '/api/auth/register-start' : '/api/auth/login-start';\n const startPayload = isRegister ? { email, name } : { email };\n\n const startResponse = await fetch(startEndpoint, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify(startPayload),\n });\n\n if (!startResponse.ok) {\n const errorData = await startResponse.json();\n throw new Error(errorData.error || 'Authentication failed');\n }\n\n const startData = await startResponse.json();\n setStep('webauthn');\n\n // Prepare WebAuthn options\n let credentialOptions;\n if (isRegister) {\n credentialOptions = {\n publicKey: {\n challenge: new Uint8Array(atob(base64urlToBase64(startData.challenge)).split('').map(c => c.charCodeAt(0))),\n rp: startData.rp,\n user: {\n id: new TextEncoder().encode(startData.user.id),\n name: startData.user.name,\n displayName: startData.user.displayName,\n },\n pubKeyCredParams: startData.pubKeyCredParams,\n authenticatorSelection: startData.authenticatorSelection,\n timeout: startData.timeout,\n attestation: startData.attestation,\n },\n };\n } else {\n credentialOptions = {\n publicKey: {\n challenge: new Uint8Array(atob(base64urlToBase64(startData.challenge)).split('').map(c => c.charCodeAt(0))),\n allowCredentials: startData.allowCredentials.map((cred: any) => ({\n id: new Uint8Array(atob(base64urlToBase64(cred.id)).split('').map(c => c.charCodeAt(0))),\n type: cred.type,\n })),\n timeout: startData.timeout,\n userVerification: startData.userVerification,\n },\n };\n }\n\n // Create or get credential\n let credential;\n if (isRegister) {\n credential = await navigator.credentials.create(credentialOptions);\n } else {\n credential = await navigator.credentials.get(credentialOptions);\n }\n\n if (!credential) {\n throw new Error('WebAuthn authentication was cancelled');\n }\n\n // Prepare credential for server\n const credentialForServer = {\n id: credential.id,\n rawId: btoa(String.fromCharCode(...new Uint8Array(credential.rawId))),\n response: isRegister ? {\n attestationObject: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.attestationObject))),\n clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(credential.response.clientDataJSON))),\n } : {\n authenticatorData: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.authenticatorData))),\n clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(credential.response.clientDataJSON))),\n signature: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.signature))),\n userHandle: (credential as any).response.userHandle ? btoa(String.fromCharCode(...new Uint8Array((credential as any).response.userHandle))) : null,\n },\n type: credential.type,\n };\n\n // Finish authentication\n const finishEndpoint = isRegister ? '/api/auth/register-finish' : '/api/auth/login-finish';\n const finishResponse = await fetch(finishEndpoint, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n email,\n credential: credentialForServer,\n }),\n });\n\n if (!finishResponse.ok) {\n const errorData = await finishResponse.json();\n throw new Error(errorData.error || 'Authentication failed');\n }\n\n // Success!\n onSuccess();\n } catch (error: any) {\n console.error('Authentication error:', error);\n setError(error.message || 'Authentication failed');\n setStep('form');\n } finally {\n setLoading(false);\n }\n };\n\n return (\n

🔐

\n {isRegister ? 'Create your account' : 'Sign in to your account'}\n

\n {isRegister ? 'Register with WebAuthn for secure passwordless authentication' : 'Use WebAuthn to sign in securely'}\n

\n\n

\n \n Email address\n \n setEmail(e.target.value)}\n className=\"mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500 focus:z-10 sm:text-sm\"\n placeholder=\"Enter your email\"\n disabled={loading}\n />\n

\n\n {isRegister && (\n

\n \n Full name\n \n setName(e.target.value)}\n className=\"mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500 focus:z-10 sm:text-sm\"\n placeholder=\"Enter your full name\"\n disabled={loading}\n />\n

\n )}\n

\n\n {error && (\n

⚠️

{error}

\n )}\n\n {step === 'webauthn' && (\n

🔐

\n Please complete the WebAuthn authentication using your device's biometric sensor or security key.\n

\n )}\n\n

\n \n {loading ? (\n \n

🔄

\n {step === 'webauthn' ? 'Authenticating...' : 'Processing...'}\n \n ) : (\n isRegister ? 'Create Account' : 'Sign In'\n )}\n \n

\n\n

\n window.location.href = isRegister ? '/login' : '/register'}\n className=\"text-blue-600 hover:text-blue-500 text-sm\"\n >\n {isRegister ? 'Already have an account? Sign in' : \"Don't have an account? Register\"}\n \n

\n\n

🛡️ About WebAuthn

\n WebAuthn provides secure, passwordless authentication using your device's built-in biometric sensors \n (Face ID, Touch ID, fingerprint) or external security keys. Your biometric data never leaves your device.\n

\n );\n}",[],[248,264,273],"020ce9cc-c646-11f0-ba09-42dde27851f2","App.tsx","019aa2b6-3c0d-749c-b569-ab39d8dc347d",["D",1763666443214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\nimport { Auth } from \"./Auth.tsx\";\nimport { Dashboard } from \"./Dashboard.tsx\";\nimport { Admin } from \"./Admin.tsx\";\nimport { Setup } from \"./Setup.tsx\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface InitialData {\n user: User | null;\n pageType: string;\n timestamp: string;\n}\n\ndeclare global {\n interface Window {\n __INITIAL_DATA__: InitialData;\n }\n}\n\nexport function App() {\n const [user, setUser] = useState(null);\n const [pageType, setPageType] = useState('app');\n const [loading, setLoading] = useState(true);\n\n useEffect(() => {\n // Get initial data injected by the server\n if (window.__INITIAL_DATA__) {\n setUser(window.__INITIAL_DATA__.user);\n setPageType(window.__INITIAL_DATA__.pageType || 'app');\n }\n setLoading(false);\n }, []);\n\n const handleAuthSuccess = () => {\n window.location.href = '/';\n };\n\n if (loading) {\n return (\n

📱

\n );\n }\n\n // Route based on page type\n switch (pageType) {\n case 'login':\n return ;\n \n case 'register':\n return ;\n \n case 'dashboard':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n return ;\n \n case 'admin':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n if (!user.isAdmin) {\n window.location.href = '/';\n return null;\n }\n return ;\n \n case 'setup':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n return ;\n \n default:\n // Main app page\n return user ? : ;\n }\n}\n\nfunction UnauthenticatedView() {\n return (\n

\n 📱 iOS Share Sheet Backend\n

\n window.location.href = '/login'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Login\n \n window.location.href = '/register'}\n className=\"bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n Register\n \n

\n\n

\n Welcome to iOS Share Sheet Backend\n

📱➡️☁️

\n This backend receives and stores content shared from iOS devices\n using the Share Sheet functionality.\n

📤 Share Content

\n Use your iOS device's Share Sheet to send URLs, text, and images\n directly to this backend.\n

💾 Store & Access

\n All your shared content is securely stored and accessible\n through this web interface.\n

\n Please log in or register to start using the service.\n

\n window.location.href = '/login'}\n className=\"bg-blue-500 text-white px-6 py-3 rounded-lg hover:bg-blue-600 transition-colors font-medium\"\n >\n Login\n \n window.location.href = '/register'}\n className=\"bg-green-500 text-white px-6 py-3 rounded-lg hover:bg-green-600 transition-colors font-medium\"\n >\n Register\n \n

\n );\n}",[],[248,264,280],"020cdd1a-c646-11f0-ba09-42dde27851f2","Admin.tsx","019aa2b6-3c0c-76e9-b54e-b841b7f14b6c",["D",1763666443214],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n createdAt: string;\n lastLoginAt?: string;\n}\n\ninterface ContentItem {\n id: string;\n userId: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n createdAt: string;\n user?: User;\n}\n\ninterface AdminStats {\n totalUsers: number;\n adminUsers: number;\n totalContent: number;\n contentByType: {\n text: number;\n image: number;\n url: number;\n };\n recentUsers: User[];\n recentContent: ContentItem[];\n}\n\ninterface AdminProps {\n user: User;\n}\n\nexport function Admin({ user }: AdminProps) {\n const [stats, setStats] = useState(null);\n const [users, setUsers] = useState([]);\n const [content, setContent] = useState([]);\n const [loading, setLoading] = useState(true);\n const [activeTab, setActiveTab] = useState<'overview' | 'users' | 'content'>('overview');\n\n useEffect(() => {\n if (!user.isAdmin) {\n window.location.href = '/';\n return;\n }\n loadData();\n }, [user]);\n\n const loadData = async () => {\n try {\n setLoading(true);\n \n const [statsResponse, usersResponse, contentResponse] = await Promise.all([\n fetch('/api/admin/stats'),\n fetch('/api/admin/users'),\n fetch('/api/admin/content')\n ]);\n\n if (statsResponse.ok) {\n const statsData = await statsResponse.json();\n setStats(statsData.stats);\n }\n\n if (usersResponse.ok) {\n const usersData = await usersResponse.json();\n setUsers(usersData.users || []);\n }\n\n if (contentResponse.ok) {\n const contentData = await contentResponse.json();\n setContent(contentData.items || []);\n }\n } catch (error) {\n console.error('Failed to load admin data:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const makeUserAdmin = async (userId: string) => {\n if (!confirm('Are you sure you want to grant admin privileges to this user?')) return;\n\n try {\n const response = await fetch(`/api/admin/users/${userId}/admin`, {\n method: 'POST',\n });\n\n if (response.ok) {\n loadData(); // Refresh data\n alert('Admin privileges granted successfully');\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to grant admin privileges');\n }\n } catch (error) {\n console.error('Admin grant error:', error);\n alert('Failed to grant admin privileges');\n }\n };\n\n const deleteContent = async (contentId: string) => {\n if (!confirm('Are you sure you want to delete this content? This action cannot be undone.')) return;\n\n try {\n const response = await fetch(`/api/admin/content/${contentId}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setContent(content.filter(item => item.id !== contentId));\n if (stats) {\n setStats({\n ...stats,\n totalContent: stats.totalContent - 1,\n });\n }\n alert('Content deleted successfully');\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to delete content');\n }\n } catch (error) {\n console.error('Content deletion error:', error);\n alert('Failed to delete content');\n }\n };\n\n const formatDate = (dateString: string) => {\n return new Date(dateString).toLocaleString();\n };\n\n if (!user.isAdmin) {\n return (\n

🚫

Access Denied

You don't have admin privileges.

\n );\n }\n\n if (loading) {\n return (\n

🔧

Loading admin panel...

\n );\n }\n\n return (\n

\n {/* Header */}\n

🔧 Admin Panel

System administration and management

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 🏠 Dashboard\n \n {\n fetch('/api/auth/logout', { method: 'POST' })\n .then(() => window.location.href = '/');\n }}\n className=\"bg-red-500 text-white px-4 py-2 rounded hover:bg-red-600 transition-colors\"\n >\n Logout\n \n

\n\n

\n {/* Tab Navigation */}\n

\n setActiveTab('overview')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'overview'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📊 Overview\n \n setActiveTab('users')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'users'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 👥 Users ({users.length})\n \n setActiveTab('content')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'content'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📋 Content ({content.length})\n \n

\n\n {/* Overview Tab */}\n {activeTab === 'overview' && stats && (\n

\n {/* Stats Cards */}\n

👥

Total Users

{stats.totalUsers}

🔧

Admin Users

{stats.adminUsers}

📋

Total Content

{stats.totalContent}

📊

Content Types

\n 📝 {stats.contentByType.text} • 🖼️ {stats.contentByType.image} • 🔗 {stats.contentByType.url}\n

\n\n {/* Recent Activity */}\n

👥 Recent Users

\n {stats.recentUsers.map((user) => (\n

{user.name}

{user.email}

\n {user.isAdmin && (\n Admin\n )}\n

\n {formatDate(user.createdAt)}\n

\n ))}\n

\n\n

📋 Recent Content

\n {stats.recentContent.map((item) => (\n

\n \n {item.type}\n \n \n {formatDate(item.createdAt)}\n \n

\n {item.type === 'text' ? item.content : \n item.type === 'url' ? item.content :\n `Image: ${item.title || 'Untitled'}`}\n

\n ))}\n

\n )}\n\n {/* Users Tab */}\n {activeTab === 'users' && (\n

👥 User Management

\n \n \n \n \n \n \n \n \n \n \n \n {users.map((user) => (\n \n \n \n \n \n \n \n ))}\n \n

\n User\n	\n Role\n	\n Created\n	\n Last Login\n	\n Actions\n
\n \n {user.name} \n {user.email} \n \n	\n {user.isAdmin ? (\n \n Admin\n \n ) : (\n \n User\n \n )}\n	\n {formatDate(user.createdAt)}\n	\n {user.lastLoginAt ? formatDate(user.lastLoginAt) : 'Never'}\n	\n {!user.isAdmin && (\n makeUserAdmin(user.id)}\n className=\"text-yellow-600 hover:text-yellow-900\"\n >\n Make Admin\n \n )}\n

\n )}\n\n {/* Content Tab */}\n {activeTab === 'content' && (\n

📋 Content Management

\n {content.map((item) => (\n

\n \n {item.type}\n \n \n User: {item.user?.name || 'Unknown'}\n \n

\n \n {formatDate(item.createdAt)}\n \n deleteContent(item.id)}\n className=\"text-red-500 hover:text-red-700\"\n >\n 🗑️\n \n

\n {item.type === 'url' && (\n \n 🔗 {item.content}\n \n )}\n {item.type === 'text' && (\n

📝 {item.content}

\n )}\n {item.type === 'image' && (\n

🖼️ Image: {item.title || 'Untitled'}

\n {item.content.startsWith('data:image/') && (\n {item.title

\n )}\n

\n ))}\n

\n )}\n

\n );\n}",[],[248,264,287],"020d1942-c646-11f0-ba09-42dde27851f2",["D",1763666443214],[209,210,211,212,213],[248,264],"020d1ee2-c646-11f0-ba09-42dde27851f2",["D",1763666443214],[208,214,215],[248],"020cd8b0-c646-11f0-ba09-42dde27851f2","index.ts",["D",1763666443214],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { runMigrations } from \"./database/migrations.ts\";\nimport { auth } from \"./routes/auth.ts\";\nimport { content } from \"./routes/content.ts\";\nimport { admin } from \"./routes/admin.ts\";\nimport { staticRoutes } from \"./routes/static.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Run database migrations on startup\nawait runMigrations();\n\n// API routes\napp.route('/api/auth', auth);\napp.route('/api/content', content);\napp.route('/api/admin', admin);\n\n// Static file serving and pages\napp.route('', staticRoutes);\n\n// 404 handler\napp.notFound((c) => {\n return c.json({ error: 'Not found' }, 404);\n});\n\nexport default app.fetch; // This is the entry point for HTTP vals",[],[176,302],"020cd3a6-c646-11f0-ba09-42dde27851f2","static.ts","019aa2b6-3c0c-76e9-b54e-aade779126e8","019aa2b6-3c0c-76e9-b54e-af0e3ba4b648",["D",1763666443214],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { getUserById } from \"../database/queries.ts\";\n\nconst staticRoutes = new Hono();\nconst adminEmail = Deno.env.get(\"ADMIN_EMAIL\");\n\n// Serve frontend files\nstaticRoutes.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\nstaticRoutes.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Helper function to serve pages with initial data\nasync function servePage(c: any, pageType: string = \"app\") {\n try {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n\n // Check if user is authenticated\n let user = null;\n const sessionToken = getCookie(c, \"session\");\n if (sessionToken) {\n try {\n user = await getUserById(sessionToken);\n } catch (error) {\n // Invalid session, ignore\n }\n }\n\n // Inject initial data to avoid extra round-trips\n const initialData = {\n user: { ...user, isAdmin: adminEmail && user?.email === adminEmail },\n pageType,\n timestamp: new Date().toISOString(),\n };\n\n const dataScript = ``;\n\n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n } catch (error) {\n console.error(\"Static file serving error:\", error);\n return c.text(\"Error loading page\", 500);\n }\n}\n\n// Serve main index.html with initial data injection\nstaticRoutes.get(\"/\", async c => servePage(c, \"app\"));\n\n// Authentication pages\nstaticRoutes.get(\"/login\", async c => servePage(c, \"login\"));\nstaticRoutes.get(\"/register\", async c => servePage(c, \"register\"));\n\n// Dashboard and admin pages (require authentication)\nstaticRoutes.get(\"/dashboard\", async c => {\n const sessionToken = getCookie(c, \"session\");\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" } });\n }\n return servePage(c, \"dashboard\");\n});\n\nstaticRoutes.get(\"/admin\", async c => {\n const sessionToken = getCookie(c, \"session\");\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" } });\n }\n\n try {\n const user = await getUserById(sessionToken);\n console.log(\"ADMIN DEBUG\", Deno.env.get(\"ADMIN_EMAIL\"), user);\n if (!user || user.email !== Deno.env.get(\"ADMIN_EMAIL\")) {\n return new Response(null, { status: 302, headers: { Location: \"/\" } });\n }\n } catch (error) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" } });\n }\n\n return servePage(c, \"admin\");\n});\n\n// Setup page (require authentication)\nstaticRoutes.get(\"/setup\", async c => {\n const sessionToken = getCookie(c, \"session\");\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" } });\n }\n return servePage(c, \"setup\");\n});\n\nexport { staticRoutes };",[],[176,316,309],"routes","020cccbc-c646-11f0-ba09-42dde27851f2","content.ts","019aa2b6-3c0c-76e9-b54e-a5b958c90b99",["D",1763666443214],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { parseBody } from \"https://esm.sh/hono@3.11.7/dist/types/utils/body\";\nimport type { ContentRequest } from \"../../shared/types.ts\";\nimport {\n createContentItem,\n deleteContentItem,\n getContentItemsByUserId,\n getUserByBearerToken,\n updateBearerTokenLastUsed,\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\n\nconst content = new Hono();\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\n// Middleware to check bearer token for API access\nasync function requireBearerToken(c: any, next: any) {\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n return c.json({ error: \"Bearer token required\" }, 401);\n }\n\n const token = authHeader.substring(7);\n const user = await getUserByBearerToken(token);\n if (!user) {\n return c.json({ error: \"Invalid bearer token\" }, 401);\n }\n\n // Update token last used\n await updateBearerTokenLastUsed(token);\n\n c.set(\"user\", user);\n await next();\n}\n\n// Add content via shortcut (requires bearer token)\ncontent.post(\"/\", requireBearerToken, async (c) => {\n try {\n const user = c.get(\"user\");\n const body = await c.req.text();\n console.log(\"Content post body:\", body);\n const data: ContentRequest = JSON.parse(body || \"{}\");\n\n if (!data.type || !data.content) {\n return c.json({ error: \"Type and content are required\", body }, 400);\n }\n\n // if (![\"text\", \"image\", \"url\"].includes(data.type)) {\n // return c.json({ error: \"Invalid content type\", body }, 400);\n // }\n\n // // Validate content based on type\n // if (data.type === \"url\") {\n // try {\n // new URL(data.content);\n // } catch {\n // return c.json({ error: \"Invalid URL format\", body }, 400);\n // }\n // }\n\n // // For images, we expect base64 data or a URL\n // if (data.type === \"image\") {\n // if (!data.content.startsWith(\"data:image/\") && !data.content.startsWith(\"http\")) {\n // return c.json({ error: \"Invalid image format\", body }, 400);\n // }\n // }\n\n const contentItem = {\n id: generateId(),\n userId: user.id,\n type: data.type,\n content: data.content,\n title: data.title,\n metadata: data.metadata,\n createdAt: new Date().toISOString(),\n };\n\n await createContentItem(contentItem);\n\n return c.json({\n success: true,\n id: contentItem.id,\n message: \"Content saved successfully\",\n });\n } catch (error) {\n console.error(\"Content creation error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get user's content (requires web authentication)\ncontent.get(\"/\", requireAuth, async (c) => {\n try {\n const user = c.get(\"user\");\n const page = parseInt(c.req.query(\"page\") || \"1\");\n const limit = parseInt(c.req.query(\"limit\") || \"20\");\n const offset = (page - 1) * limit;\n\n const items = await getContentItemsByUserId(user.id, limit, offset);\n\n return c.json({\n items,\n page,\n limit,\n hasMore: items.length === limit,\n });\n } catch (error) {\n console.error(\"Content retrieval error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Delete content item\ncontent.delete(\"/:id\", requireAuth, async (c) => {\n try {\n const user = c.get(\"user\");\n const itemId = c.req.param(\"id\");\n\n const deleted = await deleteContentItem(itemId, user.id);\n if (!deleted) {\n return c.json({ error: \"Content item not found\" }, 404);\n }\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Content deletion error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Health check endpoint for shortcuts\ncontent.get(\"/health\", (c) => {\n return c.json({\n status: \"ok\",\n timestamp: new Date().toISOString(),\n message: \"iOS Share Sheet Backend is running\",\n });\n});\n\n// Debug endpoint to test database\ncontent.get(\"/debug\", async (c) => {\n try {\n const { sqlite } = await import(\"https://esm.town/v/stevekrouse/sqlite\");\n\n // Test basic query\n const result = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='table'`);\n\n return c.json({\n status: \"debug\",\n result: result,\n resultType: typeof result,\n isArray: Array.isArray(result),\n timestamp: new Date().toISOString(),\n });\n } catch (error) {\n console.error(\"Debug endpoint error:\", error);\n return c.json({\n error: error.message,\n stack: error.stack,\n timestamp: new Date().toISOString(),\n }, 500);\n }\n});\n\nexport { content };",[],[176,316,318],"020cc320-c646-11f0-ba09-42dde27851f2","auth.ts","019aa2b6-3c0c-76e9-b54e-a18d4a9a290e",["D",1763666443214],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n createUser, \n getUserByEmail, \n getUserById,\n updateUserLastLogin,\n saveWebAuthnCredential,\n getWebAuthnCredentialsByUserId,\n getWebAuthnCredentialByCredentialId,\n updateWebAuthnCredentialCounter,\n saveChallenge,\n getChallenge,\n deleteChallenge,\n cleanupOldChallenges,\n createBearerToken,\n getBearerTokensByUserId,\n deleteBearerToken\n} from \"../database/queries.ts\";\nimport type { \n RegisterStartRequest, \n RegisterFinishRequest, \n LoginStartRequest, \n LoginFinishRequest,\n TokenCreateRequest\n} from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Helper functions for WebAuthn\nfunction generateChallenge(): string {\n const array = new Uint8Array(32);\n crypto.getRandomValues(array);\n return btoa(String.fromCharCode(...array)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = '';\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nfunction base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64.replace(/-/g, '+').replace(/_/g, '/'));\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes.buffer;\n}\n\n// Simplified WebAuthn verification (in production, use a proper library)\nasync function verifyRegistration(credential: any, challenge: string): Promise<{ verified: boolean; credentialId: string; publicKey: string }> {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Verify origin (in production, check against your domain)\n if (clientDataJSON.type !== 'webauthn.create') {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Extract credential ID and public key (simplified)\n const credentialId = credential.id;\n const publicKey = credential.response.attestationObject; // Simplified - in production, parse CBOR\n \n return { verified: true, credentialId, publicKey };\n } catch (error) {\n console.error('Registration verification error:', error);\n return { verified: false, credentialId: '', publicKey: '' };\n }\n}\n\nasync function verifyAuthentication(credential: any, challenge: string, storedCredential: any): Promise {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return false;\n }\n \n // Verify origin and type\n if (clientDataJSON.type !== 'webauthn.get') {\n return false;\n }\n \n // In production, verify the signature using the stored public key\n // For this demo, we'll do basic validation\n return credential.id === storedCredential.credentialId;\n } catch (error) {\n console.error('Authentication verification error:', error);\n return false;\n }\n}\n\n// Middleware to check authentication\nasync function requireAuth(c: any, next: any) {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return c.json({ error: 'Authentication required' }, 401);\n }\n \n try {\n const userId = sessionToken; // Simplified - in production, verify JWT\n const user = await getUserById(userId);\n if (!user) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n \n c.set('user', user);\n await next();\n } catch (error) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n}\n\n// Clean up old challenges periodically\nsetInterval(cleanupOldChallenges, 5 * 60 * 1000); // Every 5 minutes\n\n// Registration endpoints\nauth.post('/register-start', async (c) => {\n try {\n const { email, name }: RegisterStartRequest = await c.req.json();\n \n if (!email || !name) {\n return c.json({ error: 'Email and name are required' }, 400);\n }\n \n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({ error: 'User already exists' }, 400);\n }\n \n const challenge = generateChallenge();\n const userId = generateId();\n \n // Store challenge and user data\n await saveChallenge(generateId(), email, challenge, 'registration', { userId, name });\n \n const response = {\n challenge,\n user: {\n id: userId,\n name,\n displayName: name,\n },\n rp: {\n name: 'iOS Share Sheet Backend',\n id: new URL(c.req.url).hostname,\n },\n pubKeyCredParams: [\n { type: 'public-key', alg: -7 }, // ES256\n { type: 'public-key', alg: -257 }, // RS256\n ],\n authenticatorSelection: {\n userVerification: 'preferred',\n },\n timeout: 60000,\n attestation: 'none',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Registration start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/register-finish', async (c) => {\n try {\n const { email, credential }: RegisterFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'registration');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Verify registration\n const verification = await verifyRegistration(credential, challengeData.challenge);\n if (!verification.verified) {\n return c.json({ error: 'Registration verification failed' }, 400);\n }\n \n // Create user\n const { userId, name } = challengeData.userData;\n const adminEmail = Deno.env.get('ADMIN_EMAIL');\n const isAdmin = email === adminEmail;\n \n await createUser({\n id: userId,\n email,\n name,\n isAdmin,\n createdAt: new Date().toISOString(),\n });\n \n // Save WebAuthn credential\n await saveWebAuthnCredential({\n id: generateId(),\n userId,\n credentialId: verification.credentialId,\n publicKey: verification.publicKey,\n counter: 0,\n createdAt: new Date().toISOString(),\n });\n \n // Clean up challenge\n await deleteChallenge(email, 'registration');\n \n // Set session cookie\n setCookie(c, 'session', userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Registration finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Login endpoints\nauth.post('/login-start', async (c) => {\n try {\n const { email }: LoginStartRequest = await c.req.json();\n \n if (!email) {\n return c.json({ error: 'Email is required' }, 400);\n }\n \n // Check if user exists\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({ error: 'User not found. Please register first.' }, 404);\n }\n \n // Get user's credentials\n const credentials = await getWebAuthnCredentialsByUserId(user.id);\n if (credentials.length === 0) {\n return c.json({ error: 'No WebAuthn credentials found for this user. Please register again.' }, 400);\n }\n \n const challenge = generateChallenge();\n \n // Store challenge\n await saveChallenge(generateId(), email, challenge, 'authentication');\n \n const response = {\n challenge,\n allowCredentials: credentials.map(cred => ({\n id: cred.credentialId,\n type: 'public-key',\n })),\n timeout: 60000,\n userVerification: 'preferred',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Login start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/login-finish', async (c) => {\n try {\n const { email, credential }: LoginFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'authentication');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Get stored credential\n const storedCredential = await getWebAuthnCredentialByCredentialId(credential.id);\n if (!storedCredential) {\n return c.json({ error: 'Credential not found' }, 400);\n }\n \n // Verify authentication\n const verified = await verifyAuthentication(credential, challengeData.challenge, storedCredential);\n if (!verified) {\n return c.json({ error: 'Authentication verification failed' }, 400);\n }\n \n // Update credential counter (simplified)\n await updateWebAuthnCredentialCounter(credential.id, storedCredential.counter + 1);\n \n // Update last login\n await updateUserLastLogin(storedCredential.userId);\n \n // Clean up challenge\n await deleteChallenge(email, 'authentication');\n \n // Set session cookie\n setCookie(c, 'session', storedCredential.userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(storedCredential.userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Login finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Logout endpoint\nauth.post('/logout', (c) => {\n deleteCookie(c, 'session');\n return c.json({ success: true });\n});\n\n// Get current user\nauth.get('/me', requireAuth, async (c) => {\n const user = c.get('user');\n return c.json({ user });\n});\n\n// Bearer token management\nauth.get('/tokens', requireAuth, async (c) => {\n const user = c.get('user');\n const tokens = await getBearerTokensByUserId(user.id);\n \n // Don't return the actual token values for security\n const safeTokens = tokens.map(token => ({\n id: token.id,\n name: token.name,\n lastUsedAt: token.lastUsedAt,\n createdAt: token.createdAt,\n }));\n \n return c.json({ tokens: safeTokens });\n});\n\nauth.post('/tokens', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const { name }: TokenCreateRequest = await c.req.json();\n \n if (!name) {\n return c.json({ error: 'Token name is required' }, 400);\n }\n \n // Generate secure token\n const tokenBytes = new Uint8Array(32);\n crypto.getRandomValues(tokenBytes);\n const token = btoa(String.fromCharCode(...tokenBytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n \n const bearerToken = {\n id: generateId(),\n userId: user.id,\n token,\n name,\n createdAt: new Date().toISOString(),\n };\n \n await createBearerToken(bearerToken);\n \n return c.json({\n id: bearerToken.id,\n name: bearerToken.name,\n token: bearerToken.token,\n createdAt: bearerToken.createdAt,\n });\n } catch (error) {\n console.error('Token creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Alias for README compatibility\nauth.post('/token', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const { name }: TokenCreateRequest = await c.req.json();\n \n if (!name) {\n return c.json({ error: 'Token name is required' }, 400);\n }\n \n // Generate secure token\n const tokenBytes = new Uint8Array(32);\n crypto.getRandomValues(tokenBytes);\n const token = btoa(String.fromCharCode(...tokenBytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n \n const bearerToken = {\n id: generateId(),\n userId: user.id,\n token,\n name,\n createdAt: new Date().toISOString(),\n };\n \n await createBearerToken(bearerToken);\n \n return c.json({\n id: bearerToken.id,\n name: bearerToken.name,\n token: bearerToken.token,\n createdAt: bearerToken.createdAt,\n });\n } catch (error) {\n console.error('Token creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.delete('/tokens/:id', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const tokenId = c.req.param('id');\n \n await deleteBearerToken(tokenId, user.id);\n return c.json({ success: true });\n } catch (error) {\n console.error('Token deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nexport { auth, requireAuth };",[],[176,316,325],"020cbf2e-c646-11f0-ba09-42dde27851f2","admin.ts","019aa2b6-3c0c-76e9-b54e-9ede79c7ac5f",["D",1763666443214],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport {\n deleteContentItem,\n getAllContentItems,\n getAllUsers,\n getContentItemById,\n makeUserAdmin,\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\n\nconst admin = new Hono();\nconst adminEmail = Deno.env.get(\"ADMIN_EMAIL\");\n\n// Middleware to check admin privileges\nasync function requireAdmin(c: any, next: any) {\n const user = c.get(\"user\");\n if (!user || (user.email !== adminEmail)) {\n return c.json({ error: \"Admin privileges required\" }, 403);\n }\n await next();\n}\n\n// Get all users (admin only)\nadmin.get(\"/users\", requireAuth, requireAdmin, async (c) => {\n try {\n const users = await getAllUsers();\n return c.json({ users });\n } catch (error) {\n console.error(\"Admin users retrieval error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Grant admin privileges to a user\nadmin.post(\"/users/:id/admin\", requireAuth, requireAdmin, async (c) => {\n try {\n const userId = c.req.param(\"id\");\n await makeUserAdmin(userId);\n return c.json({ success: true, message: \"Admin privileges granted\" });\n } catch (error) {\n console.error(\"Admin grant error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get all content items (admin only)\nadmin.get(\"/content\", requireAuth, requireAdmin, async (c) => {\n try {\n const page = parseInt(c.req.query(\"page\") || \"1\");\n const limit = parseInt(c.req.query(\"limit\") || \"50\");\n const offset = (page - 1) * limit;\n\n const items = await getAllContentItems(limit, offset);\n\n return c.json({\n items,\n page,\n limit,\n hasMore: items.length === limit,\n });\n } catch (error) {\n console.error(\"Admin content retrieval error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Delete any content item (admin only)\nadmin.delete(\"/content/:id\", requireAuth, requireAdmin, async (c) => {\n try {\n const itemId = c.req.param(\"id\");\n\n // Get the content item to find the user ID\n const item = await getContentItemById(itemId);\n if (!item) {\n return c.json({ error: \"Content item not found\" }, 404);\n }\n\n const deleted = await deleteContentItem(itemId, item.userId);\n if (!deleted) {\n return c.json({ error: \"Failed to delete content item\" }, 500);\n }\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Admin content deletion error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\n// Get system statistics\nadmin.get(\"/stats\", requireAuth, requireAdmin, async (c) => {\n try {\n const users = await getAllUsers();\n const allContent = await getAllContentItems(1000); // Get more for stats\n\n const stats = {\n totalUsers: users.length,\n adminUsers: users.filter(u => u.isAdmin).length,\n totalContent: allContent.length,\n contentByType: {\n text: allContent.filter(c => c.type === \"text\").length,\n image: allContent.filter(c => c.type === \"image\").length,\n url: allContent.filter(c => c.type === \"url\").length,\n },\n recentUsers: users.slice(0, 5),\n recentContent: allContent.slice(0, 10),\n };\n\n return c.json({ stats });\n } catch (error) {\n console.error(\"Admin stats error:\", error);\n return c.json({ error: \"Internal server error\" }, 500);\n }\n});\n\nexport { admin };",[],[176,316,332],"020cd77a-c646-11f0-ba09-42dde27851f2",["D",1763666443214],[202,203,204,205],[176,316],["D",1763666443214],[],[176,87,74],["D",1763666443214],[],[176,87,85],["D",1763666443214],[199,200],[176,87],"020cdbd0-c646-11f0-ba09-42dde27851f2",["D",1763666443214],[198,201,206],[176],["D",1763666443214],{"_11":12,"_137":80},{"_11":12,"_133":-5,"_79":80,"_31":78,"_134":135,"_136":30},{"_39":40,"_13":16,"_33":36,"_123":90,"_124":69,"_125":70,"_126":94,"_127":128,"_129":130,"_131":14,"_132":12},"ctx",{"_52":-5,"_158":392,"_393":394,"_395":396,"_397":30,"_398":30,"_399":30,"_400":24,"_401":-5,"_402":-7,"_403":-7,"_404":26,"_405":30,"_406":30,"_407":-5,"_408":30,"_409":30,"_410":30,"_411":-5},"ENV",{"_363":364,"_365":366,"_367":16,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · database