[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_16":17,"_20":21,"_83":66,"_84":85,"_64":-7,"_86":-5,"_13":87,"_88":89,"_11":90,"_91":92,"_93":94,"_95":-5,"_96":-5,"_97":-5,"_98":63,"_99":100,"_101":26,"_102":-5,"_103":-5,"_104":105},"routes/_app.x.$handle.$name.search.$(branch)",{"_11":12,"_13":14,"_15":-5,"_16":17},"files",[],"project",{"_18":19,"_20":21,"_22":23,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":-5,"_31":-5,"_32":33,"_34":35,"_36":26,"_37":-5,"_38":-5,"_39":40,"_41":42,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":48,"_49":48,"_50":51,"_52":51,"_53":51,"_54":48,"_55":48,"_56":57,"_58":59,"_60":61,"_62":63},"query","handle","maxm","id","efca5610-252c-11f0-8a67-569c3dd06744","name","userspaceAuth","createdAt",["D",1745953538026],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","userId","418c1e39-eb48-4f2f-8c97-122ece94631c","pinnedFileId","efcd5cac-252c-11f0-8a67-569c3dd06744","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","c1e7642a-74cc-4d69-8652-20abbdeaa94e","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_16":17,"_82":78},"org",{"_16":17,"_76":-5,"_77":78,"_32":33,"_79":80,"_81":63},"branch",{"_64":65,"_20":66,"_18":67,"_68":19,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":21,"_75":17},"isOwned",false,"version",129,"main","efcab29a-252c-11f0-8a67-569c3dd06744","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJnTEtkSHlOMWxWZm1GRHdKYUVTNklYM3FpdiJ9","tier","pro","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_18":19,"_20":21,"_22":150,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":-5,"_31":-5,"_32":33,"_34":35,"_36":26,"_37":-5,"_38":-5,"_39":40,"_41":42,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":48,"_49":48,"_50":51,"_52":51,"_53":51,"_54":48,"_55":48,"_56":151,"_58":152,"_60":153,"_62":63},"tree",[141,142],[141,142],"counts",{"_131":40,"_132":127,"_133":127,"_134":135,"_136":137},"contents",[106,107],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_18":124,"_20":125,"_110":126,"_111":-5,"_112":67,"_113":127,"_114":26,"_22":128,"_64":40,"_117":95,"_119":129,"_121":63,"_122":-5,"_84":130},{"_18":108,"_20":109,"_110":35,"_111":-5,"_112":67,"_113":65,"_114":26,"_22":115,"_64":116,"_117":118,"_119":120,"_121":63,"_122":-5,"_84":123},"f25ff218-252c-11f0-8a67-569c3dd06744","main.tsx","fileId","parentId","branchId","branchVersion","latest",["D",1712512323414],128,"fileType","http","content","/** @jsxImportSource https://esm.sh/preact */\nimport { blob } from \"https://esm.town/v/std/blob\";\n// import * as opaque from \"npm:@cloudflare/opaque-ts\";\nimport { Hono } from \"npm:hono@3\";\nimport { render } from \"npm:preact-render-to-string\";\n\nconst resp = (content, status) =>\n new Response(render(content), {\n status,\n headers: {\n \"Content-Type\": \"text/html\",\n },\n });\n\nconst trimSuffix = (s: string, suffix: string): string => {\n if (!s.endsWith(suffix)) {\n return s;\n }\n return s.slice(0, s.length - suffix.length);\n};\n\nconst getPassword = async (): Promise => {\n try {\n let resp = await blob.get(PASSWORD_BLOB_KEY);\n return await resp.text();\n } catch (e) {\n return undefined;\n }\n};\n\nconst KNOWN_HOSTNAME = \".web.val.run\";\nconst PASSWORD_BLOB_KEY = \"password\"; // hah\n\nconst app = new Hono();\napp.get(\"/\", async (c) => {\n const password = await getPassword();\n const u = new URL(c.req.url);\n if (!u.host.endsWith(KNOWN_HOSTNAME)) {\n return resp((

Hostname does not end with {KNOWN_HOSTNAME}, cannot continue

), 400);\n }\n const userAndValName = trimSuffix(u.host, KNOWN_HOSTNAME);\n const [username, valName] = userAndValName.split(\"-\");\n if (username === \"\") {\n return resp((

Username not found

), 400);\n }\n if (valName !== \"userspaceauth\") {\n return resp((

Val must be called \"userspaceAuth\"

), 400);\n }\n\n let content = password\n ?

Your password has been set up and this val is ready to authenticate requests for you

\n : (\n \n );\n\n return resp(\n (<>\n

Username: {username}

Val Name: {valName}

{content}

\n ),\n 200,\n );\n});\n\napp.post(\"/\", async (c) => {\n const fd = await c.req.formData();\n const password = fd.get(\"password\");\n // TODO: more validation\n if (typeof password !== \"string\" || password.length < 8) {\n return resp((

Invalid password!

), 400);\n }\n await blob.set(PASSWORD_BLOB_KEY, \"password\");\n return c.redirect(\"/\");\n});\napp.get(\"/reset\", async (c) => {\n // TODO: this can be abused\n await blob.delete(PASSWORD_BLOB_KEY);\n});\napp.post(\"/validate\", async (c) => {\n const realPassword = await getPassword();\n const fd = await c.req.formData();\n const password = fd.get(\"password\");\n const match = password === realPassword;\n return c.json(match, match ? 200 : 401);\n});\napp.get(\"/validate/:password\", async (c) => {\n const realPassword = await getPassword();\n const password = c.req.param(\"password\");\n const match = password === realPassword;\n return c.json(match, match ? 200 : 401);\n});\nexport default app.fetch;\n\n// console.log(await opaque.getOpaqueConfig(opaque.OpaqueID.OPAQUE_P521).ake.generateAuthKeyPair());","deleted","label",[109],"efcd61ca-252c-11f0-8a67-569c3dd06744","README.md","efcd6242-252c-11f0-8a67-569c3dd06744",1,["D",1712507041560],"null\n\nMigrated from folder: userspaceauth/userspaceAuth",[125],"pulls","branches","forks","envVars",{"_138":40,"_140":40},"connections",{"_138":40,"_139":40},"count","unfilledCount","emptyCount",{"_18":124,"_20":125,"_110":126,"_111":-5,"_112":67,"_113":127,"_114":26,"_22":147,"_64":40,"_117":95,"_119":129,"_121":63,"_122":-5,"_144":148,"_84":149},{"_18":108,"_20":109,"_110":35,"_111":-5,"_112":67,"_113":65,"_114":26,"_22":143,"_64":116,"_117":118,"_119":120,"_121":63,"_122":-5,"_144":145,"_84":146},["D",1712512323414],"children",[],[109],["D",1712507041560],[],[125],["D",1745953538026],{"_16":17,"_82":78},{"_16":17,"_76":-5,"_77":78,"_32":33,"_79":80,"_81":63},{"_64":65,"_20":66,"_18":67,"_68":19,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":21,"_75":17},"ctx",{"_56":-5,"_103":187,"_188":189,"_190":191,"_192":63,"_193":63,"_194":63,"_195":26,"_196":-5,"_197":-7,"_198":-7,"_199":40,"_200":63,"_201":63,"_202":-5,"_203":63,"_204":63,"_205":63,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":66,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e8c4b7030cb7600e4eb0736b15f422c8b8bd130f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search