Fiberplane OpenTelemetry Trace Collector on ValTown

\n Visit /fp to view the Fiberplane API explorer.\n

\n\n\n\n`.trim());\n});\n\nexport default app;",[],[111,96],"aaf02f38-9ea3-11f0-b860-0224a6c84d84",["D",1759308623239],"import { timingSafeEqual } from \"https://deno.land/std/crypto/mod.ts\";\n\nimport { HTTPException } from \"../deps/hono.ts\";\nimport type { AppMiddleware } from \"./types.ts\";\n\n/**\n * Middleware that authenticates requests with a Bearer token.\n * Assumes that `AUTH_TOKEN` is set in the environment.\n *\n * @TODO - Improve token comparison.\n * Simple string comparison is not very secure against timing attacks.\n */\nexport const authenticate: AppMiddleware = async (ctx, next) => {\n const authHeader = ctx.req.header(\"Authorization\");\n\n if (!authHeader?.startsWith(\"Bearer \")) {\n throw new HTTPException(401, {\n message: \"Missing or invalid bearer token\",\n });\n }\n\n const token = authHeader.slice(7);\n\n const isValid = timingSafeTokenComparison(token, ctx.env.AUTH_TOKEN);\n\n if (!isValid) {\n throw new HTTPException(401, {\n message: \"Invalid token\",\n });\n }\n\n await next();\n};\n\n/**\n * Token comparison that mitigates against timing based attacks\n */\nfunction timingSafeTokenComparison(userToken: string, appToken: string) {\n const userTokenByes = new TextEncoder().encode(userToken);\n const appTokenBytes = new TextEncoder().encode(appToken);\n \n // Check if lengths match (this is considered acceptable to reveal)\n if (userTokenByes.length !== appTokenBytes.length) {\n return false;\n }\n \n // Perform constant-time comparison\n const isValid = timingSafeEqual(userTokenByes, appTokenBytes);\n\n return isValid;\n}",[],[111,85],["D",1759308623239],[341,342,343,344],[111],["D",1759308623239],{"_11":12,"_257":91},{"_11":12,"_253":-5,"_90":91,"_25":89,"_254":255,"_256":24},{"_33":34,"_13":16,"_27":30,"_241":207,"_242":243,"_244":245,"_246":212,"_247":248,"_249":250,"_251":14,"_252":12},"ctx",{"_45":-5,"_279":506,"_507":508,"_509":510,"_511":24,"_512":24,"_513":24,"_514":218,"_515":-5,"_516":-7,"_517":-7,"_518":20,"_519":24,"_520":24,"_521":-5,"_522":24,"_523":24,"_524":24,"_525":-5},"ENV",{"_477":478,"_479":480,"_481":16,"_482":483,"_484":485,"_486":487,"_488":489,"_490":491,"_492":493,"_494":495,"_496":497,"_498":499,"_500":501,"_502":503,"_504":505},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e8c4b7030cb7600e4eb0736b15f422c8b8bd130f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History