Fiberplane OpenTelemetry Trace Collector on ValTown

\n Visit /fp to view the Fiberplane API explorer.\n

\n\n\n\n`.trim());\n});\n\nexport default app;",[],[234,257],"aaf02f38-9ea3-11f0-b860-0224a6c84d84","auth.ts","01999ef7-2dc9-7486-9fad-33e8a2254f8b",["D",1759308623239],"import { timingSafeEqual } from \"https://deno.land/std/crypto/mod.ts\";\n\nimport { HTTPException } from \"../deps/hono.ts\";\nimport type { AppMiddleware } from \"./types.ts\";\n\n/**\n * Middleware that authenticates requests with a Bearer token.\n * Assumes that `AUTH_TOKEN` is set in the environment.\n *\n * @TODO - Improve token comparison.\n * Simple string comparison is not very secure against timing attacks.\n */\nexport const authenticate: AppMiddleware = async (ctx, next) => {\n const authHeader = ctx.req.header(\"Authorization\");\n\n if (!authHeader?.startsWith(\"Bearer \")) {\n throw new HTTPException(401, {\n message: \"Missing or invalid bearer token\",\n });\n }\n\n const token = authHeader.slice(7);\n\n const isValid = timingSafeTokenComparison(token, ctx.env.AUTH_TOKEN);\n\n if (!isValid) {\n throw new HTTPException(401, {\n message: \"Invalid token\",\n });\n }\n\n await next();\n};\n\n/**\n * Token comparison that mitigates against timing based attacks\n */\nfunction timingSafeTokenComparison(userToken: string, appToken: string) {\n const userTokenByes = new TextEncoder().encode(userToken);\n const appTokenBytes = new TextEncoder().encode(appToken);\n \n // Check if lengths match (this is considered acceptable to reveal)\n if (userTokenByes.length !== appTokenBytes.length) {\n return false;\n }\n \n // Perform constant-time comparison\n const isValid = timingSafeEqual(userTokenByes, appTokenBytes);\n\n return isValid;\n}",[],[234,264],"aae887b0-9ea3-11f0-b860-0224a6c84d84",["D",1759308623239],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","88b4a7aa-6e0f-4464-8bd9-95edf719fc05","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","4698f924-9ab8-458e-a7fa-623444c4ee18","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_312":308},"org",{"_11":12,"_306":-5,"_307":308,"_276":277,"_309":310,"_311":51},"branch",{"_17":32,"_13":16,"_36":69,"_42":270,"_45":37,"_46":44,"_303":53,"_304":43,"_305":57,"_58":14,"_54":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ0YUU3aFJyQXIwZU9GSGRhVUNGSjVqMXUzZyJ9","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":270,"_13":14,"_38":427,"_49":-5,"_272":51,"_52":53,"_273":53,"_274":-5,"_275":-5,"_276":277,"_278":122,"_279":72,"_280":72,"_281":-5,"_282":34,"_56":283,"_284":-5,"_285":-5,"_286":-5,"_287":-5,"_288":289,"_290":289,"_291":292,"_293":292,"_294":292,"_295":289,"_296":289,"_297":428,"_299":429,"_301":430,"_50":51},[355,360,367,371,375,376,377,378],"files",[355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378],"counts",{"_346":34,"_347":32,"_348":34,"_35":349,"_350":351},[340,341,342],{"_36":93,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":94,"_17":34,"_74":95,"_76":-5,"_78":51,"_79":-5,"_18":339},"upstreamProject",{"_36":43,"_13":14,"_274":336,"_275":-5,"_52":53,"_297":337},"upstreamBranch",{"_36":37,"_38":334,"_40":335,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":55,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1740805324568],["D",1740836480150],"Receive traces from @fiberplane/hono-otel, and store in sqlite",{"_11":55,"_312":338},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ0OXJLaXVodjZKMUU4QnFhODNCVkJ4aVRQSyJ9",[19],{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":32,"_71":72,"_38":90,"_17":34,"_74":75,"_76":91,"_78":51,"_79":-5,"_18":345},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":32,"_71":72,"_38":84,"_17":34,"_74":75,"_76":85,"_78":51,"_79":-5,"_18":344},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":32,"_71":72,"_38":73,"_17":34,"_74":75,"_76":77,"_78":51,"_79":-5,"_18":343},[19,63],[19,82],[19,88],"pulls","branches","forks",{"_352":32,"_354":34},"connections",{"_352":34,"_353":34},"count","unfilledCount","emptyCount",{"_36":233,"_13":234,"_64":235,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":236,"_17":34,"_74":95,"_76":-5,"_78":51,"_79":-5,"_110":425,"_18":426},{"_36":263,"_13":264,"_64":265,"_66":235,"_68":69,"_70":32,"_71":72,"_38":266,"_17":34,"_74":75,"_76":267,"_78":51,"_79":-5,"_110":423,"_18":424},{"_36":256,"_13":257,"_64":258,"_66":235,"_68":69,"_70":32,"_71":72,"_38":259,"_17":34,"_74":75,"_76":260,"_78":51,"_79":-5,"_110":421,"_18":422},{"_36":249,"_13":250,"_64":251,"_66":235,"_68":69,"_70":32,"_71":72,"_38":252,"_17":34,"_74":75,"_76":253,"_78":51,"_79":-5,"_110":419,"_18":420},{"_36":243,"_13":145,"_64":244,"_66":235,"_68":69,"_70":32,"_71":72,"_38":245,"_17":34,"_74":75,"_76":246,"_78":51,"_79":-5,"_110":417,"_18":418},{"_36":180,"_13":181,"_64":182,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":183,"_17":34,"_74":95,"_76":-5,"_78":51,"_79":-5,"_110":415,"_18":416},{"_36":226,"_13":227,"_64":228,"_66":182,"_68":69,"_70":32,"_71":72,"_38":229,"_17":34,"_74":75,"_76":230,"_78":51,"_79":-5,"_110":413,"_18":414},{"_36":219,"_13":220,"_64":221,"_66":182,"_68":69,"_70":32,"_71":72,"_38":222,"_17":34,"_74":75,"_76":223,"_78":51,"_79":-5,"_110":411,"_18":412},{"_36":212,"_13":213,"_64":214,"_66":182,"_68":69,"_70":32,"_71":72,"_38":215,"_17":34,"_74":75,"_76":216,"_78":51,"_79":-5,"_110":409,"_18":410},{"_36":205,"_13":206,"_64":207,"_66":182,"_68":69,"_70":32,"_71":72,"_38":208,"_17":34,"_74":75,"_76":209,"_78":51,"_79":-5,"_110":407,"_18":408},{"_36":198,"_13":199,"_64":200,"_66":182,"_68":69,"_70":32,"_71":72,"_38":201,"_17":34,"_74":75,"_76":202,"_78":51,"_79":-5,"_110":405,"_18":406},{"_36":192,"_13":145,"_64":193,"_66":182,"_68":69,"_70":32,"_71":72,"_38":194,"_17":34,"_74":75,"_76":195,"_78":51,"_79":-5,"_110":403,"_18":404},{"_36":93,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":165,"_17":34,"_74":95,"_76":-5,"_78":51,"_79":-5,"_110":401,"_18":402},{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":32,"_71":72,"_38":177,"_17":34,"_74":75,"_76":91,"_78":51,"_79":-5,"_110":399,"_18":400},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":32,"_71":72,"_38":174,"_17":34,"_74":75,"_76":85,"_78":51,"_79":-5,"_110":397,"_18":398},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":32,"_71":72,"_38":171,"_17":34,"_74":75,"_76":77,"_78":51,"_79":-5,"_110":395,"_18":396},{"_36":135,"_13":136,"_64":137,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":138,"_17":34,"_74":95,"_76":-5,"_78":51,"_79":-5,"_110":393,"_18":394},{"_36":158,"_13":159,"_64":160,"_66":137,"_68":69,"_70":32,"_71":72,"_38":161,"_17":34,"_74":75,"_76":162,"_78":51,"_79":-5,"_110":391,"_18":392},{"_36":151,"_13":152,"_64":153,"_66":137,"_68":69,"_70":32,"_71":72,"_38":154,"_17":34,"_74":75,"_76":155,"_78":51,"_79":-5,"_110":389,"_18":390},{"_36":144,"_13":145,"_64":146,"_66":137,"_68":69,"_70":32,"_71":72,"_38":147,"_17":34,"_74":75,"_76":148,"_78":51,"_79":-5,"_110":387,"_18":388},{"_36":128,"_13":129,"_64":130,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":131,"_17":34,"_74":24,"_76":132,"_78":51,"_79":-5,"_110":385,"_18":386},{"_36":120,"_13":121,"_64":122,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":123,"_17":34,"_74":124,"_76":125,"_78":51,"_79":-5,"_110":383,"_18":384},{"_36":113,"_13":114,"_64":115,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":116,"_17":34,"_74":75,"_76":117,"_78":51,"_79":-5,"_110":381,"_18":382},{"_36":105,"_13":106,"_64":107,"_66":-5,"_68":69,"_70":32,"_71":72,"_38":108,"_17":34,"_74":75,"_76":109,"_78":51,"_79":-5,"_110":379,"_18":380},[],[106],[],[114],[],[121],[],[129],[],[136,145],[],[136,152],[],[136,159],[372,373,374],[136],[],[19,63],[],[19,82],[],[19,88],[368,369,370],[19],[],[181,145],[],[181,199],[],[181,206],[],[181,213],[],[181,220],[],[181,227],[361,362,363,364,365,366],[181],[],[234,145],[],[234,250],[],[234,257],[],[234,264],[356,357,358,359],[234],["D",1759308623239],{"_11":12,"_312":308},{"_11":12,"_306":-5,"_307":308,"_276":277,"_309":310,"_311":51},{"_17":32,"_13":16,"_36":69,"_42":270,"_45":37,"_46":44,"_303":53,"_304":43,"_305":57,"_58":14,"_54":12},"ctx",{"_297":-5,"_331":464,"_465":466,"_467":468,"_469":51,"_470":51,"_471":51,"_472":72,"_473":-5,"_474":-7,"_475":-7,"_476":34,"_477":51,"_478":51,"_479":-5,"_480":51,"_481":51,"_482":51,"_483":-5},"ENV",{"_435":436,"_437":438,"_439":16,"_440":441,"_442":443,"_444":445,"_446":447,"_448":449,"_450":451,"_452":453,"_454":455,"_456":457,"_458":459,"_460":461,"_462":463},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","a3e067d4463eea85f6334f8e583e8516ae58c4f6","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]