Fiberplane OpenTelemetry Trace Collector on ValTown

\n Visit /fp to view the Fiberplane API explorer.\n

\n\n\n\n`.trim());\n});\n\nexport default app;",[],[180,337],"aaf02f38-9ea3-11f0-b860-0224a6c84d84","auth.ts","01999ef7-2dc9-7486-9fad-33e8a2254f8b",["D",1759308623239],"import { timingSafeEqual } from \"https://deno.land/std/crypto/mod.ts\";\n\nimport { HTTPException } from \"../deps/hono.ts\";\nimport type { AppMiddleware } from \"./types.ts\";\n\n/**\n * Middleware that authenticates requests with a Bearer token.\n * Assumes that `AUTH_TOKEN` is set in the environment.\n *\n * @TODO - Improve token comparison.\n * Simple string comparison is not very secure against timing attacks.\n */\nexport const authenticate: AppMiddleware = async (ctx, next) => {\n const authHeader = ctx.req.header(\"Authorization\");\n\n if (!authHeader?.startsWith(\"Bearer \")) {\n throw new HTTPException(401, {\n message: \"Missing or invalid bearer token\",\n });\n }\n\n const token = authHeader.slice(7);\n\n const isValid = timingSafeTokenComparison(token, ctx.env.AUTH_TOKEN);\n\n if (!isValid) {\n throw new HTTPException(401, {\n message: \"Invalid token\",\n });\n }\n\n await next();\n};\n\n/**\n * Token comparison that mitigates against timing based attacks\n */\nfunction timingSafeTokenComparison(userToken: string, appToken: string) {\n const userTokenByes = new TextEncoder().encode(userToken);\n const appTokenBytes = new TextEncoder().encode(appToken);\n \n // Check if lengths match (this is considered acceptable to reveal)\n if (userTokenByes.length !== appTokenBytes.length) {\n return false;\n }\n \n // Perform constant-time comparison\n const isValid = timingSafeEqual(userTokenByes, appTokenBytes);\n\n return isValid;\n}",[],[180,344],["D",1759308623239],[195,196,197,198],[180],["D",1759308623239],{"_16":17,"_86":82},{"_16":17,"_80":-5,"_81":82,"_32":33,"_83":84,"_85":26},{"_64":65,"_20":66,"_18":67,"_68":19,"_69":70,"_71":72,"_73":28,"_74":75,"_76":77,"_78":21,"_79":17},"ctx",{"_57":-5,"_109":390,"_391":392,"_393":394,"_395":26,"_396":26,"_397":26,"_398":37,"_399":-5,"_400":-7,"_401":-7,"_402":41,"_403":26,"_404":26,"_405":-5,"_406":26,"_407":26,"_408":26,"_409":-5},"ENV",{"_361":362,"_363":364,"_365":66,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","a3e067d4463eea85f6334f8e583e8516ae58c4f6","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search