\n \n \n \n","label",[168,67],"frontend","pulls","branches","forks","envVars",{"_176":26,"_178":26},"connections",{"_176":26,"_177":26},"count","unfilledCount","emptyCount",{"_32":250,"_13":249,"_65":243,"_42":-5,"_34":35,"_161":39,"_162":85,"_36":251,"_38":26,"_68":234,"_164":-5,"_69":24,"_166":-5,"_194":252,"_17":253},{"_32":241,"_13":242,"_65":83,"_42":243,"_34":35,"_161":39,"_162":85,"_36":244,"_38":26,"_68":245,"_164":246,"_69":24,"_166":-5,"_194":247,"_17":248},{"_32":237,"_13":168,"_65":160,"_42":-5,"_34":35,"_161":39,"_162":85,"_36":238,"_38":26,"_68":234,"_164":-5,"_69":24,"_166":-5,"_194":239,"_17":240},{"_32":232,"_13":231,"_65":226,"_42":160,"_34":35,"_161":39,"_162":85,"_36":233,"_38":26,"_68":234,"_164":-5,"_69":24,"_166":-5,"_194":235,"_17":236},{"_32":223,"_13":224,"_65":225,"_42":226,"_34":35,"_161":39,"_162":85,"_36":227,"_38":26,"_68":209,"_164":228,"_69":24,"_166":-5,"_194":229,"_17":230},{"_32":216,"_13":217,"_65":218,"_42":160,"_34":35,"_161":39,"_162":85,"_36":219,"_38":26,"_68":21,"_164":220,"_69":24,"_166":-5,"_194":221,"_17":222},{"_32":159,"_13":67,"_65":66,"_42":160,"_34":35,"_161":39,"_162":85,"_36":213,"_38":26,"_68":21,"_164":165,"_69":24,"_166":-5,"_194":214,"_17":215},{"_32":204,"_13":205,"_65":206,"_42":160,"_34":35,"_161":108,"_162":85,"_36":207,"_38":208,"_68":209,"_164":210,"_69":24,"_166":-5,"_194":211,"_17":212},{"_32":197,"_13":198,"_65":199,"_42":160,"_34":35,"_161":39,"_162":85,"_36":200,"_38":26,"_68":21,"_164":201,"_69":24,"_166":-5,"_194":202,"_17":203},{"_32":189,"_13":190,"_65":191,"_42":-5,"_34":35,"_161":39,"_162":85,"_36":192,"_38":26,"_68":21,"_164":193,"_69":24,"_166":-5,"_194":195,"_17":196},"9c96f8b8-78ab-11f0-a3c3-0224a6c84d84","README.md","0198a621-d1ce-71dd-8708-711ad2ffdfec",["D",1755133890927],"# React Hono Starter\n\nThis app is a starter template for client-side React and server-side Hono.\n\n## Getting started\n\nGet a copy of this starter template by clicking the **Remix** button in the top-right.\n\n## How it works\n\n- The **entrypoint** is [`/backend/index.ts`](/backend/index.ts). That's the backend HTTP server, which also serves the all the frontend assets.\n\n- The **client-side entrypoint** is [`/frontend/index.html`](/frontend/index.html)\n - which in turn imports [`/frontend/index.tsx`](/frontend/index.tsx)\n - which in turn imports the React app from [`/frontend/components/App.tsx`](/frontend/components/App.tsx).\n\nSo if you wanted to get a sense of how this app comes together, we suggest reading the files in this order: \n\n[`/backend/index.ts`](/backend/index.ts) -> [`/frontend/index.html`](/frontend/index.html) -> [`/frontend/index.tsx`](/frontend/index.tsx) -> [`/frontend/components/App.tsx`](/frontend/components/App.tsx)\n\n## Further resources\n\n- [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) is a bigger example project, with a SQLite database table, queries, client-side CSS, a favicon, and shared code that runs on both client and server.","children",[],[190],"9c96f494-78ab-11f0-a3c3-0224a6c84d84","style.css","0198a621-d1ce-71dd-8708-6b7b2191f68c",["D",1755133890927],"body {\n font-family: -apple-system, Arial, sans-serif;\n color: #333;\n padding: 20px;\n}\n\nbutton {\n background-color: #4a90e2;\n color: white;\n border: none;\n padding: 8px 16px;\n border-radius: 4px;\n cursor: pointer;\n}\n\nbutton:hover {\n background-color: #357ae8;\n}",[],[168,198],"3f99936c-78ad-11f0-81a7-0224a6c84d84","index.tsx","0198a621-d1ce-71dd-8708-673b533a1615",["D",1755134594003],2,"script","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport {\n AlertCircle,\n CheckCircle,\n Key,\n LogOut,\n Shield,\n User,\n} from \"npm:lucide-react\";\n\nconst PasskeyDemo = () => {\n const [isSignedIn, setIsSignedIn] = useState(false);\n const [user, setUser] = useState(null);\n const [isLoading, setIsLoading] = useState(false);\n const [message, setMessage] = useState(\"\");\n const [messageType, setMessageType] = useState(\"info\");\n const [isSupported, setIsSupported] = useState(false);\n const [lastError, setLastError] = useState(null);\n\n useEffect(() => {\n // Check if WebAuthn is supported\n setIsSupported(window?.PublicKeyCredential !== undefined);\n\n // Check if user is already signed in (simulated)\n const storedUser = JSON.parse(\n localStorage.getItem(\"passkey-user\") || \"null\",\n );\n if (storedUser) {\n setUser(storedUser);\n setIsSignedIn(true);\n }\n }, []);\n\n const showMessage = (text, type = \"info\") => {\n setMessage(text);\n setMessageType(type);\n setTimeout(() => setMessage(\"\"), 5000);\n };\n\n const generateRandomBytes = (length) => {\n const array = new Uint8Array(length);\n crypto.getRandomValues(array);\n return array;\n };\n\n const bufferToBase64 = (buffer) => {\n return btoa(String.fromCharCode(...new Uint8Array(buffer)));\n };\n\n const base64ToBuffer = (base64) => {\n const binaryString = atob(base64);\n const bytes = new Uint8Array(binaryString.length);\n for (let i = 0; i < binaryString.length; i++) {\n bytes[i] = binaryString.charCodeAt(i);\n }\n return bytes.buffer;\n };\n\n const createPasskey = async (username) => {\n if (!isSupported) {\n showMessage(\"Passkeys are not supported in this browser\", \"error\");\n return false;\n }\n\n setIsLoading(true);\n\n try {\n const userId = generateRandomBytes(32);\n const challenge = generateRandomBytes(32);\n\n // More permissive options to avoid common rejection causes\n const createCredentialOptions: CredentialCreationOptions = {\n publicKey: {\n challenge: challenge,\n rp: {\n name: \"Passkey Demo App\",\n // Remove id for localhost/file:// compatibility\n ...(window?.location.hostname !== \"localhost\" &&\n !window?.location.protocol.startsWith(\"file:\") && {\n id: window?.location.hostname,\n }),\n },\n user: {\n id: userId,\n name: username,\n displayName: username,\n },\n pubKeyCredParams: [\n { alg: -7, type: \"public-key\" }, // ES256\n { alg: -257, type: \"public-key\" }, // RS256\n ],\n authenticatorSelection: {\n // Remove platform restriction - allow any authenticator\n userVerification: \"preferred\", // Changed from \"required\" to \"preferred\"\n residentKey: \"preferred\", // Changed from requireResidentKey\n },\n timeout: 300000, // Increased timeout to 5 minutes\n attestation: \"none\", // Changed from \"direct\" - less strict\n excludeCredentials: [], // Explicitly empty array\n },\n };\n\n const credential = await navigator.credentials.create(\n createCredentialOptions,\n );\n\n if (credential) {\n // In a real app, you'd send this to your server\n const userData = {\n username,\n credentialId: bufferToBase64(credential.rawId),\n publicKey: bufferToBase64(credential.response.getPublicKey()),\n createdAt: new Date().toISOString(),\n };\n\n // Simulate storing user data\n localStorage.setItem(\"passkey-user\", JSON.stringify(userData));\n localStorage.setItem(\n \"passkey-credential\",\n bufferToBase64(credential.rawId),\n );\n\n setUser(userData);\n setIsSignedIn(true);\n showMessage(\n \"Passkey created successfully! You are now signed in.\",\n \"success\",\n );\n return true;\n }\n } catch (error) {\n console.error(\"Error creating passkey:\", error);\n\n // Store detailed error information\n setLastError({\n name: error.name,\n message: error.message,\n stack: error.stack,\n timestamp: new Date().toISOString(),\n });\n\n if (error.name === \"NotAllowedError\") {\n showMessage(\"Passkey creation was cancelled or not allowed\", \"error\");\n } else if (error.name === \"NotSupportedError\") {\n showMessage(\"Passkeys are not supported on this device\", \"error\");\n } else if (error.name === \"SecurityError\") {\n showMessage(\n \"Security error: Make sure you're on HTTPS or localhost\",\n \"error\",\n );\n } else if (error.name === \"InvalidStateError\") {\n showMessage(\"A passkey for this user may already exist\", \"error\");\n } else if (error.name === \"ConstraintError\") {\n showMessage(\n \"Device constraints not met. Try a different authenticator type.\",\n \"error\",\n );\n } else {\n showMessage(\n \"Failed to create passkey: \" + error.name + \" - \" + error.message,\n \"error\",\n );\n }\n return false;\n } finally {\n setIsLoading(false);\n }\n };\n\n const signInWithPasskey = async () => {\n if (!isSupported) {\n showMessage(\"Passkeys are not supported in this browser\", \"error\");\n return;\n }\n\n setIsLoading(true);\n\n try {\n const challenge = generateRandomBytes(32);\n const storedCredentialId = localStorage.getItem(\"passkey-credential\");\n\n if (!storedCredentialId) {\n showMessage(\"No passkey found. Please create one first.\", \"error\");\n setIsLoading(false);\n return;\n }\n\n const getCredentialOptions = {\n publicKey: {\n challenge: challenge,\n allowCredentials: [{\n id: base64ToBuffer(storedCredentialId),\n type: \"public-key\",\n transports: [\"internal\"],\n }],\n userVerification: \"required\",\n timeout: 60000,\n },\n };\n\n const assertion = await navigator.credentials.get(getCredentialOptions);\n\n if (assertion) {\n // In a real app, you'd verify this with your server\n const storedUser = JSON.parse(\n localStorage.getItem(\"passkey-user\") || \"null\",\n );\n\n if (storedUser) {\n setUser(storedUser);\n setIsSignedIn(true);\n showMessage(\"Successfully signed in with passkey!\", \"success\");\n } else {\n showMessage(\"User data not found\", \"error\");\n }\n }\n } catch (error) {\n console.error(\"Error signing in with passkey:\", error);\n\n // Store detailed error information\n setLastError({\n name: error.name,\n message: error.message,\n stack: error.stack,\n timestamp: new Date().toISOString(),\n });\n\n if (error.name === \"NotAllowedError\") {\n showMessage(\"Sign-in was cancelled or not allowed\", \"error\");\n } else {\n showMessage(\"Failed to sign in: \" + error.message, \"error\");\n }\n } finally {\n setIsLoading(false);\n }\n };\n\n const signOut = () => {\n setIsSignedIn(false);\n setUser(null);\n showMessage(\"Signed out successfully\", \"success\");\n };\n\n const clearAllData = () => {\n localStorage.removeItem(\"passkey-user\");\n localStorage.removeItem(\"passkey-credential\");\n setIsSignedIn(false);\n setUser(null);\n showMessage(\"All passkey data cleared\", \"success\");\n };\n\n const [username, setUsername] = useState(\"\");\n\n const handleCreatePasskey = async () => {\n if (!username.trim()) {\n showMessage(\"Please enter a username\", \"error\");\n return;\n }\n await createPasskey(username.trim());\n };\n\n if (!isSupported) {\n return (\n

\n \n

\n Passkeys Not Supported\n

\n Your browser doesn't support WebAuthn/Passkeys. Please use a modern\n browser like Chrome, Safari, or Firefox.\n

\n This demo requires a browser and device that support the WebAuthn\n API for passkey authentication.\n

\n );\n }\n\n return (\n

\n \n

Passkey Demo

\n Experience passwordless authentication using WebAuthn passkeys. Sign\n in securely with biometrics, PIN, or device authentication.\n

\n\n {message && (\n \n

\n {messageType === \"success\"\n ? \n : messageType === \"error\"\n ? \n : null}\n {message}\n

\n )}\n\n

\n {isSignedIn\n ? (\n // Signed In State\n

\n \n

\n Welcome Back!\n

\n You're signed in with your passkey\n

\n\n {user && (\n

\n User Information\n

\n Username:{\" \"}\n {user.username}\n

\n Created:{\" \"}\n {new Date(user.createdAt).toLocaleDateString()}\n

\n Credential ID:\n \n {user.credentialId.slice(0, 20)}...\n \n

\n )}\n\n

\n \n \n Sign Out\n \n\n \n Clear All Passkey Data\n \n

\n )\n : (\n // Sign In/Create State\n

\n \n

\n Passkey Authentication\n

\n Sign in securely without passwords\n

\n\n

\n {localStorage.getItem(\"passkey-credential\")\n ? (\n // Has existing passkey\n

\n You have an existing passkey. Sign in to continue.\n

\n \n {isLoading\n ? (\n

\n )\n : }\n {isLoading\n ? \"Authenticating...\"\n : \"Sign In with Passkey\"}\n \n

\n )\n : (\n // Create new passkey\n

\n \n Username\n \n setUsername(e.target.value)}\n className=\"w-full px-3 py-2 border border-gray-300 rounded-lg focus:outline-none focus:ring-2 focus:ring-indigo-500\"\n placeholder=\"Enter your username\"\n onKeyDown={(e) =>\n e.key === \"Enter\" && handleCreatePasskey()}\n />\n

\n\n \n {isLoading\n ? (\n

\n )\n : }\n {isLoading ? \"Creating Passkey...\" : \"Create Passkey\"}\n \n

\n )}\n

\n\n

\n How it works:\n

• Uses your device's built-in authentication
• Biometric or PIN verification
• No passwords to remember or store
• Phishing-resistant security

\n\n

\n Troubleshooting:\n

• Make sure you're on HTTPS or localhost
• Enable biometrics/PIN on your device
• Try a different browser if issues persist
• Some corporate networks may block WebAuthn

\n )}\n

\n\n

\n This is a demonstration app. In production, credential verification\n would happen on a secure server.\n

\n\n {/* Error Details Section */}\n {lastError && (\n

\n Last Error Details\n

\n setLastError(null)}\n className=\"text-red-600 hover:text-red-800 text-sm\"\n >\n ✕ Close\n \n

\n\n

\n Error Type:\n

\n {lastError.name}\n

\n\n

\n Error Message:\n

\n {lastError.message}\n

\n\n

\n Timestamp:\n

\n {new Date(lastError.timestamp).toLocaleString()}\n

\n\n

\n Environment Info:\n

URL: {window.location.href}

Protocol: {window.location.protocol}

Hostname: {window.location.hostname}

User Agent: {navigator.userAgent}

\n WebAuthn Support:{\" \"}\n {window.PublicKeyCredential ? \"Yes\" : \"No\"}\n

\n {window.PublicKeyCredential && (\n

\n Platform Auth:{\" \"}\n {window.PublicKeyCredential\n .isUserVerifyingPlatformAuthenticatorAvailable\n ? \"Available\"\n : \"Unknown\"}\n

\n )}\n

\n\n {lastError.stack && (\n

\n Stack Trace (Click to expand)\n

{lastError.stack}

\n )}\n

\n\n

\n Common Solutions:\n

\n • NotAllowedError:{\" \"}\n User cancelled, try again or check device settings\n
\n • SecurityError: Must be HTTPS or localhost\n
\n • NotSupportedError:{\" \"}\n Browser/device doesn't support WebAuthn\n
\n • InvalidStateError:{\" \"}\n Credential already exists, try signing in instead\n
\n • ConstraintError:{\" \"}\n Device capabilities don't meet requirements\n

\n )}\n

\n \n );\n};\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[168,205],["D",1755133890927],[],[168,67],"9c96f1ce-78ab-11f0-a3c3-0224a6c84d84","favicon.svg","0198a621-d1ce-71dd-8708-5fccba5864ec",["D",1755133890927],"\n",[],[168,217],"9c96ef76-78ab-11f0-a3c3-0224a6c84d84","App.tsx","0198a621-d1ce-71dd-8708-55369b1c1715","0198a621-d1ce-71dd-8708-5b44b35c2c89",["D",1755133890927],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function App() {\n const [clicked, setClicked] = useState(0);\n return (\n

Val Town React + Hono Starter

\n I've been clicked times\n

\n );\n}",[],[168,231,224],"components","9c96f0de-78ab-11f0-a3c3-0224a6c84d84",["D",1755133890927],"directory",[183],[168,231],"9c96f584-78ab-11f0-a3c3-0224a6c84d84",["D",1755133890927],[182,184,185,186,187],[168],"9c96e40e-78ab-11f0-a3c3-0224a6c84d84","index.ts","0198a621-d1ce-71dd-8708-533f4a04ad91",["D",1755133890927],"http","import { serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { Hono } from \"npm:hono\";\n\nconst app = new Hono();\n\n// Serve index.html at the root /\napp.get(\"/\", async c => {\n return serveFile(\"/frontend/index.html\", import.meta.url);\n});\n\n// Serve all /frontend files\napp.get(\"/frontend/**/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Add your API routes here\n// app.get(\"/api/data\", c => c.json({ hello: \"world\" }));\n\n// Unwrap and rethrow Hono errors as the original error\n// If you delete this, all errors will be \"Internal Server Error\"\napp.onError((err, c) => {\n throw err;\n});\n\n// HTTP vals expect an exported \"fetch handler\"\n// This is how you \"run the server\" in Val Town with Hono\nexport default app.fetch;",[],[249,242],"backend","9c96edb4-78ab-11f0-a3c3-0224a6c84d84",["D",1755133890927],[180],[249],["D",1755133890927],{"_11":12,"_124":72},{"_11":12,"_120":-5,"_71":72,"_30":70,"_121":122,"_123":24},{"_38":108,"_13":16,"_32":35,"_109":74,"_110":62,"_111":112,"_113":78,"_114":115,"_116":117,"_118":14,"_119":12},"ctx",{"_51":-5,"_145":291,"_292":293,"_294":295,"_296":24,"_297":24,"_298":24,"_299":85,"_300":-5,"_301":-7,"_302":-7,"_303":26,"_304":24,"_305":24,"_306":-5,"_307":24,"_308":24,"_309":24,"_310":-5},"ENV",{"_262":263,"_264":265,"_266":16,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · index.html