[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_169":170,"_171":172},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_128":-5,"_20":129,"_22":130,"_131":132,"_133":134,"_25":135,"_24":-5,"_136":-5,"_137":-5,"_138":54,"_139":140,"_141":54,"_142":-5,"_143":-5,"_144":145},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","pomdtr","name","email_auth","branchName","main","version","path","","project",{"_34":74,"_13":14,"_46":75,"_76":-5,"_77":45,"_78":79,"_80":79,"_81":-5,"_82":-5,"_83":84,"_85":-5,"_86":45,"_87":-5,"_88":-5,"_89":90,"_91":92,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":98,"_99":98,"_100":101,"_102":101,"_103":101,"_104":98,"_105":98,"_106":107,"_108":109,"_110":111,"_112":54},"tree",[65,66],"file","contents",[32,33],"upstream","pull","ahead","behind","envVars",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":24,"_51":63,"_53":54,"_55":-5,"_18":64},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"id","e33c051a-277f-11f0-b46e-569c3dd06744","main.tsx","fileId","e1fdbf2c-277f-11f0-b46e-569c3dd06744","parentId","branchId","e1fb86a8-277f-11f0-b46e-569c3dd06744","branchVersion",47,"latest",true,"createdAt",["D",1718793493140],46,"fileType","script","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport { inferRequestVal } from \"https://esm.town/v/andreterron/inferRequestVal\";\nimport { email as sendEmail } from \"https://esm.town/v/std/email?v=11\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { html } from \"https://esm.town/v/stevekrouse/html?v=5\";\nimport { zip } from \"npm:lodash-es\";\nimport { nanoid } from \"npm:nanoid\";\nimport { createDate, TimeSpan } from \"npm:oslo\";\nimport { alphabet, generateRandomString } from \"npm:oslo/crypto\";\n\ntype Session = {\n id: string;\n email: string;\n expiresAt: number;\n};\n\nasync function createSessionTable(sessionTableName: string) {\n await sqlite.execute(`CREATE TABLE ${sessionTableName} (\n id TEXT NOT NULL PRIMARY KEY,\n expires_at INTEGER NOT NULL,\n email STRING NOT NULL,\n val_slug STRING NOT NULL\n );`);\n}\n\nasync function createCodeTable(tableName: string) {\n await sqlite.execute(`CREATE TABLE ${tableName} (\n id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,\n code STRING NOT NULL,\n email STRING NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n}\n\nasync function generateEmailVerificationCode(tableName, email: string): Promise {\n try {\n await sqlite.execute({ sql: `DELETE FROM ${tableName} WHERE email = ?`, args: [email] });\n const code = generateRandomString(8, alphabet(\"0-9\"));\n const expires_at = createDate(new TimeSpan(5, \"m\")); // 5 minutes\n await sqlite.execute({\n sql: `INSERT INTO ${tableName} (email, code, expires_at) VALUES (?, ?, ?)`,\n args: [email, code, expires_at.getTime() / 1000],\n });\n return code;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n await createCodeTable(tableName);\n return generateEmailVerificationCode(tableName, email);\n }\n\n throw e;\n }\n}\n\nasync function createSession(tableName: string, valSlug: string, email: string): Promise {\n try {\n const expiresAt = new Date();\n expiresAt.setDate(expiresAt.getDate() + 7);\n const sessionID = nanoid();\n\n await sqlite.execute({\n sql: `INSERT INTO ${tableName} (id, val_slug, expires_at, email) VALUES (?, ?, ?, ?)`,\n args: [sessionID, valSlug, expiresAt.getTime() / 1000, email],\n });\n return {\n id: sessionID,\n email,\n expiresAt: expiresAt.getTime(),\n };\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n await createSessionTable(tableName);\n return createSession(tableName, valSlug, email);\n }\n\n throw e;\n }\n}\n\nasync function getSession(tableName: string, sessionID: string, valSlug: string): Promise {\n try {\n const { rows, columns } = await sqlite.execute({\n sql: `SELECT * FROM ${tableName} WHERE id = ? AND val_slug = ?`,\n args: [sessionID, valSlug],\n });\n\n if (rows.length == 0) {\n return null;\n }\n\n return Object.fromEntries(zip(columns, rows.at(0))) as Session;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n return null;\n }\n\n throw e;\n }\n}\n\ntype VerificationCode = {\n code: string;\n expires_at: number;\n email: string;\n};\n\nasync function getEmailVerificationCode(tableName: string, email: string) {\n try {\n const { rows, columns } = await sqlite.execute({\n sql: `SELECT * FROM ${tableName} WHERE email = ?`,\n args: [email],\n });\n\n if (rows.length == 0) {\n return null;\n }\n\n return Object.fromEntries(zip(columns, rows.at(0))) as VerificationCode;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n return null;\n }\n\n throw e;\n }\n}\n\nconst loginPage = (handle) =>\n `\n \n \n \n \n \n

Please enter your email to access this val.

\n \n

\n \n`;\n\nconst verifyPage = (email) =>\n `\n \n \n \n \n \n

A confirmation code has been sent to ${email}

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\nexport type PasswordAuthOptions = {\n verifyEmail: (email: string) => boolean | Promise;\n sessionTable?: string;\n codeTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function emailAuth(\n next: Handler,\n options?: PasswordAuthOptions,\n): Handler {\n const sessionTable = options?.sessionTable || \"email_auth_session\";\n const codeTable = options?.sessionTable || \"email_auth_code\";\n return async (req: Request, ctx?: { [key: string]: any }) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage(val.handle));\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n if (options?.allowList && !options?.allowSignup && !options.allowList.includes(email)) {\n return html(`You are not allowed to view this val`);\n }\n\n const code = await generateEmailVerificationCode(codeTable, email);\n sendEmail({\n to: email,\n subject: `@${val.handle}/${val.name} Verification Code`,\n text: `Your code is ${code}`,\n });\n\n return redirect(`/verify?email=${encodeURIComponent(email)}`);\n }\n\n if (url.pathname == \"/verify\" && req.method == \"GET\") {\n const email = url.searchParams.get(\"email\");\n if (!email) {\n return new Response(\"Bad Request\", { status: 400 });\n }\n return html(verifyPage(email));\n }\n\n if (url.pathname == \"/verify\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n const code = await getEmailVerificationCode(codeTable, email);\n if (code.expires_at < Date.now() / 1000) {\n return new Response(\"Code has expired\", {\n status: 403,\n });\n }\n\n if (code.code != formData.get(\"code\")) {\n return new Response(\"Bad Request\", {\n status: 400,\n });\n }\n\n const session = await createSession(sessionTable, valSlug, email);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signout\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now() / 1000) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (!await options.verifyEmail(session.email)) {\n await sendEmail({\n subject: `Someone tried to login to ${val.name}/${val.handle}`,\n cc: session.email,\n text: `${session.email} has tried to access ${val.name}/${val.handle}. `,\n });\n\n return html(`You are not allowed to view this val`, {\n status: 403,\n });\n }\n\n req.headers.set(\"X-User-Email\", session.email);\n return next(req);\n };\n}","deleted",false,"label",[36],"e1fdc512-277f-11f0-b46e-569c3dd06744","README.md","e1fdc5a8-277f-11f0-b46e-569c3dd06744",1,["D",1709804149688],0,"# Email Auth for Val Town\n\n> ⚠️ Require a pro account (needed to send email to users)\n\n## Usage\n\nCreate an http server, and wrap it in the emailAuth middleware.\n\n```ts\nimport { emailAuth } from \"https://esm.town/v/pomdtr/email_auth\"\nimport { verifyUserEmail } from \"https://esm.town/v/pomdtr/verifyUserEmail\"\n\nexport default emailAuth((req) => {\n return new Response(`your mail is ${req.headers.get(\"X-User-Email\")}`);\n}, {\n verifyEmail: verifyUserEmail\n});\n```\n\n> 💡 If you do not want to put your email in clear text, just move it to an env var (ex: `Deno.env.get(\"email\")`)\n\nIf you want to allow anyone to access your val, just use:\n\n```ts\nimport { emailAuth } from \"https://esm.town/v/pomdtr/email_auth\"\n\nexport default emailAuth((req) => {\n return new Response(`your mail is ${req.headers.get(\"X-User-Email\")}`);\n}, {\n verifyEmail: (_email) => true\n});\n```\n\nEach time someone tries to access your val but is not allowed, you will get an email with:\n\n- the email of the user trying to log in\n- the name of the val the he want to access\n\nYou can then just add the user to your whitelist to allow him in (and the user will not need to confirm his email again) !\n\n## TODO\n\n- [ ] Add expiration for verification codes and session tokens\n- [ ] use links instead of code for verification\n- [ ] improve errors pages\n\n",[58],{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":71,"_17":62,"_49":24,"_51":63,"_53":54,"_55":-5,"_68":72,"_18":73},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":67,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_68":69,"_18":70},["D",1718793493140],"children",[],[36],["D",1709804149688],[],[58],"e1fb3ac2-277f-11f0-b46e-569c3dd06744",["D",1746209065413],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","8a86e3e7-cae8-48ea-a1d8-c8cf7b30d88c","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",6,"orgId","4b933fb9-e150-4558-9d0a-845e595c8c78","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_127":123},"org",{"_11":12,"_121":-5,"_122":123,"_83":84,"_124":125,"_126":54},"branch",{"_17":43,"_13":16,"_34":41,"_113":74,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":14,"_120":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":74,"_13":14,"_46":165,"_76":-5,"_77":45,"_78":79,"_80":79,"_81":-5,"_82":-5,"_83":84,"_85":-5,"_86":45,"_87":-5,"_88":-5,"_89":90,"_91":92,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":98,"_99":98,"_100":101,"_102":101,"_103":101,"_104":98,"_105":98,"_106":166,"_108":167,"_110":168,"_112":54},[159,160],"files",[159,160],"counts",{"_150":62,"_151":60,"_152":62,"_31":153,"_154":155},[146,147],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":24,"_51":63,"_53":54,"_55":-5,"_18":149},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":148},[36],[58],"pulls","branches","forks",{"_156":62,"_158":62},"connections",{"_156":62,"_157":62},"count","unfilledCount","emptyCount",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":71,"_17":62,"_49":24,"_51":63,"_53":54,"_55":-5,"_68":163,"_18":164},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":67,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_68":161,"_18":162},[],[36],[],[58],["D",1746209065413],{"_11":12,"_127":123},{"_11":12,"_121":-5,"_122":123,"_83":84,"_124":125,"_126":54},{"_17":43,"_13":16,"_34":41,"_113":74,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":14,"_120":12},"ctx",{"_106":-5,"_143":202,"_203":204,"_205":206,"_207":54,"_208":54,"_209":54,"_210":45,"_211":-5,"_212":-7,"_213":-7,"_214":62,"_215":54,"_216":54,"_217":-5,"_218":54,"_219":54,"_220":54,"_221":-5},"ENV",{"_173":174,"_175":176,"_177":16,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]