Please enter your email to access this val.

\n \n

\n \n`;\n\nconst verifyPage = (email) =>\n `\n \n \n \n \n \n

A confirmation code has been sent to ${email}

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n allowList?: string[];\n sessionTable?: string;\n codeTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function emailAuth(\n next: (req: Request, mail?: string) => Response | Promise,\n options?: PasswordAuthOptions,\n) {\n const sessionTable = options?.sessionTable || \"email_auth_session\";\n const codeTable = options?.sessionTable || \"email_auth_code\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage(val.handle));\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n if (options?.allowList && !options.allowList.includes(email)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n\n const code = await generateEmailVerificationCode(codeTable, email);\n sendEmail({\n to: email,\n text: `Your code is ${code}`,\n });\n\n return redirect(`/verify?email=${encodeURIComponent(email)}`);\n }\n\n if (url.pathname == \"/verify\" && req.method == \"GET\") {\n const email = url.searchParams.get(\"email\");\n if (!email) {\n return new Response(\"Bad Request\", { status: 400 });\n }\n return html(verifyPage(email));\n }\n\n if (url.pathname == \"/verify\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n const code = await getEmailVerificationCode(codeTable, email);\n if (code != formData.get(\"code\")) {\n return new Response(\"Bad Request\", {\n status: 400,\n });\n }\n\n const session = await createSession(sessionTable, valSlug, email);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signout\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req, session.email);\n };\n}",[],[104],"files",[152,172],"counts",{"_185":31,"_186":160,"_187":160,"_188":31},"pulls","branches","forks","envVars","contents",[],{"_109":173,"_100":104,"_155":174,"_157":-5,"_158":142,"_159":106,"_161":27,"_111":192,"_105":176,"_163":177,"_165":178,"_167":27,"_168":-5,"_103":193},["D",1709809840832],[104],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_98":99,"_100":101,"_102":42,"_105":106,"_103":104,"_107":200,"_150":204,"_181":211,"_164":212,"_189":214,"_215":-5,"_216":27,"_217":-5,"_218":-5,"_219":-5,"_220":221},{"_109":110,"_100":101,"_111":201,"_113":-5,"_114":115,"_116":117,"_118":-5,"_119":-5,"_12":120,"_121":-5,"_122":115,"_123":-5,"_124":125,"_126":127,"_128":127,"_129":130,"_131":130,"_132":130,"_133":127,"_134":127,"_135":27,"_21":202,"_139":203},["D",1746209065413],{"_98":99,"_137":138},{"_105":141,"_100":42,"_109":142,"_143":110,"_144":-5,"_145":-5,"_146":-5,"_147":-5,"_148":101,"_149":99},[205,208],{"_109":153,"_100":154,"_155":156,"_157":-5,"_158":142,"_159":160,"_161":115,"_111":162,"_105":31,"_163":164,"_165":166,"_167":27,"_168":-5,"_169":206,"_103":207},[],[154],{"_109":173,"_100":104,"_155":174,"_157":-5,"_158":142,"_159":106,"_161":27,"_111":175,"_105":176,"_163":177,"_165":178,"_167":27,"_168":-5,"_169":209,"_103":210},[],[104],[205,208],{"_109":173,"_100":104,"_155":174,"_157":-5,"_158":142,"_159":106,"_161":27,"_111":192,"_105":176,"_163":177,"_165":178,"_167":27,"_168":-5,"_103":213},[104],[],"upstream","showCompareCallout","pull","ahead","behind","templates",[],"routes/_app","actionData","errors"]