Please enter your email to access this val.

\n \n

\n \n`;\n\nconst verifyPage = (email) =>\n `\n \n \n \n \n \n

A confirmation code has been sent to ${email}

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\nexport type PasswordAuthOptions = {\n verifyEmail: (email: string) => boolean | Promise;\n sessionTable?: string;\n codeTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function emailAuth(\n next: Handler,\n options?: PasswordAuthOptions,\n): Handler {\n const sessionTable = options?.sessionTable || \"email_auth_session\";\n const codeTable = options?.sessionTable || \"email_auth_code\";\n return async (req: Request, ctx?: { [key: string]: any }) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage(val.handle));\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n if (options?.allowList && !options?.allowSignup && !options.allowList.includes(email)) {\n return html(`You are not allowed to view this val`);\n }\n\n const code = await generateEmailVerificationCode(codeTable, email);\n sendEmail({\n to: email,\n subject: `@${val.handle}/${val.name} Verification Code`,\n text: `Your code is ${code}`,\n });\n\n return redirect(`/verify?email=${encodeURIComponent(email)}`);\n }\n\n if (url.pathname == \"/verify\" && req.method == \"GET\") {\n const email = url.searchParams.get(\"email\");\n if (!email) {\n return new Response(\"Bad Request\", { status: 400 });\n }\n return html(verifyPage(email));\n }\n\n if (url.pathname == \"/verify\" && req.method == \"POST\") {\n const formData = await req.formData();\n const email = formData.get(\"email\") as string;\n const code = await getEmailVerificationCode(codeTable, email);\n if (code.expires_at < Date.now() / 1000) {\n return new Response(\"Code has expired\", {\n status: 403,\n });\n }\n\n if (code.code != formData.get(\"code\")) {\n return new Response(\"Bad Request\", {\n status: 400,\n });\n }\n\n const session = await createSession(sessionTable, valSlug, email);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signout\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now() / 1000) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (!await options.verifyEmail(session.email)) {\n await sendEmail({\n subject: `Someone tried to login to ${val.name}/${val.handle}`,\n cc: session.email,\n text: `${session.email} has tried to access ${val.name}/${val.handle}. `,\n });\n\n return html(`You are not allowed to view this val`, {\n status: 403,\n });\n }\n\n req.headers.set(\"X-User-Email\", session.email);\n return next(req);\n };\n}","deleted","label",[108],"e1fdc512-277f-11f0-b46e-569c3dd06744","README.md","e1fdc5a8-277f-11f0-b46e-569c3dd06744",1,["D",1709804149688],0,"# Email Auth for Val Town\n\n> ⚠️ Require a pro account (needed to send email to users)\n\n## Usage\n\nCreate an http server, and wrap it in the emailAuth middleware.\n\n```ts\nimport { emailAuth } from \"https://esm.town/v/pomdtr/email_auth\"\nimport { verifyUserEmail } from \"https://esm.town/v/pomdtr/verifyUserEmail\"\n\nexport default emailAuth((req) => {\n return new Response(`your mail is ${req.headers.get(\"X-User-Email\")}`);\n}, {\n verifyEmail: verifyUserEmail\n});\n```\n\n> 💡 If you do not want to put your email in clear text, just move it to an env var (ex: `Deno.env.get(\"email\")`)\n\nIf you want to allow anyone to access your val, just use:\n\n```ts\nimport { emailAuth } from \"https://esm.town/v/pomdtr/email_auth\"\n\nexport default emailAuth((req) => {\n return new Response(`your mail is ${req.headers.get(\"X-User-Email\")}`);\n}, {\n verifyEmail: (_email) => true\n});\n```\n\nEach time someone tries to access your val but is not allowed, you will get an email with:\n\n- the email of the user trying to log in\n- the name of the val the he want to access\n\nYou can then just add the user to your whitelist to allow him in (and the user will not need to confirm his email again) !\n\n## TODO\n\n- [ ] Add expiration for verification codes and session tokens\n- [ ] use links instead of code for verification\n- [ ] improve errors pages\n\n",[125],"pulls","branches","forks","envVars",{"_139":129,"_141":129},"connections",{"_139":129,"_140":129},"count","unfilledCount","emptyCount",{"_18":124,"_20":125,"_109":126,"_111":-5,"_112":66,"_113":127,"_114":26,"_22":148,"_63":129,"_117":94,"_119":130,"_121":62,"_122":-5,"_145":149,"_83":150},{"_18":107,"_20":108,"_109":110,"_111":-5,"_112":66,"_113":64,"_114":26,"_22":144,"_63":116,"_117":118,"_119":120,"_121":62,"_122":-5,"_145":146,"_83":147},["D",1718793493140],"children",[],[108],["D",1709804149688],[],[125],["D",1746209065413],{"_16":17,"_81":77},{"_16":17,"_75":-5,"_76":77,"_32":33,"_78":79,"_80":62},{"_63":64,"_20":65,"_18":66,"_67":19,"_68":-5,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":21,"_74":17},"ctx",{"_55":-5,"_102":188,"_189":190,"_191":192,"_193":62,"_194":62,"_195":62,"_196":26,"_197":-5,"_198":-7,"_199":-7,"_200":129,"_201":62,"_202":62,"_203":-5,"_204":62,"_205":62,"_206":62,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":65,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search