[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_165":166,"_167":168},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":49,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":31,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",185,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","41a55ad6-2760-11f0-86ff-569c3dd06744","name","fileType","http","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport type { JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { authDescribeScopes } from \"https://esm.town/v/postpostscript/authDescribeScopes\";\nimport { html, htmlResponse, Layout } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, type JWTVerifyOptions, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { format } from \"https://esm.town/v/postpostscript/multiFormat\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nexport const SCOPES = {\n id: \"provides proof that you are you\",\n};\n\nconst { author: AUTHOR, slug, httpEndpoint: ENDPOINT } = extractValInfo(import.meta.url);\nexport const NAME = \"@\" + slug;\nexport const COOKIE_NAME = \"AUTH_ID_TOKEN\";\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n if (token === undefined) {\n deleteCookie(res.headers, COOKIE_NAME);\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n });\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function createToken(\n payload: {\n sub?: string;\n scope: string;\n aud?: string | string[];\n nbf?: number;\n iat?: number;\n jti?: string;\n },\n exp: string | number | Date = \"1h\",\n) {\n return generate({\n jti: crypto.randomUUID(),\n ...payload,\n }, exp);\n}\n\nexport async function verifyToken(token: string, options: JWTVerifyOptions = {}) {\n return verify(token, {\n audience: NAME,\n issuer: NAME,\n ...options,\n });\n}\n\nexport async function emailSignInLink(clientToken: string) {\n const minutes = 15;\n const token = await createToken({\n scope: `${NAME}/signin`,\n aud: NAME,\n iss: NAME,\n }, `${minutes}m`);\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", clientToken);\n qs.set(\"token\", token);\n return email({\n subject: \"Sign In Request\",\n\n ...format.Trim`\n${format.Link(`${ENDPOINT}/?${qs.toString()}`, format.Plain`Sign In`)}\n${format.Small`This link will expire in ${minutes.toString()} minutes.`}\n`,\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}\n\nexport default async function(req: Request) {\n const { searchParams: qs } = new URL(req.url);\n\n const header = html`\n

${NAME.split(\"/\")[0]} Authentication - Sign In

\n `;\n\n const clientToken = qs.get(\"clientToken\");\n let clientPayload;\n try {\n clientPayload = clientToken && await verifyThirdParty(clientToken, {\n audience: NAME,\n }, (payload) => {\n console.log(payload);\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n const returnTo = payload.returnTo?.match(/^@\\w+\\/\\w+/)?.[0];\n return `${returnTo}/requestAuth`;\n });\n } catch (e) {\n console.log(\"error verifying clientPayload\", e);\n }\n\n if (qs.get(\"logout\")) {\n const res = htmlResponse`\n ${Layout`\n ${header}\n Successfully signed out! You may close this tab\n `}\n `;\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!clientPayload) {\n return htmlResponse`\n ${Layout`\n ${header}\n Invalid request. Maybe it expired?
\n Go Back\n `}\n `;\n }\n\n const { returnTo } = clientPayload;\n\n if (qs.get(\"token\")) {\n try {\n await verifyToken(qs.get(\"token\"), {\n verifyCustomClaims: {\n scope: `${NAME}/signin`,\n },\n });\n const cookie = await createToken({\n scope: `${NAME}/auth`,\n aud: NAME,\n iss: NAME,\n sub: NAME,\n });\n const redirectQS = new URLSearchParams();\n redirectQS.set(\"clientToken\", clientToken);\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: \"/?\" + redirectQS.toString(),\n },\n });\n setAuthCookie(res, cookie);\n return res;\n } catch (e) {\n console.log(\"signin token validation failed\", e);\n }\n }\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verifyToken(cookie, {\n verifyCustomClaims: {\n scope: `${NAME}/auth`,\n },\n });\n } catch (e) {\n console.log(cookie);\n console.log(\"cookie token validation failed\", e);\n }\n\n if (!payload) {\n if (req.method === \"POST\") {\n emailSignInLink(clientToken);\n return htmlResponse`\n ${Layout`\n ${header}\n Please check your email to find the sign in link. You may close this tab\n `}\n `;\n }\n return htmlResponse`\n ${Layout`\n ${header}\n \n `}\n `;\n }\n\n const requiredScopes = [\n `${NAME}/id`,\n ];\n\n if (req.method !== \"POST\") {\n const scopeDescriptions = await authDescribeScopes([\n ...requiredScopes,\n ...clientPayload.requestScope,\n ]);\n\n const res = htmlResponse`\n ${Layout`\n ${header}\n

Scopes

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n\n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = returnTo.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await createToken({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n}","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport type { JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { authDescribeScopes } from \"https://esm.town/v/postpostscript/authDescribeScopes\";\nimport { html, htmlResponse, Layout } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, type JWTVerifyOptions, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { format } from \"https://esm.town/v/postpostscript/multiFormat\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nexport const SCOPES = {\n id: \"provides proof that you are you\",\n};\n\nconst { author: AUTHOR, slug, httpEndpoint: ENDPOINT } = extractValInfo(import.meta.url);\nexport const NAME = \"@\" + slug;\nexport const COOKIE_NAME = \"AUTH_ID_TOKEN\";\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n if (token === undefined) {\n deleteCookie(res.headers, COOKIE_NAME);\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n });\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function createToken(\n payload: {\n sub?: string;\n scope: string;\n aud?: string | string[];\n nbf?: number;\n iat?: number;\n jti?: string;\n },\n exp: string | number | Date = \"1h\",\n) {\n return generate({\n jti: crypto.randomUUID(),\n ...payload,\n }, exp);\n}\n\nexport async function verifyToken(token: string, options: JWTVerifyOptions = {}) {\n return verify(token, {\n audience: NAME,\n issuer: NAME,\n ...options,\n });\n}\n\nexport async function emailSignInLink(clientToken: string) {\n const minutes = 15;\n const token = await createToken({\n scope: `${NAME}/signin`,\n aud: NAME,\n iss: NAME,\n }, `${minutes}m`);\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", clientToken);\n qs.set(\"token\", token);\n return email({\n subject: \"Sign In Request\",\n\n ...format.Trim`\n${format.Link(`${ENDPOINT}/?${qs.toString()}`, format.Plain`Sign In`)}\n${format.Small`This link will expire in ${minutes.toString()} minutes.`}\n`,\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}\n\nexport default async function(req: Request) {\n const { searchParams: qs } = new URL(req.url);\n\n const header = html`\n

${NAME.split(\"/\")[0]} Authentication - Sign In

Accept/Reject Scopes

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n\n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = returnTo.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await createToken({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n}","createdAt",["D",1709488187617],"branchVersion","branchId","41a3018c-2760-11f0-86ff-569c3dd06744","id","41a2a6a6-2760-11f0-86ff-569c3dd06744","authId",["D",1746195481998],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",188,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","postpostscript","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":161,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":31,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":162,"_79":163,"_81":164,"_83":25},"tree",[152,153],"files",[152,153],"counts",{"_141":61,"_142":137,"_143":144,"_145":146,"_147":148},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":138,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_27":140},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"46036be0-2760-11f0-86ff-569c3dd06744","parentId","latest",["D",1709488187617],184,"label",[28],"41a55f36-2760-11f0-86ff-569c3dd06744","README.md","41a55fa4-2760-11f0-86ff-569c3dd06744",1,["D",1708884168790],"Migrated from folder: Auth/authId",[135],"pulls","branches","forks",2,"envVars",{"_149":61,"_151":61},"connections",{"_149":61,"_150":61},"count","unfilledCount","emptyCount",{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":158,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_155":159,"_27":160},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":154,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_155":156,"_27":157},["D",1709488187617],"children",[],[28],["D",1708884168790],[],[135],["D",1746195481998],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":198,"_199":200,"_201":202,"_203":25,"_204":25,"_205":25,"_206":49,"_207":-5,"_208":-7,"_209":-7,"_210":61,"_211":25,"_212":25,"_213":-5,"_214":25,"_215":25,"_216":25,"_217":-5},"ENV",{"_169":170,"_171":172,"_173":85,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v185