[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_151":152,"_153":154},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":36,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":25,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","808837fa-2760-11f0-86ff-569c3dd06744","name","fileType","script","content","","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport type { JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { authDescribeScopes } from \"https://esm.town/v/postpostscript/authDescribeScopes\";\nimport { html, htmlResponse, Layout } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, type JWTVerifyOptions, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { format } from \"https://esm.town/v/postpostscript/multiFormat\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nexport const SCOPES = {\n id: \"provides proof that you are you\",\n};\n\nconst { author: AUTHOR, slug, httpEndpoint: ENDPOINT } = extractValInfo(import.meta.url);\nexport const NAME = \"@\" + slug;\nexport const COOKIE_NAME = \"AUTH_ID_TOKEN\";\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n if (token === undefined) {\n deleteCookie(res.headers, COOKIE_NAME);\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n });\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function createToken(\n payload: {\n sub?: string;\n scope: string;\n aud?: string | string[];\n nbf?: number;\n iat?: number;\n jti?: string;\n },\n exp: string | number | Date = \"1h\",\n) {\n return generate({\n jti: crypto.randomUUID(),\n ...payload,\n }, exp);\n}\n\nexport async function verifyToken(token: string, options: JWTVerifyOptions = {}) {\n return verify(token, {\n audience: NAME,\n issuer: NAME,\n ...options,\n });\n}\n\nexport async function emailSignInLink(clientToken: string) {\n const minutes = 15;\n const token = await createToken({\n scope: `${NAME}/signin`,\n aud: NAME,\n iss: NAME,\n }, `${minutes}m`);\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", clientToken);\n qs.set(\"token\", token);\n return email({\n subject: \"Sign In Request\",\n\n ...format.Trim`\n${format.Link(`${ENDPOINT}/?${qs.toString()}`, format.Plain`Sign In`)}\n${format.Small`This link will expire in ${minutes.toString()} minutes.`}\n`,\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}\n\nexport default async function(req: Request) {\n const { searchParams: qs } = new URL(req.url);\n\n const header = html`\n

${NAME.split(\"/\")[0]} Authentication - Sign In

\n `;\n\n const clientToken = qs.get(\"clientToken\");\n let clientPayload;\n try {\n clientPayload = clientToken && await verifyThirdParty(clientToken, {\n audience: NAME,\n }, (payload) => {\n console.log(payload);\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n const returnTo = payload.returnTo?.match(/^@\\w+\\/\\w+/)?.[0];\n return `${returnTo}/requestAuth`;\n });\n } catch (e) {\n console.log(\"error verifying clientPayload\", e);\n }\n\n if (qs.get(\"logout\")) {\n const res = htmlResponse`\n ${Layout`\n ${header}\n Successfully signed out! You may close this tab\n `}\n `;\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!clientPayload) {\n return htmlResponse`\n ${Layout`\n ${header}\n Invalid request. Maybe it expired?
\n Go Back\n `}\n `;\n }\n\n const { returnTo } = clientPayload;\n\n if (qs.get(\"token\")) {\n try {\n await verifyToken(qs.get(\"token\"), {\n verifyCustomClaims: {\n scope: `${NAME}/signin`,\n },\n });\n const cookie = await createToken({\n scope: `${NAME}/auth`,\n aud: NAME,\n iss: NAME,\n sub: NAME,\n });\n const redirectQS = new URLSearchParams();\n redirectQS.set(\"clientToken\", clientToken);\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: \"/?\" + redirectQS.toString(),\n },\n });\n setAuthCookie(res, cookie);\n return res;\n } catch (e) {\n console.log(\"signin token validation failed\", e);\n }\n }\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verifyToken(cookie, {\n verifyCustomClaims: {\n scope: `${NAME}/auth`,\n },\n });\n } catch (e) {\n console.log(cookie);\n console.log(\"cookie token validation failed\", e);\n }\n\n if (!payload) {\n if (req.method === \"POST\") {\n emailSignInLink(clientToken);\n return htmlResponse`\n ${Layout`\n ${header}\n Please check your email to find the sign in link. You may close this tab\n `}\n `;\n }\n return htmlResponse`\n ${Layout`\n ${header}\n \n `}\n `;\n }\n\n const requiredScopes = [\n `${NAME}/id`,\n ];\n\n if (req.method !== \"POST\") {\n const scopeDescriptions = await authDescribeScopes([\n ...requiredScopes,\n ...clientPayload.requestScope,\n ]);\n\n const res = htmlResponse`\n ${Layout`\n ${header}\n

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n\n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = returnTo.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await createToken({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n}","createdAt",["D",1709490911702],"branchVersion","branchId","80855ada-2760-11f0-86ff-569c3dd06744","id","8084fb58-2760-11f0-86ff-569c3dd06744","authIdBase",["D",1746195587500],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",31,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","postpostscript","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":147,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":148,"_79":149,"_81":150,"_83":25},"tree",[142],"files",[142],"counts",{"_132":61,"_133":129,"_134":61,"_135":136,"_137":138},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":128,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_27":131},"808f28f8-2760-11f0-86ff-569c3dd06744","parentId","latest",["D",1709490911702],1,"label",[28],"pulls","branches","forks","envVars",{"_139":61,"_141":61},"connections",{"_139":61,"_140":61},"count","unfilledCount","emptyCount",{"_43":125,"_32":28,"_30":31,"_126":-5,"_41":42,"_40":14,"_127":25,"_38":143,"_13":129,"_33":34,"_35":37,"_24":25,"_130":-5,"_144":145,"_27":146},["D",1709490911702],"children",[],[28],["D",1746195587500],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_121":184,"_185":186,"_187":188,"_189":25,"_190":25,"_191":25,"_192":49,"_193":-5,"_194":-7,"_195":-7,"_196":61,"_197":25,"_198":25,"_199":-5,"_200":25,"_201":25,"_202":25,"_203":-5},"ENV",{"_155":156,"_157":158,"_159":85,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2