[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":25,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",22,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","808837fa-2760-11f0-86ff-569c3dd06744","name","fileType","script","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport type { JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { authDescribeScopes } from \"https://esm.town/v/postpostscript/authDescribeScopes\";\nimport { html, htmlResponse, Layout } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, type JWTVerifyOptions, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { format } from \"https://esm.town/v/postpostscript/multiFormat\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst COOKIE_NAME = \"AUTH_ID_TOKEN\";\n\nexport function authId(url: string) {\n const SCOPES = {\n id: \"provides proof that you are you\",\n };\n\n const { author: AUTHOR, slug, httpEndpoint: ENDPOINT } = extractValInfo(url);\n const NAME = \"@\" + slug;\n\n async function emailSignInLink(clientToken: string) {\n const minutes = 15;\n const token = await generate({\n scope: `${NAME}/signin`,\n aud: NAME,\n iss: NAME,\n }, `${minutes}m`);\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", clientToken);\n qs.set(\"token\", token);\n return email({\n subject: \"Sign In Request\",\n\n ...format.Trim`\n ${format.Link(`${ENDPOINT}/?${qs.toString()}`, format.Plain`Sign In`)}\n ${format.Small`This link will expire in ${minutes.toString()} minutes.`}\n `,\n });\n }\n\n async function handler(req: Request) {\n const { searchParams: qs } = new URL(req.url);\n\n const header = html`\n

Sign In as ${NAME.split(\"/\")[0]}

\n `;\n\n const clientToken = qs.get(\"clientToken\");\n let clientPayload;\n try {\n clientPayload = clientToken && await verifyThirdParty(clientToken, {\n audience: NAME,\n custom(payload) {\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n const returnTo = payload.returnTo?.match(/^@\\w+\\/\\w+/)?.[0];\n return {\n scope: `${returnTo}/requestAuth`,\n };\n },\n });\n } catch (e) {\n console.log(\"error verifying clientPayload\", e);\n }\n\n if (qs.get(\"logout\")) {\n const res = htmlResponse`\n ${Layout`\n ${header}\n Successfully signed out! You may close this tab\n `}\n `;\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!clientPayload) {\n return htmlResponse`\n ${Layout`\n ${header}\n Invalid request. Maybe it expired?
\n Go Back\n `}\n `;\n }\n\n const { returnTo } = clientPayload;\n\n if (qs.get(\"token\")) {\n try {\n await verify(qs.get(\"token\"), {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/signin`,\n },\n });\n const cookie = await generate({\n scope: `${NAME}/auth`,\n aud: NAME,\n iss: NAME,\n sub: NAME,\n }, \"1h\");\n const redirectQS = new URLSearchParams();\n redirectQS.set(\"clientToken\", clientToken);\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: \"/?\" + redirectQS.toString(),\n },\n });\n setAuthCookie(res, cookie);\n return res;\n } catch (e) {\n console.log(\"signin token validation failed\", e);\n }\n }\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verify(cookie, {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/auth`,\n },\n });\n } catch (e) {\n console.log(\"cookie token validation failed\", e);\n }\n\n if (!payload) {\n if (req.method === \"POST\") {\n emailSignInLink(clientToken);\n return htmlResponse`\n ${Layout`\n ${header}\n Please check your email to find the sign in link. You may close this tab\n `}\n `;\n }\n\n return htmlResponse`\n ${Layout`\n ${header}\n \n `}\n `;\n }\n\n const requiredScopes = [\n `${NAME}/id`,\n ];\n\n if (req.method !== \"POST\") {\n const scopeDescriptions = await authDescribeScopes([\n ...requiredScopes,\n ...clientPayload.requestScope,\n ]);\n\n const res = htmlResponse`\n ${Layout`\n ${header}\n

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n \n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

Sign In as ${NAME.split(\"/\")[0]}

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n \n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = scope.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await generate({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }, \"1h\"),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n }\n\n return {\n SCOPES,\n handler,\n };\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n const attributes = {\n name: COOKIE_NAME,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n };\n if (token === undefined) {\n deleteCookie(res.headers, COOKIE_NAME, attributes);\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\n\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}","createdAt",["D",1709688233260],"branchVersion","branchId","80855ada-2760-11f0-86ff-569c3dd06744","id","8084fb58-2760-11f0-86ff-569c3dd06744","authIdBase",["D",1746195587500],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",31,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","postpostscript","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":150,"_79":151,"_81":152,"_83":25},"tree",[144],"files",[144],"counts",{"_133":61,"_134":135,"_136":61,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"811a7340-2760-11f0-86ff-569c3dd06744","parentId","latest",["D",1709688233260],21,"label",[28],"pulls","branches",1,"forks","envVars",{"_141":61,"_143":61},"connections",{"_141":61,"_142":61},"count","unfilledCount","emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":145,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_146":147,"_27":148},["D",1709688233260],"children",[],[28],["D",1746195587500],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":49,"_195":-5,"_196":-7,"_197":-7,"_198":61,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":85,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22