[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_164":165,"_166":167},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":25,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",199,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","7a509a44-2760-11f0-86ff-569c3dd06744","name","fileType","script","content","import { getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { getAuthCookie, setAuthCookie } from \"https://esm.town/v/postpostscript/authIdBase\";\nimport { html, htmlResponse, Layout, RawHTML } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport { decode, type JWTPayload, type JWTVerifyOptions } from \"https://esm.town/v/postpostscript/jwksUtils\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { Profile } from \"https://esm.town/v/postpostscript/ProfileImage\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport type { HonoRequest } from \"npm:hono\";\n\ntype MaybeMethod = T | ((req: Request, payload: JWTPayload) => MaybePromise);\ntype MaybeNameMethod = T | ((req: Request, name: string) => MaybePromise);\n\nexport type AuthMiddlewareOptions = {\n rootVal?: ReturnType;\n verify?: JWTVerifyOptions;\n requestScope?: MaybeNameMethod;\n title?: string;\n templates?: Partial;\n};\n\nasync function normalizeOption(value: MaybeMethod, req: Request, payload: JWTPayload): Promise {\n return value instanceof Function\n ? await value(req, payload)\n : value;\n}\n\nexport function getRequestContextRequest(context: ImplementsRequestContext) {\n return \"raw\" in context.req\n ? context.req.raw\n : context.req;\n}\n\nexport interface ImplementsRequestContext<\n Env extends { Variables: AuthContextVariables } = { Variables: AuthContextVariables },\n> {\n req: Request | HonoRequest;\n set: Env extends { Variables: infer Variables } ? (key: K, value: Variables[K]) => void\n : (key: string, value: any) => void;\n get: Env extends { Variables: infer Variables } ? (key: K) => Variables[K]\n : (key: string) => any;\n}\n\nexport function authWrapperCookie(\n handler: (req: Request, context: ImplementsRequestContext) => MaybePromise,\n options: AuthMiddlewareOptions & {\n createResponse?: (\n context: ImplementsRequestContext,\n content: RawHTML,\n init?: ResponseInit,\n ) => MaybePromise;\n } = {},\n) {\n const middleware = authMiddlewareCookie(options);\n\n return (req: Request) => {\n const data = new Map();\n const context = {\n req,\n set(key, value) {\n return data.set(key, value);\n },\n get(key) {\n return data.get(key);\n },\n };\n\n return middleware(context, () => {\n return handler(req, context);\n });\n };\n}\n\nexport function authWrapperToken(\n handler: (req: Request, context: ImplementsRequestContext) => MaybePromise,\n options: AuthMiddlewareOptions & {\n createResponse?: (\n context: ImplementsRequestContext,\n content: unknown,\n init?: ResponseInit,\n ) => MaybePromise;\n } = {},\n) {\n const middleware = authMiddlewareToken(options);\n\n return (req: Request) => {\n const data = new Map();\n const context = {\n req,\n set(key, value) {\n return data.set(key, value);\n },\n get(key) {\n return data.get(key);\n },\n };\n\n return middleware(context, () => {\n return handler(req, context);\n });\n };\n}\n\nexport function authMiddlewareToken(\n options: Omit, \"requestScope\"> & {\n createResponse?: (context: Context, content: unknown, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, createResponse, verify } = {\n rootVal: rootValRef(),\n createResponse: (context: Context, content: unknown, init: ResponseInit = {}) => {\n return Response.json(content, init);\n },\n ...options,\n };\n\n const HANDLER_NAME = `@${handle}/${name}`;\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n const qs = new URLSearchParams(req.url.split(\"?\")[1]);\n\n const token = req.headers.get(\"Authorization\")?.replace(/^Bearer\\s+/, \"\");\n let payload;\n try {\n payload = token && await verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n } catch (e) {\n console.log(\"auth token validation failed\", e);\n }\n\n if (!payload) {\n return createResponse(context, {\n \"error\": \"invalid Authorization token\",\n }, {\n status: 403,\n });\n }\n\n context.set(\"token\", token);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport function authMiddlewareTokenQS(\n options: Omit, \"requestScope\"> & {\n createResponse?: (context: Context, content: unknown, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, createResponse, verify } = {\n rootVal: rootValRef(),\n createResponse: (context: Context, content: unknown, init: ResponseInit = {}) => {\n return Response.json(content, init);\n },\n ...options,\n };\n\n const HANDLER_NAME = `@${handle}/${name}`;\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n const { searchParams } = new URL(req.url);\n\n const token = searchParams.get(\"token\");\n let payload;\n try {\n payload = token && await verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n } catch (e) {\n console.log(\"qs token validation failed\", e);\n }\n\n if (!payload) {\n return createResponse(context, {\n \"error\": \"invalid Authorization token\",\n }, {\n status: 403,\n });\n }\n\n context.set(\"token\", token);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport function authMiddlewareCookie(\n options: AuthMiddlewareOptions & {\n rootPath?: string;\n optional?: boolean;\n createResponse?: (context: Context, content: RawHTML, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, title, requestScope, verify, rootPath: _rootPath, optional, createResponse } = {\n rootVal: rootValRef(),\n title: undefined,\n requestScope: [],\n rootPath: \"/\",\n createResponse: (context: Context, content: RawHTML, init: ResponseInit = {}) => {\n const _title = `${title ?? HANDLER_NAME} - Sign In`;\n return new Response(\n Layout({\n title,\n }, {\n default() {\n return html`\n

${_title}

\n ${content}\n `;\n },\n }).toString(),\n {\n ...init,\n headers: {\n ...init?.headers,\n \"Content-Type\": \"text/html\",\n },\n },\n );\n },\n ...options,\n };\n const HANDLER_NAME = `@${handle}/${name}`;\n const ENDPOINT = getValEndpointFromName(HANDLER_NAME);\n\n const rootPath = (_rootPath.startsWith(\"/\")\n ? _rootPath\n : `/${_rootPath}`).replace(/\\/+$/, \"\");\n\n const templates = {\n ...defaultTemplates,\n ...options.templates,\n };\n\n function verifyAuthToken(token: string, req: Request) {\n return verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n }\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n let { pathname, searchParams: qs } = new URL(req.url);\n pathname = pathname.replace(/\\/+$/, \"\").slice(rootPath.length);\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verifyAuthToken(cookie, req);\n } catch (e) {\n console.log(\"cookie token validation failed\", e);\n }\n\n if (payload && pathname === \"/login\") {\n return Response.redirect(rootPath);\n }\n\n if (pathname === \"/login\" || (pathname === \"/logout\" && req.method === \"POST\")) {\n if (req.method === \"GET\") {\n const token = qs.get(\"token\");\n const clientToken = qs.get(\"clientToken\");\n qs.delete(\"token\");\n qs.delete(\"clientToken\");\n\n let failReason: RawHTML | undefined;\n\n const tokenDecoded = token && await decode(token);\n\n const [tokenPayload, clientTokenPayload] = await Promise.all([\n token && verifyAuthToken(token, req).catch((e) => {\n console.log(\"error while parsing token qs\", e);\n failReason = html`token validation failed: ${e.message}`;\n }),\n tokenDecoded && clientToken && verifyThirdParty(clientToken, {\n audience: [HANDLER_NAME, tokenDecoded.iss],\n issuer: HANDLER_NAME,\n custom: {\n scope: `${HANDLER_NAME}/requestAuth`,\n maxUses: 1,\n },\n }).catch((e) => {\n console.log(\"error validating clientToken\", e, clientToken);\n failReason = html`clientToken validation failed: ${e.message}`;\n }),\n ]);\n\n if (tokenPayload && clientTokenPayload) {\n if (tokenPayload.clientTokenId === clientTokenPayload.jti) {\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: rootPath + \"/\" + clientTokenPayload.returnTo.replace(/^\\//, \"\") + (qs.size ? `?${qs}` : \"\"),\n },\n });\n setAuthCookie(res, token);\n return res;\n }\n failReason = html`clientToken validation failed: client token id mismatch`;\n }\n\n if (token || clientToken) {\n return createResponse(context, templates.failedLogin(failReason), {\n status: 403,\n });\n }\n return createResponse(context, templates.signInForm);\n } else if (req.method === \"POST\") {\n const formData = await req.formData();\n\n const username = formData.get(\"username\")?.trim().replace(/^\\@/, \"\").match(/^\\w+$/)?.[0];\n const val = \"authId\"; // formData.get(\"val\")?.trim().match(/^\\w+$/)?.[0];\n\n if (!(username && val)) {\n return createResponse(context, templates.signInForm, {\n status: 400,\n });\n }\n\n const name = `@${username}/${val}`;\n const endpoint = getValEndpointFromName(name);\n const returnToPath = pathname.replace(/\\/*(login|logout)\\/*$/, \"\");\n\n const newPayload = {\n iss: HANDLER_NAME,\n scope: `${HANDLER_NAME}/requestAuth`,\n aud: [name, HANDLER_NAME],\n returnTo: HANDLER_NAME + rootPath + \"/login\" + (returnToPath.slice(1) ? returnToPath : \"\"),\n };\n\n newPayload.requestScope = requestScope instanceof Function\n ? await requestScope(req, name)\n : requestScope;\n\n const token = await generate(newPayload, \"15m\");\n\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", token);\n\n return Response.redirect(`${endpoint}?${qs}`);\n }\n } else if (pathname === \"/logout\" && req.method !== \"POST\") {\n const res = await createResponse(context, templates.loggedOut);\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!payload && !optional) {\n return Response.redirect(`${ENDPOINT}${rootPath}/login`);\n }\n\n context.set(\"token\", cookie);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport const signInFormBase = html`\n \n`;\n\nexport const signInForm = html`\n ${signInFormBase}\n \n

\n If you haven't set up the required Vals jwks and authId yet, there is a guide at\n \n @postpostscript/authIdUserGuide\n \n

\n`;\n\nexport const defaultTemplates = {\n signInForm,\n\n loggedOut: html`\n

\n You are now logged out! You can close this tab.\n

\n\n ${signInForm}\n `,\n\n failedLogin: (reason: unknown) =>\n html`\n \n\n ${signInForm}\n `,\n};\n\nexport function userDisplay(payload: JWTPayload) {\n return payload.sub.replace(/\\/.*/, \"\");\n}\n\nexport function userActionsDisplay(\n payload: JWTPayload,\n {\n order = [\"language\", \"profile\", \"username\", \"logout\"],\n parts = {} as Record,\n } = {},\n) {\n const username = userDisplay(payload);\n\n const _parts: Record = {\n language: html`\n \n Signed in as\n \n `,\n profile: html`\n \n \n ${Profile(username)}\n \n \n `,\n username: html`\n \n \n ${username}\n \n \n `,\n logout: html`\n \n \n Log Out\n \n \n `,\n ...parts,\n };\n\n return html`\n \n ${order.map(key => _parts[key])}\n \n `;\n}\n\nexport type AuthContextVariables = {\n token: string;\n auth: JWTPayload;\n};\nexport type HonoEnv = {\n Variables: AuthContextVariables;\n};\nexport type HonoEnvOptional = {\n Variables: Partial;\n};","import { getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { getAuthCookie, setAuthCookie } from \"https://esm.town/v/postpostscript/authIdBase\";\nimport { html, htmlResponse, Layout, RawHTML } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport { decode, type JWTPayload, type JWTVerifyOptions } from \"https://esm.town/v/postpostscript/jwksUtils\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { Profile } from \"https://esm.town/v/postpostscript/ProfileImage\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport type { HonoRequest } from \"npm:hono\";\n\ntype MaybeMethod = T | ((req: Request, payload: JWTPayload) => MaybePromise);\ntype MaybeNameMethod = T | ((req: Request, name: string) => MaybePromise);\n\nexport type AuthMiddlewareOptions = {\n rootVal?: ReturnType;\n verify?: JWTVerifyOptions;\n requestScope?: MaybeNameMethod;\n title?: string;\n templates?: Partial;\n};\n\nasync function normalizeOption(value: MaybeMethod, req: Request, payload: JWTPayload): Promise {\n return value instanceof Function\n ? await value(req, payload)\n : value;\n}\n\nexport function getRequestContextRequest(context: ImplementsRequestContext) {\n return \"raw\" in context.req\n ? context.req.raw\n : context.req;\n}\n\nexport interface ImplementsRequestContext<\n Env extends { Variables: AuthContextVariables } = { Variables: AuthContextVariables },\n> {\n req: Request | HonoRequest;\n set: Env extends { Variables: infer Variables } ? (key: K, value: Variables[K]) => void\n : (key: string, value: any) => void;\n get: Env extends { Variables: infer Variables } ? (key: K) => Variables[K]\n : (key: string) => any;\n}\n\nexport function authWrapperCookie(\n handler: (req: Request, context: ImplementsRequestContext) => MaybePromise,\n options: AuthMiddlewareOptions & {\n createResponse?: (\n context: ImplementsRequestContext,\n content: RawHTML,\n init?: ResponseInit,\n ) => MaybePromise;\n } = {},\n) {\n const middleware = authMiddlewareCookie(options);\n\n return (req: Request) => {\n const data = new Map();\n const context = {\n req,\n set(key, value) {\n return data.set(key, value);\n },\n get(key) {\n return data.get(key);\n },\n };\n\n return middleware(context, () => {\n return handler(req, context);\n });\n };\n}\n\nexport function authWrapperToken(\n handler: (req: Request, context: ImplementsRequestContext) => MaybePromise,\n options: AuthMiddlewareOptions & {\n createResponse?: (\n context: ImplementsRequestContext,\n content: unknown,\n init?: ResponseInit,\n ) => MaybePromise;\n } = {},\n) {\n const middleware = authMiddlewareToken(options);\n\n return (req: Request) => {\n const data = new Map();\n const context = {\n req,\n set(key, value) {\n return data.set(key, value);\n },\n get(key) {\n return data.get(key);\n },\n };\n\n return middleware(context, () => {\n return handler(req, context);\n });\n };\n}\n\nexport function authMiddlewareToken(\n options: Omit, \"requestScope\"> & {\n createResponse?: (context: Context, content: unknown, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, createResponse, verify } = {\n rootVal: rootValRef(),\n createResponse: (context: Context, content: unknown, init: ResponseInit = {}) => {\n return Response.json(content, init);\n },\n ...options,\n };\n\n const HANDLER_NAME = `@${handle}/${name}`;\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n const qs = new URLSearchParams(req.url.split(\"?\")[1]);\n\n const token = req.headers.get(\"Authorization\")?.replace(/^Bearer\\s+/, \"\");\n let payload;\n try {\n payload = token && await verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n } catch (e) {\n console.log(\"auth token validation failed\", e);\n }\n\n if (!payload) {\n return createResponse(context, {\n \"error\": \"invalid Authorization token\",\n }, {\n status: 403,\n });\n }\n\n context.set(\"token\", token);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport function authMiddlewareTokenQS(\n options: Omit, \"requestScope\"> & {\n createResponse?: (context: Context, content: unknown, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, createResponse, verify } = {\n rootVal: rootValRef(),\n createResponse: (context: Context, content: unknown, init: ResponseInit = {}) => {\n return Response.json(content, init);\n },\n ...options,\n };\n\n const HANDLER_NAME = `@${handle}/${name}`;\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n const { searchParams } = new URL(req.url);\n\n const token = searchParams.get(\"token\");\n let payload;\n try {\n payload = token && await verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n } catch (e) {\n console.log(\"qs token validation failed\", e);\n }\n\n if (!payload) {\n return createResponse(context, {\n \"error\": \"invalid Authorization token\",\n }, {\n status: 403,\n });\n }\n\n context.set(\"token\", token);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport function authMiddlewareCookie(\n options: AuthMiddlewareOptions & {\n rootPath?: string;\n optional?: boolean;\n createResponse?: (context: Context, content: RawHTML, init?: ResponseInit) => MaybePromise;\n } = {},\n) {\n const { rootVal: { handle, name }, title, requestScope, verify, rootPath: _rootPath, optional, createResponse } = {\n rootVal: rootValRef(),\n title: undefined,\n requestScope: [],\n rootPath: \"/\",\n createResponse: (context: Context, content: RawHTML, init: ResponseInit = {}) => {\n const _title = `${title ?? HANDLER_NAME} - Sign In`;\n return new Response(\n Layout({\n title,\n }, {\n default() {\n return html`\n

${_title}

\n ${content}\n `;\n },\n }).toString(),\n {\n ...init,\n headers: {\n ...init?.headers,\n \"Content-Type\": \"text/html\",\n },\n },\n );\n },\n ...options,\n };\n const HANDLER_NAME = `@${handle}/${name}`;\n const ENDPOINT = getValEndpointFromName(HANDLER_NAME);\n\n const rootPath = (_rootPath.startsWith(\"/\")\n ? _rootPath\n : `/${_rootPath}`).replace(/\\/+$/, \"\");\n\n const templates = {\n ...defaultTemplates,\n ...options.templates,\n };\n\n function verifyAuthToken(token: string, req: Request) {\n return verifyThirdParty(token, {\n issuer: `@${handle}/authId`,\n audience: HANDLER_NAME,\n async custom(payload) {\n const author = payload.iss.split(\"/\")[0];\n return {\n scope: [`${author}/authId/id`],\n };\n },\n ...verify,\n });\n }\n\n return async (context: Context, next: () => void) => {\n const req = getRequestContextRequest(context);\n let { pathname, searchParams: qs } = new URL(req.url);\n pathname = pathname.replace(/\\/+$/, \"\").slice(rootPath.length);\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verifyAuthToken(cookie, req);\n } catch (e) {\n console.log(\"cookie token validation failed\", e);\n }\n\n if (payload && pathname === \"/login\") {\n return Response.redirect(rootPath);\n }\n\n if (pathname === \"/login\" || (pathname === \"/logout\" && req.method === \"POST\")) {\n if (req.method === \"GET\") {\n const token = qs.get(\"token\");\n const clientToken = qs.get(\"clientToken\");\n qs.delete(\"token\");\n qs.delete(\"clientToken\");\n\n let failReason: RawHTML | undefined;\n\n const tokenDecoded = token && await decode(token);\n\n const [tokenPayload, clientTokenPayload] = await Promise.all([\n token && verifyAuthToken(token, req).catch((e) => {\n console.log(\"error while parsing token qs\", e);\n failReason = html`token validation failed: ${e.message}`;\n }),\n tokenDecoded && clientToken && verifyThirdParty(clientToken, {\n audience: [HANDLER_NAME, tokenDecoded.iss],\n issuer: HANDLER_NAME,\n custom: {\n scope: `${HANDLER_NAME}/requestAuth`,\n maxUses: 1,\n },\n }).catch((e) => {\n console.log(\"error validating clientToken\", e, clientToken);\n failReason = html`clientToken validation failed: ${e.message}`;\n }),\n ]);\n\n if (tokenPayload && clientTokenPayload) {\n if (tokenPayload.clientTokenId === clientTokenPayload.jti) {\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: rootPath + \"/\" + clientTokenPayload.returnTo.replace(/^\\//, \"\") + (qs.size ? `?${qs}` : \"\"),\n },\n });\n setAuthCookie(res, token);\n return res;\n }\n failReason = html`clientToken validation failed: client token id mismatch`;\n }\n\n if (token || clientToken) {\n return createResponse(context, templates.failedLogin(failReason), {\n status: 403,\n });\n }\n return createResponse(context, templates.signInForm);\n } else if (req.method === \"POST\") {\n const formData = await req.formData();\n\n const username = formData.get(\"username\")?.trim().replace(/^\\@/, \"\").match(/^\\w+$/)?.[0];\n const val = \"authId\"; // formData.get(\"val\")?.trim().match(/^\\w+$/)?.[0];\n\n if (!(username && val)) {\n return createResponse(context, templates.signInForm, {\n status: 400,\n });\n }\n\n const name = `@${username}/${val}`;\n const endpoint = getValEndpointFromName(name);\n const returnToPath = pathname.replace(/\\/*(login|logout)\\/*$/, \"\");\n const qs = new URLSearchParams();\n\n const newPayload = {\n iss: HANDLER_NAME,\n scope: `${HANDLER_NAME}/requestAuth`,\n aud: [name, HANDLER_NAME],\n returnTo: HANDLER_NAME + rootPath + \"/login\" + (returnToPath.slice(1) ? returnToPath : \"\"),\n };\n\n newPayload.requestScope = requestScope instanceof Function\n ? await requestScope(req, name)\n : requestScope;\n\n const token = await generate(newPayload, \"15m\");\n\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", token);\n\n return Response.redirect(`${endpoint}?${qs}`);\n }\n } else if (pathname === \"/logout\" && req.method !== \"POST\") {\n const res = await createResponse(context, templates.loggedOut);\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!payload && !optional) {\n return Response.redirect(`${ENDPOINT}${rootPath}/login`);\n }\n\n context.set(\"token\", cookie);\n context.set(\"auth\", payload);\n\n return next();\n };\n}\n\nexport const signInFormBase = html`\n \n`;\n\nexport const signInForm = html`\n ${signInFormBase}\n \n

\n If you haven't set up the required Vals jwks and authId yet, there is a guide at\n \n @postpostscript/authIdUserGuide\n \n

\n`;\n\nexport const defaultTemplates = {\n signInForm,\n\n loggedOut: html`\n

\n You are now logged out! You can close this tab.\n

\n\n ${signInForm}\n `,\n\n failedLogin: (reason: unknown) =>\n html`\n \n\n ${signInForm}\n `,\n};\n\nexport function userDisplay(payload: JWTPayload) {\n return payload.sub.replace(/\\/.*/, \"\");\n}\n\nexport function userActionsDisplay(\n payload: JWTPayload,\n {\n order = [\"language\", \"profile\", \"username\", \"logout\"],\n parts = {} as Record,\n } = {},\n) {\n const username = userDisplay(payload);\n\n const _parts: Record = {\n language: html`\n \n Signed in as\n \n `,\n profile: html`\n \n \n ${Profile(username)}\n \n \n `,\n username: html`\n \n \n ${username}\n \n \n `,\n logout: html`\n \n \n Log Out\n \n \n `,\n ...parts,\n };\n\n return html`\n \n ${order.map(key => _parts[key])}\n \n `;\n}\n\nexport type AuthContextVariables = {\n token: string;\n auth: JWTPayload;\n};\nexport type HonoEnv = {\n Variables: AuthContextVariables;\n};\nexport type HonoEnvOptional = {\n Variables: Partial;\n};","createdAt",["D",1709772806544],"branchVersion","branchId","7a4e1cec-2760-11f0-86ff-569c3dd06744","id","7a4daf28-2760-11f0-86ff-569c3dd06744","authMiddleware",["D",1746195577072],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",215,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","postpostscript","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":160,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":161,"_79":162,"_81":163,"_83":25},"tree",[151,152],"files",[151,152],"counts",{"_141":61,"_142":137,"_143":137,"_144":145,"_146":147},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":138,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_27":140},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"800a7b9e-2760-11f0-86ff-569c3dd06744","parentId","latest",["D",1709772806544],198,"label",[28],"7a509eae-2760-11f0-86ff-569c3dd06744","README.md","7a509f30-2760-11f0-86ff-569c3dd06744",1,["D",1709411892508],"# authMiddleware: middleware to protect your HTTP val\n\n## Todo\n- [ ] Human readable JWT claim validation errors",[135],"pulls","branches","forks","envVars",{"_148":61,"_150":61},"connections",{"_148":61,"_149":61},"count","unfilledCount","emptyCount",{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":157,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_154":158,"_27":159},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":153,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_154":155,"_27":156},["D",1709772806544],"children",[],[28],["D",1709411892508],[],[135],["D",1746195577072],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":197,"_198":199,"_200":201,"_202":25,"_203":25,"_204":25,"_205":49,"_206":-5,"_207":-7,"_208":-7,"_209":61,"_210":25,"_211":25,"_212":-5,"_213":25,"_214":25,"_215":25,"_216":-5},"ENV",{"_168":169,"_170":171,"_172":85,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v199