[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_164":165,"_166":167},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":25,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",27,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","3d516826-2760-11f0-86ff-569c3dd06744","name","fileType","script","content","import * as jose from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nexport type { JWK, JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { getValEndpointFromName, getValNameFromUrl } from \"https://esm.town/v/postpostscript/meta\";\nimport { trackUse } from \"https://esm.town/v/postpostscript/trackUse\";\n\nexport type JWTCustomClaims = Record;\n\nexport type JWTVerifyOptions = jose.JWTVerifyOptions & {\n verifyCustomClaims?: Record | ((payload: jose.JWTPayload) => MaybePromise>);\n customClaimVerifiers?: Record;\n};\n\nexport type JWTCustomClaimVerifier = (payload: jose.JWTPayload, claim: unknown) => MaybePromise;\n\nexport function createVerifyMethod(keys: () => MaybePromise) {\n return async function verify(\n token: string,\n options: JWTVerifyOptions,\n ) {\n const publicKey = await jose.importJWK((await keys())[0]);\n const { payload } = await jose.jwtVerify(token, publicKey, options);\n const customClaims = options.verifyCustomClaims && (\n options.verifyCustomClaims instanceof Function\n ? options.verifyCustomClaims(payload)\n : options.verifyCustomClaims\n );\n await verifyCustomClaims(payload, customClaims || {}, options.customClaimVerifiers ?? defaultCustomClaimVerifiers);\n return payload;\n };\n}\n\nexport function createGenerateMethod(keys: () => MaybePromise) {\n return async function generate(payload: any, exp?: string | number | Date) {\n const _keys = await keys();\n const privateKey = await jose.importJWK(_keys[0]);\n\n let jwt = new jose.SignJWT(payload)\n .setProtectedHeader({ alg: _keys[0].alg })\n .setIssuedAt();\n\n if (exp) {\n jwt = jwt.setExpirationTime(exp);\n }\n\n return jwt.sign(privateKey);\n };\n}\n\nexport async function verifyThirdParty(\n token: string,\n options: JWTVerifyOptions = {},\n) {\n const payload = decode(token);\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n if (!author) {\n throw new Error(\"issuer does not match the format `@handle/name`\");\n }\n const url = getValEndpointFromName(`@${author}/jwks`);\n const method = createVerifyMethod(() => {\n return fetch(url)\n .then(res => res.json())\n .then(({ keys }) => keys);\n });\n return method(token, options);\n}\n\nexport function decode(token: string) {\n return jose.decodeJwt(token);\n}\n\nexport const defaultCustomClaimVerifiers: Record = {\n scope(payload, claimValue) {\n const scopes = claimValue instanceof Array\n ? claimValue\n : [claimValue];\n const payloadScopes = typeof payload.scope === \"string\"\n ? payload.scope.split(\" \")\n : payload.scope;\n if (!(payloadScopes instanceof Array)) {\n return false;\n }\n const payloadScopesSet = new Set(payloadScopes);\n return scopes.every(scope => payloadScopesSet.has(scope));\n },\n\n async maxUses(payload, claimValue) {\n if (typeof claimValue !== \"number\") {\n throw new Error(\"option verifyCustomClaims.maxUses must be a number\");\n }\n if (!payload.jti) {\n throw new Error(\"payload `jti` is not set\");\n }\n await trackUse({\n value: payload.jti,\n max: claimValue,\n delete_after: payload.exp,\n });\n return true;\n },\n};\n\nexport class JWTCustomClaimVerificationFailed extends Error {\n failures: Record;\n\n constructor(message: string, failures: Record, options: ErrorOptions = {}) {\n super(message, options);\n this.failures = failures;\n }\n}\n\nexport async function verifyCustomClaims(\n payload,\n customClaims: Record,\n customClaimVerifiers = defaultCustomClaimVerifiers,\n) {\n const failures: {\n [key in keyof typeof customClaims]: string | Error | undefined;\n } = {};\n const results = await Promise.all(\n Object.entries(customClaims).map(async ([key, value]) => {\n if (!(key in customClaimVerifiers)) {\n failures[key] = `custom claim \"${key}\" does not have a verifier defined`;\n return false;\n }\n try {\n const res = await customClaimVerifiers[key](payload, value);\n if (!res) {\n failures[key] = `custom claim \"${key}\" verification failed for an undisclosed reason`;\n }\n return res;\n } catch (e) {\n failures[key] = e;\n }\n return false;\n }),\n );\n if (results.every(Boolean)) {\n return true;\n }\n const failedKeys = Object.keys(failures);\n throw new JWTCustomClaimVerificationFailed(`claim verifications failed: ${JSON.stringify(failedKeys)}`, failures);\n}","import * as jose from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nexport type { JWK, JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { getValEndpointFromName, getValNameFromUrl } from \"https://esm.town/v/postpostscript/meta\";\nimport { trackUse } from \"https://esm.town/v/postpostscript/trackUse\";\n\nexport type JWTCustomClaims = Record;\n\nexport type JWTVerifyOptions = jose.JWTVerifyOptions & {\n verifyCustomClaims?: Record | ((payload: jose.JWTPayload) => MaybePromise>);\n customClaimVerifiers?: Record;\n};\n\nexport type JWTCustomClaimVerifier = (payload: jose.JWTPayload, claim: unknown) => MaybePromise;\n\nexport function createVerifyMethod(keys: () => MaybePromise) {\n return async function verify(\n token: string,\n options: JWTVerifyOptions,\n ) {\n const publicKey = await jose.importJWK((await keys())[0]);\n const { payload } = await jose.jwtVerify(token, publicKey, options);\n const customClaims = options.verifyCustomClaims && (\n options.verifyCustomClaims instanceof Function\n ? await options.verifyCustomClaims(payload)\n : options.verifyCustomClaims\n );\n await verifyCustomClaims(payload, customClaims || {}, options.customClaimVerifiers ?? defaultCustomClaimVerifiers);\n return payload;\n };\n}\n\nexport function createGenerateMethod(keys: () => MaybePromise) {\n return async function generate(payload: any, exp?: string | number | Date) {\n const _keys = await keys();\n const privateKey = await jose.importJWK(_keys[0]);\n\n let jwt = new jose.SignJWT(payload)\n .setProtectedHeader({ alg: _keys[0].alg })\n .setIssuedAt();\n\n if (exp) {\n jwt = jwt.setExpirationTime(exp);\n }\n\n return jwt.sign(privateKey);\n };\n}\n\nexport async function verifyThirdParty(\n token: string,\n options: JWTVerifyOptions = {},\n) {\n const payload = decode(token);\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n if (!author) {\n throw new Error(\"issuer does not match the format `@handle/name`\");\n }\n const url = getValEndpointFromName(`@${author}/jwks`);\n const method = createVerifyMethod(() => {\n return fetch(url)\n .then(res => res.json())\n .then(({ keys }) => keys);\n });\n return method(token, options);\n}\n\nexport function decode(token: string) {\n return jose.decodeJwt(token);\n}\n\nexport const defaultCustomClaimVerifiers: Record = {\n scope(payload, claimValue) {\n const scopes = claimValue instanceof Array\n ? claimValue\n : [claimValue];\n const payloadScopes = typeof payload.scope === \"string\"\n ? payload.scope.split(\" \")\n : payload.scope;\n if (!(payloadScopes instanceof Array)) {\n return false;\n }\n const payloadScopesSet = new Set(payloadScopes);\n return scopes.every(scope => payloadScopesSet.has(scope));\n },\n\n async maxUses(payload, claimValue) {\n if (typeof claimValue !== \"number\") {\n throw new Error(\"option verifyCustomClaims.maxUses must be a number\");\n }\n if (!payload.jti) {\n throw new Error(\"payload `jti` is not set\");\n }\n await trackUse({\n value: payload.jti,\n max: claimValue,\n delete_after: payload.exp,\n });\n return true;\n },\n};\n\nexport class JWTCustomClaimVerificationFailed extends Error {\n failures: Record;\n\n constructor(message: string, failures: Record, options: ErrorOptions = {}) {\n super(message, options);\n this.failures = failures;\n }\n}\n\nexport async function verifyCustomClaims(\n payload,\n customClaims: Record,\n customClaimVerifiers = defaultCustomClaimVerifiers,\n) {\n const failures: {\n [key in keyof typeof customClaims]: string | Error | undefined;\n } = {};\n const results = await Promise.all(\n Object.entries(customClaims).map(async ([key, value]) => {\n if (!(key in customClaimVerifiers)) {\n failures[key] = `custom claim \"${key}\" does not have a verifier defined`;\n return false;\n }\n try {\n const res = await customClaimVerifiers[key](payload, value);\n if (!res) {\n failures[key] = `custom claim \"${key}\" verification failed for an undisclosed reason`;\n }\n return res;\n } catch (e) {\n failures[key] = e;\n }\n return false;\n }),\n );\n if (results.every(Boolean)) {\n return true;\n }\n const failedKeys = Object.keys(failures);\n throw new JWTCustomClaimVerificationFailed(`claim verifications failed: ${JSON.stringify(failedKeys)}`, failures);\n}","createdAt",["D",1709482512226],"branchVersion","branchId","3d4f078e-2760-11f0-86ff-569c3dd06744","id","3d4e23e6-2760-11f0-86ff-569c3dd06744","jwksUtils",["D",1746195474734],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",31,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","postpostscript","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":160,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":161,"_79":162,"_81":163,"_83":25},"tree",[151,152],"files",[151,152],"counts",{"_141":61,"_142":137,"_143":61,"_144":145,"_146":147},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":138,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_27":140},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"3de44290-2760-11f0-86ff-569c3dd06744","parentId","latest",["D",1709482512226],26,"label",[28],"3d516c5e-2760-11f0-86ff-569c3dd06744","README.md","3d516ce0-2760-11f0-86ff-569c3dd06744",1,["D",1709048552828],"Migrated from folder: Auth/jwksUtils",[135],"pulls","branches","forks","envVars",{"_148":61,"_150":61},"connections",{"_148":61,"_149":61},"count","unfilledCount","emptyCount",{"_43":134,"_32":135,"_30":136,"_128":-5,"_41":42,"_40":137,"_129":49,"_38":157,"_13":61,"_33":20,"_35":139,"_24":25,"_132":-5,"_154":158,"_27":159},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":153,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_154":155,"_27":156},["D",1709482512226],"children",[],[28],["D",1709048552828],[],[135],["D",1746195474734],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":197,"_198":199,"_200":201,"_202":25,"_203":25,"_204":25,"_205":49,"_206":-5,"_207":-7,"_208":-7,"_209":61,"_210":25,"_211":25,"_212":-5,"_213":25,"_214":25,"_215":25,"_216":-5},"ENV",{"_168":169,"_170":171,"_172":85,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v27