[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_205":206,"_207":208},"routes/_app.x.$handle.$name",{"_115":114,"_34":62,"_124":105,"_29":70,"_13":14,"_125":-5,"_11":126,"_127":128,"_129":130,"_131":132,"_133":134,"_22":-5,"_135":-5,"_136":-5,"_137":27,"_138":139,"_140":141,"_142":-5,"_143":-5,"_144":145},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_60":61,"_34":62,"_40":63,"_64":-5,"_65":27,"_66":67,"_68":67,"_69":70,"_71":-5,"_18":72,"_73":-5,"_74":27,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":82,"_83":84,"_85":86,"_87":-5,"_88":89,"_90":89,"_91":92,"_93":92,"_94":92,"_95":89,"_96":89,"_97":98,"_99":100,"_101":102,"_103":27},"version",15,"changes",[19,20,21],"aiChatInfo","userId",{"_22":52,"_24":53,"_26":27,"_28":27,"_29":54,"_31":54},{"_22":45,"_24":46,"_26":27,"_28":27,"_29":47,"_31":47},{"_22":23,"_24":25,"_26":27,"_28":27,"_29":30,"_31":30},"file",{"_32":33,"_34":30,"_35":36,"_37":39,"_40":41,"_42":14,"_43":44,"_26":27},"previous",{"_32":33,"_34":30,"_35":36,"_37":38},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","d1499f00-64e3-11f1-8c2c-1607ee4eb77e","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport {\n deleteUser,\n getUser,\n getUserByUserName,\n initDb,\n insertUser,\n listUsers,\n updateUser,\n type UserRow,\n} from \"./db.ts\";\nimport {\n listResponse,\n parseUserNameFilter,\n primaryEmail,\n scimError,\n type ScimUserInput,\n toScimUser,\n USER_SCHEMA,\n} from \"./scim.ts\";\n\nawait initDb();\n\nconst app = new Hono();\n// Surface real errors instead of Hono's generic 500.\napp.onError((err) => Promise.reject(err));\n\nconst SCIM_CT = { \"Content-Type\": \"application/scim+json\" };\nconst now = () => new Date().toISOString();\nconst baseUrl = (req: Request) => new URL(req.url).origin;\n\n// --- Auth: every route requires the bearer token ---\napp.use(\"*\", async (c, next) => {\n const expected = Deno.env.get(\"SCIM_TOKEN\");\n if (!expected) {\n return c.json(scimError(500, \"Server missing SCIM_TOKEN\"), 500, SCIM_CT);\n }\n if (c.req.header(\"Authorization\") !== `Bearer ${expected}`) {\n return c.json(scimError(401, \"Unauthorized\"), 401, SCIM_CT);\n }\n await next();\n});\n\n// --- Discovery endpoints Okta probes ---\napp.get(\"/ServiceProviderConfig\", (c) =>\n c.json(\n {\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\"],\n patch: { supported: true },\n bulk: { supported: false, maxOperations: 0, maxPayloadSize: 0 },\n filter: { supported: true, maxResults: 200 },\n changePassword: { supported: false },\n sort: { supported: false },\n etag: { supported: false },\n authenticationSchemes: [{\n type: \"oauthbearertoken\",\n name: \"OAuth Bearer Token\",\n description: \"Authentication via the HTTP Authorization header.\",\n }],\n },\n 200,\n SCIM_CT,\n ));\n\napp.get(\"/ResourceTypes\", (c) =>\n c.json(\n listResponse([{\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ResourceType\"],\n id: \"User\",\n name: \"User\",\n endpoint: \"/Users\",\n schema: USER_SCHEMA,\n }]),\n 200,\n SCIM_CT,\n ));\n\n// --- GET /Users (list + filter) ---\napp.get(\"/Users\", async (c) => {\n const filterUserName = parseUserNameFilter(c.req.query(\"filter\") ?? null);\n const rows = await listUsers(filterUserName ?? undefined);\n const resources = rows.map((r) => toScimUser(r, baseUrl(c.req.raw)));\n return c.json(listResponse(resources), 200, SCIM_CT);\n});\n\n// --- GET /Users/:id ---\napp.get(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- POST /Users (create) ---\napp.post(\"/Users\", async (c) => {\n const body = await c.req.json();\n if (!body.userName) {\n return c.json(scimError(400, \"userName is required\"), 400, SCIM_CT);\n }\n const existing = await getUserByUserName(body.userName);\n if (existing) {\n // 409 tells Okta the user already exists so it switches to update.\n return c.json(scimError(409, \"User already exists\"), 409, SCIM_CT);\n }\n const ts = now();\n const row: UserRow = {\n id: crypto.randomUUID(),\n userName: body.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? null,\n createdAt: ts,\n updatedAt: ts,\n };\n await insertUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 201, SCIM_CT);\n});\n\n// --- PUT /Users/:id (full replace) ---\napp.put(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json();\n const updated: UserRow = {\n ...row,\n userName: body.userName ?? row.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? row.externalId,\n updatedAt: now(),\n };\n await updateUser(updated);\n return c.json(toScimUser(updated, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- PATCH /Users/:id (partial; Okta mainly toggles `active`) ---\napp.patch(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json<\n { Operations?: Array<{ op: string; path?: string; value: unknown }> }\n >();\n for (const op of body.Operations ?? []) {\n const value = op.value as Record | boolean;\n // Handle both { path: \"active\", value: false } and { value: { active: false } }\n if (op.path === \"active\") {\n row.active = value === false || value === \"false\"\n ? 0\n : 1;\n } else if (typeof value === \"object\" && value && \"active\" in value) {\n row.active = value.active === false ? 0 : 1;\n }\n }\n row.updatedAt = now();\n await updateUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- DELETE /Users/:id ---\napp.delete(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n await deleteUser(row.id);\n return c.body(null, 204);\n});\n\napp.all(\"*\", (c) => c.json(scimError(404, \"Not found\"), 404, SCIM_CT));\n\nexport default app.fetch;","import { Hono } from \"npm:hono\";\nimport {\n deleteUser,\n getUser,\n getUserByUserName,\n initDb,\n insertUser,\n listUsers,\n updateUser,\n type UserRow,\n} from \"./db.ts\";\nimport {\n listResponse,\n parseUserNameFilter,\n primaryEmail,\n type ScimUserInput,\n scimError,\n toScimUser,\n USER_SCHEMA,\n} from \"./scim.ts\";\n\nawait initDb();\n\nconst app = new Hono();\n// Surface real errors instead of Hono's generic 500.\napp.onError((err) => Promise.reject(err));\n\nconst SCIM_CT = { \"Content-Type\": \"application/scim+json\" };\nconst now = () => new Date().toISOString();\nconst baseUrl = (req: Request) => new URL(req.url).origin;\n\n// --- Auth: every route requires the bearer token ---\napp.use(\"*\", async (c, next) => {\n const expected = Deno.env.get(\"SCIM_TOKEN\");\n if (!expected) {\n return c.json(scimError(500, \"Server missing SCIM_TOKEN\"), 500, SCIM_CT);\n }\n if (c.req.header(\"Authorization\") !== `Bearer ${expected}`) {\n return c.json(scimError(401, \"Unauthorized\"), 401, SCIM_CT);\n }\n await next();\n});\n\n// --- Discovery endpoints Okta probes ---\napp.get(\"/ServiceProviderConfig\", (c) =>\n c.json({\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\"],\n patch: { supported: true },\n bulk: { supported: false, maxOperations: 0, maxPayloadSize: 0 },\n filter: { supported: true, maxResults: 200 },\n changePassword: { supported: false },\n sort: { supported: false },\n etag: { supported: false },\n authenticationSchemes: [{\n type: \"oauthbearertoken\",\n name: \"OAuth Bearer Token\",\n description: \"Authentication via the HTTP Authorization header.\",\n }],\n }, 200, SCIM_CT));\n\napp.get(\"/ResourceTypes\", (c) =>\n c.json(listResponse([{\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ResourceType\"],\n id: \"User\",\n name: \"User\",\n endpoint: \"/Users\",\n schema: USER_SCHEMA,\n }]), 200, SCIM_CT));\n\n// --- GET /Users (list + filter) ---\napp.get(\"/Users\", async (c) => {\n const filterUserName = parseUserNameFilter(c.req.query(\"filter\") ?? null);\n const rows = await listUsers(filterUserName ?? undefined);\n const resources = rows.map((r) => toScimUser(r, baseUrl(c.req.raw)));\n return c.json(listResponse(resources), 200, SCIM_CT);\n});\n\n// --- GET /Users/:id ---\napp.get(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- POST /Users (create) ---\napp.post(\"/Users\", async (c) => {\n const body = await c.req.json();\n if (!body.userName) {\n return c.json(scimError(400, \"userName is required\"), 400, SCIM_CT);\n }\n const existing = await getUserByUserName(body.userName);\n if (existing) {\n // 409 tells Okta the user already exists so it switches to update.\n return c.json(scimError(409, \"User already exists\"), 409, SCIM_CT);\n }\n const ts = now();\n const row: UserRow = {\n id: crypto.randomUUID(),\n userName: body.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? null,\n createdAt: ts,\n updatedAt: ts,\n };\n await insertUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 201, SCIM_CT);\n});\n\n// --- PUT /Users/:id (full replace) ---\napp.put(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json();\n const updated: UserRow = {\n ...row,\n userName: body.userName ?? row.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? row.externalId,\n updatedAt: now(),\n };\n await updateUser(updated);\n return c.json(toScimUser(updated, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- PATCH /Users/:id (partial; Okta mainly toggles `active`) ---\napp.patch(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json<{ Operations?: Array<{ op: string; path?: string; value: unknown }> }>();\n for (const op of body.Operations ?? []) {\n const value = op.value as Record | boolean;\n // Handle both { path: \"active\", value: false } and { value: { active: false } }\n if (op.path === \"active\") row.active = value === false || value === \"false\" ? 0 : 1;\n else if (typeof value === \"object\" && value && \"active\" in value) {\n row.active = value.active === false ? 0 : 1;\n }\n }\n row.updatedAt = now();\n await updateUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- DELETE /Users/:id ---\napp.delete(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n await deleteUser(row.id);\n return c.body(null, 204);\n});\n\napp.all(\"*\", (c) => c.json(scimError(404, \"Not found\"), 404, SCIM_CT));\n\nexport default app.fetch;\n","createdAt",["D",1781204787102],"branchVersion","branchId","4228b4ba-b71f-48f6-b08f-de41006deb57",{"_32":48,"_34":47,"_35":36,"_37":50,"_40":51,"_42":14,"_43":44,"_26":27},{"_32":48,"_34":47,"_35":36,"_37":49},"scim.ts","62082e24-64e6-11f1-ae7c-1607ee4eb77e","import type { UserRow } from \"./db.ts\";\n\nexport const USER_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:User\";\nexport const LIST_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:ListResponse\";\nexport const ERROR_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:Error\";\n\n/** Shape Okta sends on POST/PUT. */\nexport interface ScimUserInput {\n userName?: string;\n externalId?: string;\n active?: boolean;\n name?: { givenName?: string; familyName?: string };\n emails?: Array<{ value?: string; primary?: boolean; type?: string }>;\n}\n\n/** Convert a DB row into a SCIM User resource. */\nexport function toScimUser(u: UserRow, baseUrl: string) {\n return {\n schemas: [USER_SCHEMA],\n id: u.id,\n externalId: u.externalId ?? undefined,\n userName: u.userName,\n name: {\n givenName: u.givenName ?? undefined,\n familyName: u.familyName ?? undefined,\n },\n emails: u.email ? [{ value: u.email, primary: true }] : [],\n active: u.active === 1,\n meta: {\n resourceType: \"User\",\n created: u.createdAt,\n lastModified: u.updatedAt,\n location: `${baseUrl}/Users/${u.id}`,\n },\n };\n}\n\nexport function listResponse(resources: object[], startIndex = 1) {\n return {\n schemas: [LIST_SCHEMA],\n totalResults: resources.length,\n startIndex,\n itemsPerPage: resources.length,\n Resources: resources,\n };\n}\n\nexport function scimError(status: number, detail: string) {\n return { schemas: [ERROR_SCHEMA], status: String(status), detail };\n}\n\n/** Extract the primary (or first) email from an incoming SCIM payload. */\nexport function primaryEmail(body: ScimUserInput): string | null {\n if (!body.emails?.length) return null;\n const primary = body.emails.find((e) => e.primary) ?? body.emails[0];\n return primary?.value ?? null;\n}\n\n/**\n * Parse a SCIM filter like: userName eq \"john@example.com\"\n * Returns the userName value, or null if the filter isn't a userName-eq filter.\n */\nexport function parseUserNameFilter(filter: string | null): string | null {\n if (!filter) return null;\n const m = filter.match(/userName\\s+eq\\s+\"([^\"]+)\"/i);\n return m ? m[1] : null;\n}\n\nexport const GROUP_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:Group\";\n\nexport interface ScimGroupInput {\n displayName?: string;\n members?: Array<{\n value: string;\n display?: string;\n }>;\n}\n\nexport function toScimGroup(g: GroupRow, baseUrl: string) {\n return {\n schemas: [GROUP_SCHEMA],\n id: g.id,\n displayName: g.displayName,\n meta: {\n resourceType: \"Group\",\n created: g.createdAt,\n lastModified: g.updatedAt,\n location: `${baseUrl}/Groups/${g.id}`,\n },\n };\n}\n\nexport function parseDisplayNameFilter(\n filter: string | null,\n): string | null {\n if (!filter) return null;\n\n const m = filter.match(\n /displayName\\s+eq\\s+\"([^\"]+)\"/i,\n );\n\n return m ? m[1] : null;\n}","import type { UserRow } from \"./db.ts\";\n\nexport const USER_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:User\";\nexport const LIST_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:ListResponse\";\nexport const ERROR_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:Error\";\n\n/** Shape Okta sends on POST/PUT. */\nexport interface ScimUserInput {\n userName?: string;\n externalId?: string;\n active?: boolean;\n name?: { givenName?: string; familyName?: string };\n emails?: Array<{ value?: string; primary?: boolean; type?: string }>;\n}\n\n/** Convert a DB row into a SCIM User resource. */\nexport function toScimUser(u: UserRow, baseUrl: string) {\n return {\n schemas: [USER_SCHEMA],\n id: u.id,\n externalId: u.externalId ?? undefined,\n userName: u.userName,\n name: {\n givenName: u.givenName ?? undefined,\n familyName: u.familyName ?? undefined,\n },\n emails: u.email ? [{ value: u.email, primary: true }] : [],\n active: u.active === 1,\n meta: {\n resourceType: \"User\",\n created: u.createdAt,\n lastModified: u.updatedAt,\n location: `${baseUrl}/Users/${u.id}`,\n },\n };\n}\n\nexport function listResponse(resources: object[], startIndex = 1) {\n return {\n schemas: [LIST_SCHEMA],\n totalResults: resources.length,\n startIndex,\n itemsPerPage: resources.length,\n Resources: resources,\n };\n}\n\nexport function scimError(status: number, detail: string) {\n return { schemas: [ERROR_SCHEMA], status: String(status), detail };\n}\n\n/** Extract the primary (or first) email from an incoming SCIM payload. */\nexport function primaryEmail(body: ScimUserInput): string | null {\n if (!body.emails?.length) return null;\n const primary = body.emails.find((e) => e.primary) ?? body.emails[0];\n return primary?.value ?? null;\n}\n\n/**\n * Parse a SCIM filter like: userName eq \"john@example.com\"\n * Returns the userName value, or null if the filter isn't a userName-eq filter.\n */\nexport function parseUserNameFilter(filter: string | null): string | null {\n if (!filter) return null;\n const m = filter.match(/userName\\s+eq\\s+\"([^\"]+)\"/i);\n return m ? m[1] : null;\n}\n",["D",1781204787102],{"_32":55,"_34":54,"_35":56,"_37":58,"_40":59,"_42":14,"_43":44,"_26":27},{"_32":55,"_34":54,"_35":56,"_37":57},"db.ts","5b69369e-64e6-11f1-9214-1607ee4eb77e","script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"scim_users\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n userName TEXT UNIQUE NOT NULL,\n givenName TEXT,\n familyName TEXT,\n email TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n externalId TEXT,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )`);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GROUP_TABLE} (\n id TEXT PRIMARY KEY,\n displayName TEXT UNIQUE NOT NULL,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )\n`);\n}\n\nexport interface UserRow {\n id: string;\n userName: string;\n givenName: string | null;\n familyName: string | null;\n email: string | null;\n active: number;\n externalId: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface GroupRow {\n id: string;\n displayName: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport async function listGroups(\n displayNameFilter?: string,\n): Promise {\n const res = displayNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayNameFilter],\n })\n : await sqlite.execute(\n `SELECT * FROM ${GROUP_TABLE}`,\n );\n\n return res.rows as unknown as GroupRow[];\n}\n\nexport async function getGroup(\n id: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function getGroupByName(\n displayName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayName],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function insertGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${GROUP_TABLE}\n (id, displayName, createdAt, updatedAt)\n VALUES (?, ?, ?, ?)`,\n args: [\n g.id,\n g.displayName,\n g.createdAt,\n g.updatedAt,\n ],\n });\n}\n\nexport async function updateGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `UPDATE ${GROUP_TABLE}\n SET displayName = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n g.displayName,\n g.updatedAt,\n g.id,\n ],\n });\n}\n\nexport async function deleteGroup(\n id: string,\n): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n}\n\nexport async function listUsers(userNameFilter?: string): Promise {\n const res = userNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ? ORDER BY createdAt`,\n args: [userNameFilter],\n })\n : await sqlite.execute(`SELECT * FROM ${TABLE} ORDER BY createdAt`);\n return res.rows as unknown as UserRow[];\n}\n\nexport async function getUser(id: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function getUserByUserName(\n userName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ?`,\n args: [userName],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function insertUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (id, userName, givenName, familyName, email, active, externalId, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n u.id,\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.createdAt,\n u.updatedAt,\n ],\n });\n}\n\nexport async function updateUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET\n userName = ?, givenName = ?, familyName = ?, email = ?,\n active = ?, externalId = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.updatedAt,\n u.id,\n ],\n });\n}\n\nexport async function deleteUser(id: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n}\n\nconst GROUP_TABLE = \"scim_groups\";","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"scim_users\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n userName TEXT UNIQUE NOT NULL,\n givenName TEXT,\n familyName TEXT,\n email TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n externalId TEXT,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )`);\n}\n\nexport interface UserRow {\n id: string;\n userName: string;\n givenName: string | null;\n familyName: string | null;\n email: string | null;\n active: number;\n externalId: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\nexport async function listUsers(userNameFilter?: string): Promise {\n const res = userNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ? ORDER BY createdAt`,\n args: [userNameFilter],\n })\n : await sqlite.execute(`SELECT * FROM ${TABLE} ORDER BY createdAt`);\n return res.rows as unknown as UserRow[];\n}\n\nexport async function getUser(id: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function getUserByUserName(userName: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ?`,\n args: [userName],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function insertUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (id, userName, givenName, familyName, email, active, externalId, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n u.id, u.userName, u.givenName, u.familyName, u.email,\n u.active, u.externalId, u.createdAt, u.updatedAt,\n ],\n });\n}\n\nexport async function updateUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET\n userName = ?, givenName = ?, familyName = ?, email = ?,\n active = ?, externalId = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n u.userName, u.givenName, u.familyName, u.email,\n u.active, u.externalId, u.updatedAt, u.id,\n ],\n });\n}\n\nexport async function deleteUser(id: string): Promise {\n await sqlite.execute({ sql: `DELETE FROM ${TABLE} WHERE id = ?`, args: [id] });\n}\n",["D",1781204787102],"id","a9f1d2d7-3d5e-424a-81d9-121f19b87ca2","test-scim",["D",1781106505649],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","57869f4f-f735-49a7-8cbe-c94d835b43a5","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eb238-0324-740e-9739-98a6085cae13","tursoName","a9f1d2d73d5e424a81d9121f19b87ca2","tursoHostname","a9f1d2d73d5e424a81d9121f19b87ca2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789494036282],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_115":114,"_123":119},"org",{"_115":114,"_116":117,"_118":119,"_18":72,"_120":121,"_122":27},"branch",{"_13":104,"_34":105,"_60":44,"_106":61,"_107":-5,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":62,"_113":114},"isOwned",25,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","robyz7","handle","displayName","Robyz7","avatar","https://lh3.googleusercontent.com/a/ACg8ocJqaB9GyT0LDtIypEn9dLooRukNKqoJ-Gok4-VlN26TIbJ2j67D=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_60":61,"_34":62,"_40":200,"_64":-5,"_65":27,"_66":67,"_68":67,"_69":70,"_71":-5,"_18":72,"_73":-5,"_74":27,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":82,"_83":84,"_85":201,"_87":-5,"_88":89,"_90":89,"_91":92,"_93":92,"_94":92,"_95":89,"_96":89,"_97":202,"_99":203,"_101":204,"_103":27},"tree",[183,184,185,186],"files",[183,184,185,186],"counts",{"_172":78,"_173":174,"_175":78,"_176":177,"_178":179},"contents",[146,147,148,149],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_60":165,"_34":166,"_32":167,"_151":-5,"_43":44,"_42":168,"_152":141,"_40":169,"_13":78,"_35":22,"_37":170,"_26":27,"_155":-5,"_29":171},{"_60":161,"_34":54,"_32":55,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":162,"_13":163,"_35":56,"_37":58,"_26":27,"_155":-5,"_29":164},{"_60":157,"_34":30,"_32":33,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":158,"_13":159,"_35":36,"_37":39,"_26":27,"_155":-5,"_29":160},{"_60":150,"_34":47,"_32":48,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":153,"_13":154,"_35":36,"_37":50,"_26":27,"_155":-5,"_29":156},"a3e3d63c-41cb-4750-9937-ca4ad8d6d8ab","parentId","latest",["D",1781204787102],3,"label",[47],"1c1f9ede-0703-4407-92f9-da592e47cc7d",["D",1781204787102],8,[30],"ae6f55b4-b261-4e79-a2c5-4ac361364d2d",["D",1781204787102],2,[54],"e17f56d0-f2a9-4837-a061-3e5780a70005","README.md","89fd2402-64e6-11f1-a82c-1607ee4eb77e",7,["D",1781107674529],"# test-scim\n\nA SCIM 2.0 server for user provisioning from Okta (or any SCIM client), backed by Val Town SQLite.\n\n## Connecting Okta\n\nIn Okta's SCIM provisioning settings:\n\n| Field | Value |\n| --- | --- |\n| **SCIM base URL** | `https://robyz7--d1499f0064e311f18c2c1607ee4eb77e.web.val.run` |\n| **Unique identifier** | `userName` |\n| **Auth mode** | HTTP Header |\n| **Authorization header** | `Bearer ` |\n\nThe bearer token is read from the `SCIM_TOKEN` environment variable.\n\n👉 Set/rotate the token here: https://www.val.town/x/robyz7/test-scim/environment-variables?key=SCIM_TOKEN\n\n## Supported operations\n\n| Method | Path | Purpose |\n| --- | --- | --- |\n| GET | `/ServiceProviderConfig` | Capability discovery |\n| GET | `/ResourceTypes` | Resource type discovery |\n| GET | `/Users` | List users (supports `?filter=userName eq \"...\"`) |\n| GET | `/Users/:id` | Fetch one user |\n| POST | `/Users` | Create user (409 if `userName` exists) |\n| PUT | `/Users/:id` | Full replace |\n| PATCH | `/Users/:id` | Partial update (e.g. deactivate via `active:false`) |\n| DELETE | `/Users/:id` | Hard delete (204) |\n\n## Architecture\n\n```mermaid\nflowchart LR\n Okta -- \"Bearer SCIM_TOKEN\" --> main[main.ts
Hono router + auth]\n main --> scim[scim.ts
SCIM (de)serialization]\n main --> db[db.ts
SQLite CRUD]\n db --> sqlite[(scim_users table)]\n```\n\n## Files\n\n- **main.ts** — HTTP entrypoint: bearer-token auth middleware + all SCIM routes.\n- **scim.ts** — Converts between DB rows and SCIM JSON; filter parsing; error shapes.\n- **db.ts** — SQLite schema (`scim_users`) and CRUD helpers.\n\n## Notes\n\n- Deactivation: Okta sends `PATCH` with `active:false` to offboard a user; the row is kept but marked inactive. A separate `DELETE` removes it entirely.\n- The legacy hardcoded `john.doe` / `jane.smith` demo users are gone — data is now persisted per real provisioning events.\n",[166],"pulls","branches",1,"forks","envVars",{"_180":174,"_182":78},"connections",{"_180":78,"_181":78},"count","unfilledCount","emptyCount",{"_60":165,"_34":166,"_32":167,"_151":-5,"_43":44,"_42":168,"_152":141,"_40":197,"_13":78,"_35":22,"_37":170,"_26":27,"_155":-5,"_188":198,"_29":199},{"_60":161,"_34":54,"_32":55,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":194,"_13":163,"_35":56,"_37":58,"_26":27,"_155":-5,"_188":195,"_29":196},{"_60":157,"_34":30,"_32":33,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":191,"_13":159,"_35":36,"_37":39,"_26":27,"_155":-5,"_188":192,"_29":193},{"_60":150,"_34":47,"_32":48,"_151":-5,"_43":44,"_42":14,"_152":27,"_40":187,"_13":154,"_35":36,"_37":50,"_26":27,"_155":-5,"_188":189,"_29":190},["D",1781204787102],"children",[],[47],["D",1781204787102],[],[30],["D",1781204787102],[],[54],["D",1781107674529],[],[166],["D",1781106505649],["D",1789494036282],{"_115":114,"_123":119},{"_115":114,"_116":117,"_118":119,"_18":72,"_120":121,"_122":27},{"_13":104,"_34":105,"_60":44,"_106":61,"_107":-5,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":62,"_113":114},"ctx",{"_97":-5,"_143":238,"_239":240,"_241":242,"_243":27,"_244":27,"_245":27,"_246":141,"_247":-5,"_248":-7,"_249":-7,"_250":78,"_251":27,"_252":27,"_253":-5,"_254":27,"_255":27,"_256":27,"_257":-5},"ENV",{"_209":210,"_211":212,"_213":105,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15