[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_242":243,"_244":245},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_38":-7,"_120":-5,"_19":121,"_122":123,"_124":125,"_126":127,"_128":129,"_21":130,"_131":-5,"_132":-5,"_133":24,"_134":135,"_136":82,"_137":-5,"_138":-5,"_139":140},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","stevekrouse","name","github-oauth-template","branchName","main","path","frontend/index.html","project",{"_32":70,"_13":14,"_36":71,"_72":-5,"_73":24,"_74":75,"_76":75,"_77":-5,"_78":-5,"_30":66,"_79":80,"_81":82,"_83":82,"_84":-5,"_85":86,"_40":41,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":92,"_93":92,"_94":95,"_96":95,"_97":95,"_98":92,"_99":92,"_51":100,"_101":102,"_103":104,"_105":24},"file",{"_61":62,"_13":63,"_64":21,"_65":24,"_69":-5},"isDirectory",false,"page",0,"history",[31],"hasNext","userId",{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_21":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59},"id","325ced4a-37dd-11f0-a2ab-9e149126039e","branchId","b49bdbfa-37dc-11f0-b339-9e149126039e","createdAt",["D",1748008362061],"version",5,"orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","parentId","1b74ae7e-37dd-11f0-addf-9e149126039e","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_32":66,"_40":41,"_11":12,"_67":68},{"_61":62,"_13":63,"_64":21,"_65":24},"pull","merge","revert","multiple","commits",[60],{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_21":53,"_54":-5,"_55":-5,"_56":-5},"fileId","325bf5f2-37dd-11f0-a2ab-9e149126039e","index.html","fileType","deleted","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","deletedAtVersion","b49baf68-37dc-11f0-b339-9e149126039e",["D",1748008151091],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","pinnedFileId","1b6e380a-37dd-11f0-addf-9e149126039e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",2,"tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_119":68},"org",{"_11":12,"_115":-5,"_67":68,"_30":66,"_116":117,"_118":24},"branch",{"_38":106,"_13":16,"_32":35,"_107":70,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":14,"_114":12},"isOwned",12,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_32":70,"_13":14,"_36":238,"_72":-5,"_73":24,"_74":75,"_76":75,"_77":-5,"_78":-5,"_30":66,"_79":80,"_81":82,"_83":82,"_84":-5,"_85":86,"_40":41,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":92,"_93":92,"_94":95,"_96":95,"_97":95,"_98":92,"_99":92,"_51":239,"_101":240,"_103":241,"_105":24},"tree",[162,166,169,171],"files",[162,163,164,165,166,167,168,169,170,171],"counts",{"_151":26,"_152":153,"_154":26,"_155":156,"_157":158},"contents",[],{"_32":141,"_13":63,"_61":62,"_42":142,"_34":35,"_143":39,"_144":82,"_36":145,"_38":26,"_64":21,"_146":147,"_65":24,"_148":-5,"_17":149},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"325bf53e-37dd-11f0-a2ab-9e149126039e","3fba9edb-bf53-4631-bb0a-8f2f7f82fd8f","branchVersion","latest",["D",1748008362061],"content","\n\n\n \n \n GitHub OAuth Template\n \n \n \n 🔐\">\n\n\n

\n \n \n \n\n","label",[150,63],"frontend","pulls","branches",1,"forks","envVars",{"_159":26,"_161":26},"connections",{"_159":26,"_160":26},"count","unfilledCount","emptyCount",{"_32":234,"_13":219,"_61":212,"_42":-5,"_34":35,"_143":223,"_144":82,"_36":235,"_38":26,"_64":192,"_146":-5,"_65":24,"_148":-5,"_177":236,"_17":237},{"_32":228,"_13":173,"_61":229,"_42":212,"_34":35,"_143":106,"_144":82,"_36":230,"_38":26,"_64":21,"_146":231,"_65":24,"_148":-5,"_177":232,"_17":233},{"_32":220,"_13":221,"_61":222,"_42":212,"_34":35,"_143":223,"_144":82,"_36":224,"_38":26,"_64":185,"_146":225,"_65":24,"_148":-5,"_177":226,"_17":227},{"_32":210,"_13":211,"_61":80,"_42":212,"_34":35,"_143":213,"_144":82,"_36":214,"_38":39,"_64":215,"_146":216,"_65":24,"_148":-5,"_177":217,"_17":218},{"_32":206,"_13":150,"_61":142,"_42":-5,"_34":35,"_143":39,"_144":82,"_36":207,"_38":26,"_64":192,"_146":-5,"_65":24,"_148":-5,"_177":208,"_17":209},{"_32":141,"_13":63,"_61":62,"_42":142,"_34":35,"_143":39,"_144":82,"_36":203,"_38":26,"_64":21,"_146":147,"_65":24,"_148":-5,"_177":204,"_17":205},{"_32":195,"_13":196,"_61":197,"_42":142,"_34":35,"_143":198,"_144":82,"_36":199,"_38":26,"_64":21,"_146":200,"_65":24,"_148":-5,"_177":201,"_17":202},{"_32":190,"_13":189,"_61":183,"_42":-5,"_34":35,"_143":86,"_144":82,"_36":191,"_38":26,"_64":192,"_146":-5,"_65":24,"_148":-5,"_177":193,"_17":194},{"_32":180,"_13":181,"_61":182,"_42":183,"_34":35,"_143":86,"_144":82,"_36":184,"_38":26,"_64":185,"_146":186,"_65":24,"_148":-5,"_177":187,"_17":188},{"_32":172,"_13":173,"_61":174,"_42":-5,"_34":35,"_143":153,"_144":82,"_36":175,"_38":26,"_64":21,"_146":176,"_65":24,"_148":-5,"_177":178,"_17":179},"02709e88-37dd-11f0-addf-9e149126039e","README.md","02709f46-37dd-11f0-addf-9e149126039e",["D",1748008281665],"# GitHub OAuth Template for Val Town\n\nA complete GitHub OAuth implementation template that demonstrates how to build OAuth authentication without database sessions, using secure HTTP-only cookies to store credentials.\n\n## Features\n\n- 🔐 Complete GitHub OAuth 2.0 flow\n- 🍪 Secure cookie-based credential storage (no database required)\n- 🛡️ HTTP-only cookies for security\n- 📱 Responsive frontend with user profile display\n- 🔄 Token refresh handling\n- 🚀 Ready to deploy on Val Town\n\n## Setup Instructions\n\n1. **Create a GitHub OAuth App:**\n - Go to GitHub Settings > Developer settings > OAuth Apps\n - Click \"New OAuth App\"\n - Set Application name: \"Your App Name\"\n - Set Homepage URL: `https://your-val-name.web.val.run`\n - Set Authorization callback URL: `https://your-val-name.web.val.run/auth/callback`\n\n2. **Set Environment Variables in Val Town:**\n - `GITHUB_CLIENT_ID`: Your GitHub OAuth app's client ID\n - `GITHUB_CLIENT_SECRET`: Your GitHub OAuth app's client secret\n\n3. **Deploy:**\n - The main entry point is `backend/index.ts`\n - Set it as an HTTP trigger\n - Your app will be available at `https://your-val-name.web.val.run`\n\n## Project Structure\n\n```\n├── backend/\n│ ├── index.ts # Main Hono app with OAuth routes\n│ └── github.ts # GitHub API client\n├── frontend/\n│ ├── index.html # Main HTML template\n│ ├── app.tsx # React app component\n│ └── style.css # Styling\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## How It Works\n\n1. **Authentication Flow:**\n - User clicks \"Login with GitHub\"\n - Redirected to GitHub OAuth authorization\n - GitHub redirects back with authorization code\n - Backend exchanges code for access token\n - Token stored in secure HTTP-only cookie\n\n2. **API Requests:**\n - Frontend makes requests to backend endpoints\n - Backend reads token from cookie\n - Backend makes authenticated requests to GitHub API\n - Results returned to frontend\n\n3. **Security:**\n - Tokens never exposed to client-side JavaScript\n - HTTP-only cookies prevent XSS attacks\n - Secure flag ensures HTTPS-only transmission\n\n## API Endpoints\n\n- `GET /` - Main application page\n- `GET /auth/login` - Initiate GitHub OAuth flow\n- `GET /auth/callback` - Handle OAuth callback\n- `GET /auth/logout` - Clear authentication cookies\n- `GET /api/user` - Get authenticated user profile\n- `GET /api/repos` - Get user's repositories\n\n## Environment Variables\n\n- `GITHUB_CLIENT_ID` - GitHub OAuth app client ID (required)\n- `GITHUB_CLIENT_SECRET` - GitHub OAuth app client secret (required)","children",[],[173],"060ccb02-37dd-11f0-b796-9e149126039e","types.ts","060ccba2-37dd-11f0-b796-9e149126039e","837038cf-0535-413e-ac1a-698c10c07985",["D",1748008287715],"script","// Shared types for GitHub OAuth template\n\nexport interface GitHubUser {\n id: number;\n login: string;\n name: string | null;\n email: string | null;\n avatar_url: string;\n html_url: string;\n bio: string | null;\n public_repos: number;\n followers: number;\n following: number;\n created_at: string;\n}\n\nexport interface GitHubRepo {\n id: number;\n name: string;\n full_name: string;\n description: string | null;\n html_url: string;\n clone_url: string;\n language: string | null;\n stargazers_count: number;\n forks_count: number;\n updated_at: string;\n private: boolean;\n}\n\nexport interface OAuthTokenResponse {\n access_token: string;\n token_type: string;\n scope: string;\n}\n\nexport interface AppState {\n user: GitHubUser | null;\n repos: GitHubRepo[];\n loading: boolean;\n error: string | null;\n}",[],[189,181],"shared","060d16de-37dd-11f0-b796-9e149126039e",["D",1748008287715],"directory",[170],[189],"3a9b3ee4-37dd-11f0-aec9-9e149126039e","style.css","3a9b3f8e-37dd-11f0-aec9-9e149126039e",6,["D",1748008375900],"/* Custom styles for GitHub OAuth Template */\n\n/* Smooth transitions for all interactive elements */\n* {\n transition: all 0.2s ease-in-out;\n}\n\n/* Custom scrollbar */\n::-webkit-scrollbar {\n width: 8px;\n}\n\n::-webkit-scrollbar-track {\n background: #f1f1f1;\n}\n\n::-webkit-scrollbar-thumb {\n background: #c1c1c1;\n border-radius: 4px;\n}\n\n::-webkit-scrollbar-thumb:hover {\n background: #a8a8a8;\n}\n\n/* Loading animation */\n@keyframes pulse {\n 0%, 100% {\n opacity: 1;\n }\n 50% {\n opacity: 0.5;\n }\n}\n\n.animate-pulse {\n animation: pulse 2s cubic-bezier(0.4, 0, 0.6, 1) infinite;\n}\n\n/* Card hover effects */\n.card-hover {\n transition: transform 0.2s ease-in-out, box-shadow 0.2s ease-in-out;\n}\n\n.card-hover:hover {\n transform: translateY(-2px);\n box-shadow: 0 10px 25px rgba(0, 0, 0, 0.1);\n}\n\n/* Button focus styles */\nbutton:focus {\n outline: 2px solid #3b82f6;\n outline-offset: 2px;\n}\n\n/* Repository language color indicators */\n.lang-javascript { background-color: #f1e05a; }\n.lang-typescript { background-color: #2b7489; }\n.lang-python { background-color: #3572a5; }\n.lang-java { background-color: #b07219; }\n.lang-go { background-color: #00add8; }\n.lang-rust { background-color: #dea584; }\n.lang-cpp { background-color: #f34b7d; }\n.lang-c { background-color: #555555; }\n.lang-php { background-color: #4f5d95; }\n.lang-ruby { background-color: #701516; }\n.lang-swift { background-color: #ffac45; }\n.lang-kotlin { background-color: #f18e33; }\n.lang-dart { background-color: #00b4ab; }\n.lang-shell { background-color: #89e051; }\n.lang-html { background-color: #e34c26; }\n.lang-css { background-color: #1572b6; }\n\n/* Responsive design improvements */\n@media (max-width: 768px) {\n .container {\n padding-left: 1rem;\n padding-right: 1rem;\n }\n \n .grid-cols-3 {\n grid-template-columns: repeat(1, minmax(0, 1fr));\n gap: 1rem;\n }\n \n .md\\:grid-cols-2 {\n grid-template-columns: repeat(1, minmax(0, 1fr));\n }\n}\n\n/* Dark mode support (if needed) */\n@media (prefers-color-scheme: dark) {\n /* Add dark mode styles here if desired */\n}",[],[150,196],["D",1748008362061],[],[150,63],"325c09de-37dd-11f0-a2ab-9e149126039e",["D",1748008362061],[167,168],[150],"576f14dc-37dd-11f0-a07e-9e149126039e","index.ts","b14b1910-cbb4-4dc1-881d-c881ecb6a4fb",11,["D",1748008424259],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { GitHubAPI, exchangeCodeForToken } from \"./github.ts\";\n\nconst app = new Hono();\n\n// Cookie helper functions\nfunction getCookie(c: any, name: string): string | undefined {\n const cookieHeader = c.req.header('Cookie');\n if (!cookieHeader) return undefined;\n \n const cookies = cookieHeader.split(';').reduce((acc: any, cookie: string) => {\n const [key, value] = cookie.trim().split('=');\n acc[key] = decodeURIComponent(value);\n return acc;\n }, {});\n \n return cookies[name];\n}\n\nfunction setCookie(c: any, name: string, value: string, options: any = {}) {\n const cookieOptions = [];\n cookieOptions.push(`${name}=${encodeURIComponent(value)}`);\n \n if (options.maxAge) cookieOptions.push(`Max-Age=${options.maxAge}`);\n if (options.httpOnly) cookieOptions.push('HttpOnly');\n if (options.secure) cookieOptions.push('Secure');\n if (options.sameSite) cookieOptions.push(`SameSite=${options.sameSite}`);\n \n c.header('Set-Cookie', cookieOptions.join('; '));\n}\n\nfunction deleteCookie(c: any, name: string) {\n setCookie(c, name, '', { maxAge: 0 });\n}\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Main page - serve HTML with initial data\napp.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Check if user is authenticated\n const accessToken = getCookie(c, \"github_token\");\n let initialData = { user: null, repos: [], loading: false, error: null };\n \n if (accessToken) {\n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n initialData.user = user;\n } catch (error) {\n console.error(\"Failed to fetch user data:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n }\n }\n \n // Inject initial data\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n});\n\n// Start GitHub OAuth flow\napp.get(\"/auth/login\", (c) => {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n \n if (!clientId) {\n return c.json({ error: \"GitHub OAuth not configured\" }, 500);\n }\n \n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n const scope = \"user:email,repo\";\n const state = crypto.randomUUID(); // CSRF protection\n \n // Store state in cookie for verification\n setCookie(c, \"oauth_state\", state, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600, // 10 minutes\n });\n \n const authUrl = new URL(\"https://github.com/login/oauth/authorize\");\n authUrl.searchParams.set(\"client_id\", clientId);\n authUrl.searchParams.set(\"redirect_uri\", redirectUri);\n authUrl.searchParams.set(\"scope\", scope);\n authUrl.searchParams.set(\"state\", state);\n \n return new Response(null, {\n status: 302,\n headers: { Location: authUrl.toString() }\n });\n});\n\n// Handle OAuth callback\napp.get(\"/auth/callback\", async (c) => {\n const url = new URL(c.req.url);\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const error = url.searchParams.get(\"error\");\n \n // Check for OAuth errors\n if (error) {\n return c.html(`\n

Authentication Error

GitHub OAuth error: ${error}

\n Go back\n `);\n }\n \n // Verify state parameter (CSRF protection)\n const storedState = getCookie(c, \"oauth_state\");\n if (!state || state !== storedState) {\n return c.html(`\n

Authentication Error

Invalid state parameter. Please try again.

\n Go back\n `);\n }\n \n // Clear state cookie\n deleteCookie(c, \"oauth_state\");\n \n if (!code) {\n return c.html(`\n

Authentication Error

No authorization code received.

\n Go back\n `);\n }\n \n try {\n // Exchange code for access token\n const tokenData = await exchangeCodeForToken(code);\n \n // Store token in secure cookie\n setCookie(c, \"github_token\", tokenData.access_token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 30, // 30 days\n });\n \n // Redirect to main page\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n \n } catch (error) {\n console.error(\"OAuth callback error:\", error);\n return c.html(`\n

Authentication Error

Failed to complete authentication: ${error.message}

\n Go back\n `);\n }\n});\n\n// Logout - clear cookies\napp.get(\"/auth/logout\", (c) => {\n deleteCookie(c, \"github_token\");\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n});\n\n// API: Get authenticated user\napp.get(\"/api/user\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n return c.json(user);\n } catch (error) {\n console.error(\"Failed to fetch user:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n return c.json({ error: \"Failed to fetch user data\" }, 401);\n }\n});\n\n// API: Get user repositories\napp.get(\"/api/repos\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const repos = await github.getRepos();\n return c.json(repos);\n } catch (error) {\n console.error(\"Failed to fetch repos:\", error);\n return c.json({ error: \"Failed to fetch repositories\" }, 500);\n }\n});\n\n// Health check\napp.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", timestamp: new Date().toISOString() });\n});\n\nexport default app.fetch;",[],[219,211],"backend","0bbe2a78-37dd-11f0-ace0-9e149126039e","github.ts","0bbe2b2c-37dd-11f0-ace0-9e149126039e",3,["D",1748008297272],"// GitHub API client for server-side requests\n\nimport type { GitHubUser, GitHubRepo, OAuthTokenResponse } from \"../shared/types.ts\";\n\nexport class GitHubAPI {\n private baseURL = \"https://api.github.com\";\n \n constructor(private accessToken: string) {}\n\n private async request(endpoint: string): Promise {\n const response = await fetch(`${this.baseURL}${endpoint}`, {\n headers: {\n \"Authorization\": `Bearer ${this.accessToken}`,\n \"Accept\": \"application/vnd.github.v3+json\",\n \"User-Agent\": \"Val-Town-GitHub-OAuth-Template\",\n },\n });\n\n if (!response.ok) {\n throw new Error(`GitHub API error: ${response.status} ${response.statusText}`);\n }\n\n return response.json();\n }\n\n async getUser(): Promise {\n return this.request(\"/user\");\n }\n\n async getRepos(page = 1, perPage = 30): Promise {\n return this.request(`/user/repos?page=${page}&per_page=${perPage}&sort=updated`);\n }\n}\n\nexport async function exchangeCodeForToken(code: string): Promise {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"GITHUB_CLIENT_SECRET\");\n\n if (!clientId || !clientSecret) {\n throw new Error(\"GitHub OAuth credentials not configured\");\n }\n\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_id: clientId,\n client_secret: clientSecret,\n code,\n }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to exchange code for token: ${response.statusText}`);\n }\n\n const data = await response.json();\n \n if (data.error) {\n throw new Error(`GitHub OAuth error: ${data.error_description || data.error}`);\n }\n\n return data;\n}",[],[219,221],"686181da-37dd-11f0-ac79-9e149126039e","6861828e-37dd-11f0-ac79-9e149126039e",["D",1748008452695],"# Backend - GitHub OAuth Template\n\nThis directory contains the backend implementation for the GitHub OAuth template using Hono framework.\n\n## Files\n\n- `index.ts` - Main Hono application with OAuth routes and API endpoints\n- `github.ts` - GitHub API client for server-side requests\n\n## Features\n\n### OAuth Flow\n- **Login**: `/auth/login` - Initiates GitHub OAuth flow\n- **Callback**: `/auth/callback` - Handles OAuth callback and token exchange\n- **Logout**: `/auth/logout` - Clears authentication cookies\n\n### API Endpoints\n- **User Profile**: `GET /api/user` - Returns authenticated user's GitHub profile\n- **Repositories**: `GET /api/repos` - Returns user's repositories\n- **Health Check**: `GET /health` - Application health status\n\n### Security Features\n- **HTTP-only Cookies**: Tokens stored securely, not accessible to JavaScript\n- **CSRF Protection**: State parameter validation during OAuth flow\n- **Secure Cookies**: HTTPS-only transmission with SameSite protection\n- **Token Validation**: Automatic cleanup of invalid tokens\n\n## Cookie Management\n\nThe application uses custom cookie helper functions since Hono's cookie helpers had import issues:\n\n```typescript\n// Get cookie value\nconst token = getCookie(c, \"github_token\");\n\n// Set secure cookie\nsetCookie(c, \"github_token\", accessToken, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 30 // 30 days\n});\n\n// Delete cookie\ndeleteCookie(c, \"github_token\");\n```\n\n## Environment Variables\n\nRequired environment variables:\n- `GITHUB_CLIENT_ID` - GitHub OAuth app client ID\n- `GITHUB_CLIENT_SECRET` - GitHub OAuth app client secret\n\n## Error Handling\n\nThe application includes comprehensive error handling:\n- OAuth errors are displayed with user-friendly messages\n- Invalid tokens are automatically cleared\n- API errors return appropriate HTTP status codes\n- All errors bubble up with full context for debugging\n\n## GitHub API Integration\n\nThe `GitHubAPI` class provides a clean interface for GitHub API requests:\n\n```typescript\nconst github = new GitHubAPI(accessToken);\nconst user = await github.getUser();\nconst repos = await github.getRepos();\n```\n\nAll requests include proper headers and error handling.",[],[219,173],"0bbe309a-37dd-11f0-ace0-9e149126039e",["D",1748008297272],[163,164,165],[219],["D",1748008151091],{"_11":12,"_119":68},{"_11":12,"_115":-5,"_67":68,"_30":66,"_116":117,"_118":24},{"_38":106,"_13":16,"_32":35,"_107":70,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":14,"_114":12},"ctx",{"_51":-5,"_138":275,"_276":277,"_278":279,"_280":24,"_281":24,"_282":24,"_283":82,"_284":-5,"_285":-7,"_286":-7,"_287":26,"_288":24,"_289":24,"_290":-5,"_291":24,"_292":24,"_293":24,"_294":-5},"ENV",{"_246":247,"_248":249,"_250":16,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · index.html