\n \n \n \n\n",[],[199,201],"325c09de-37dd-11f0-a2ab-9e149126039e",["D",1748008362061],[171,172],[199],"576f14dc-37dd-11f0-a07e-9e149126039e","index.ts","b14b1910-cbb4-4dc1-881d-c881ecb6a4fb",11,["D",1748008424259],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { GitHubAPI, exchangeCodeForToken } from \"./github.ts\";\n\nconst app = new Hono();\n\n// Cookie helper functions\nfunction getCookie(c: any, name: string): string | undefined {\n const cookieHeader = c.req.header('Cookie');\n if (!cookieHeader) return undefined;\n \n const cookies = cookieHeader.split(';').reduce((acc: any, cookie: string) => {\n const [key, value] = cookie.trim().split('=');\n acc[key] = decodeURIComponent(value);\n return acc;\n }, {});\n \n return cookies[name];\n}\n\nfunction setCookie(c: any, name: string, value: string, options: any = {}) {\n const cookieOptions = [];\n cookieOptions.push(`${name}=${encodeURIComponent(value)}`);\n \n if (options.maxAge) cookieOptions.push(`Max-Age=${options.maxAge}`);\n if (options.httpOnly) cookieOptions.push('HttpOnly');\n if (options.secure) cookieOptions.push('Secure');\n if (options.sameSite) cookieOptions.push(`SameSite=${options.sameSite}`);\n \n c.header('Set-Cookie', cookieOptions.join('; '));\n}\n\nfunction deleteCookie(c: any, name: string) {\n setCookie(c, name, '', { maxAge: 0 });\n}\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Main page - serve HTML with initial data\napp.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Check if user is authenticated\n const accessToken = getCookie(c, \"github_token\");\n let initialData = { user: null, repos: [], loading: false, error: null };\n \n if (accessToken) {\n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n initialData.user = user;\n } catch (error) {\n console.error(\"Failed to fetch user data:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n }\n }\n \n // Inject initial data\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n});\n\n// Start GitHub OAuth flow\napp.get(\"/auth/login\", (c) => {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n \n if (!clientId) {\n return c.json({ error: \"GitHub OAuth not configured\" }, 500);\n }\n \n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n const scope = \"user:email,repo\";\n const state = crypto.randomUUID(); // CSRF protection\n \n // Store state in cookie for verification\n setCookie(c, \"oauth_state\", state, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600, // 10 minutes\n });\n \n const authUrl = new URL(\"https://github.com/login/oauth/authorize\");\n authUrl.searchParams.set(\"client_id\", clientId);\n authUrl.searchParams.set(\"redirect_uri\", redirectUri);\n authUrl.searchParams.set(\"scope\", scope);\n authUrl.searchParams.set(\"state\", state);\n \n return new Response(null, {\n status: 302,\n headers: { Location: authUrl.toString() }\n });\n});\n\n// Handle OAuth callback\napp.get(\"/auth/callback\", async (c) => {\n const url = new URL(c.req.url);\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const error = url.searchParams.get(\"error\");\n \n // Check for OAuth errors\n if (error) {\n return c.html(`\n

Authentication Error

GitHub OAuth error: ${error}

\n Go back\n `);\n }\n \n // Verify state parameter (CSRF protection)\n const storedState = getCookie(c, \"oauth_state\");\n if (!state || state !== storedState) {\n return c.html(`\n

Authentication Error

Invalid state parameter. Please try again.

\n Go back\n `);\n }\n \n // Clear state cookie\n deleteCookie(c, \"oauth_state\");\n \n if (!code) {\n return c.html(`\n

Authentication Error

No authorization code received.

\n Go back\n `);\n }\n \n try {\n // Exchange code for access token\n const tokenData = await exchangeCodeForToken(code);\n \n // Store token in secure cookie\n setCookie(c, \"github_token\", tokenData.access_token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 30, // 30 days\n });\n \n // Redirect to main page\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n \n } catch (error) {\n console.error(\"OAuth callback error:\", error);\n return c.html(`\n

Authentication Error

Failed to complete authentication: ${error.message}

\n Go back\n `);\n }\n});\n\n// Logout - clear cookies\napp.get(\"/auth/logout\", (c) => {\n deleteCookie(c, \"github_token\");\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n});\n\n// API: Get authenticated user\napp.get(\"/api/user\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n return c.json(user);\n } catch (error) {\n console.error(\"Failed to fetch user:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n return c.json({ error: \"Failed to fetch user data\" }, 401);\n }\n});\n\n// API: Get user repositories\napp.get(\"/api/repos\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const repos = await github.getRepos();\n return c.json(repos);\n } catch (error) {\n console.error(\"Failed to fetch repos:\", error);\n return c.json({ error: \"Failed to fetch repositories\" }, 500);\n }\n});\n\n// Health check\napp.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", timestamp: new Date().toISOString() });\n});\n\nexport default app.fetch;",[],[221,213],"backend","0bbe2a78-37dd-11f0-ace0-9e149126039e","github.ts","0bbe2b2c-37dd-11f0-ace0-9e149126039e",3,["D",1748008297272],"// GitHub API client for server-side requests\n\nimport type { GitHubUser, GitHubRepo, OAuthTokenResponse } from \"../shared/types.ts\";\n\nexport class GitHubAPI {\n private baseURL = \"https://api.github.com\";\n \n constructor(private accessToken: string) {}\n\n private async request(endpoint: string): Promise {\n const response = await fetch(`${this.baseURL}${endpoint}`, {\n headers: {\n \"Authorization\": `Bearer ${this.accessToken}`,\n \"Accept\": \"application/vnd.github.v3+json\",\n \"User-Agent\": \"Val-Town-GitHub-OAuth-Template\",\n },\n });\n\n if (!response.ok) {\n throw new Error(`GitHub API error: ${response.status} ${response.statusText}`);\n }\n\n return response.json();\n }\n\n async getUser(): Promise {\n return this.request(\"/user\");\n }\n\n async getRepos(page = 1, perPage = 30): Promise {\n return this.request(`/user/repos?page=${page}&per_page=${perPage}&sort=updated`);\n }\n}\n\nexport async function exchangeCodeForToken(code: string): Promise {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"GITHUB_CLIENT_SECRET\");\n\n if (!clientId || !clientSecret) {\n throw new Error(\"GitHub OAuth credentials not configured\");\n }\n\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_id: clientId,\n client_secret: clientSecret,\n code,\n }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to exchange code for token: ${response.statusText}`);\n }\n\n const data = await response.json();\n \n if (data.error) {\n throw new Error(`GitHub OAuth error: ${data.error_description || data.error}`);\n }\n\n return data;\n}",[],[221,223],"686181da-37dd-11f0-ac79-9e149126039e","6861828e-37dd-11f0-ac79-9e149126039e",["D",1748008452695],"# Backend - GitHub OAuth Template\n\nThis directory contains the backend implementation for the GitHub OAuth template using Hono framework.\n\n## Files\n\n- `index.ts` - Main Hono application with OAuth routes and API endpoints\n- `github.ts` - GitHub API client for server-side requests\n\n## Features\n\n### OAuth Flow\n- **Login**: `/auth/login` - Initiates GitHub OAuth flow\n- **Callback**: `/auth/callback` - Handles OAuth callback and token exchange\n- **Logout**: `/auth/logout` - Clears authentication cookies\n\n### API Endpoints\n- **User Profile**: `GET /api/user` - Returns authenticated user's GitHub profile\n- **Repositories**: `GET /api/repos` - Returns user's repositories\n- **Health Check**: `GET /health` - Application health status\n\n### Security Features\n- **HTTP-only Cookies**: Tokens stored securely, not accessible to JavaScript\n- **CSRF Protection**: State parameter validation during OAuth flow\n- **Secure Cookies**: HTTPS-only transmission with SameSite protection\n- **Token Validation**: Automatic cleanup of invalid tokens\n\n## Cookie Management\n\nThe application uses custom cookie helper functions since Hono's cookie helpers had import issues:\n\n```typescript\n// Get cookie value\nconst token = getCookie(c, \"github_token\");\n\n// Set secure cookie\nsetCookie(c, \"github_token\", accessToken, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 30 // 30 days\n});\n\n// Delete cookie\ndeleteCookie(c, \"github_token\");\n```\n\n## Environment Variables\n\nRequired environment variables:\n- `GITHUB_CLIENT_ID` - GitHub OAuth app client ID\n- `GITHUB_CLIENT_SECRET` - GitHub OAuth app client secret\n\n## Error Handling\n\nThe application includes comprehensive error handling:\n- OAuth errors are displayed with user-friendly messages\n- Invalid tokens are automatically cleared\n- API errors return appropriate HTTP status codes\n- All errors bubble up with full context for debugging\n\n## GitHub API Integration\n\nThe `GitHubAPI` class provides a clean interface for GitHub API requests:\n\n```typescript\nconst github = new GitHubAPI(accessToken);\nconst user = await github.getUser();\nconst repos = await github.getRepos();\n```\n\nAll requests include proper headers and error handling.",[],[221,177],"0bbe309a-37dd-11f0-ace0-9e149126039e",["D",1748008297272],[167,168,169],[221],["D",1748008151091],{"_11":12,"_121":70},{"_11":12,"_117":-5,"_69":70,"_31":68,"_118":119,"_120":30},{"_39":108,"_13":16,"_33":36,"_109":74,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":-5,"_115":14,"_116":12},"ctx",{"_52":-5,"_140":277,"_278":279,"_280":281,"_282":30,"_283":30,"_284":30,"_285":24,"_286":-5,"_287":-7,"_288":-7,"_289":26,"_290":30,"_291":30,"_292":-5,"_293":30,"_294":30,"_295":30,"_296":-5},"ENV",{"_248":249,"_250":251,"_252":16,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · shared