[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_220":221,"_222":223},"routes/_app.x.$handle.$name",{"_100":99,"_32":49,"_108":90,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_21":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":25,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_47":48,"_32":49,"_36":50,"_51":-5,"_52":25,"_53":54,"_55":54,"_56":-5,"_57":-5,"_18":58,"_59":60,"_61":62,"_63":62,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",5,"changes",[19,20],"aiChatInfo","userId",{"_21":41,"_23":-7,"_24":25,"_26":25,"_27":42,"_29":42},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":-5,"_36":37,"_38":14,"_39":40,"_24":25},"previous","deleted",false,"deletedHere","path","frontend","latestPath","fileId","3fba9edb-bf53-4631-bb0a-8f2f7f82fd8f","name","fileType","directory","content","createdAt",["D",1748008362061],"branchVersion","branchId","b49bdbfa-37dc-11f0-b339-9e149126039e",{"_30":43,"_32":44,"_33":21,"_35":45,"_36":46,"_38":14,"_39":40,"_24":25},"frontend/index.html","325bf5f2-37dd-11f0-a2ab-9e149126039e","index.html","\n\n\n \n \n GitHub OAuth Template\n \n \n \n 🔐\">\n\n\n

\n \n \n \n\n",["D",1748008362061],"id","b49baf68-37dc-11f0-b339-9e149126039e","github-oauth-template",["D",1748008151091],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","1b6e380a-37dd-11f0-addf-9e149126039e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",2,"orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":-5,"_102":103,"_18":58,"_104":105,"_106":25},"branch",{"_13":89,"_32":90,"_47":40,"_91":48,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":49,"_98":99},"isOwned",12,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","stevekrouse","handle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_32":49,"_36":216,"_51":-5,"_52":25,"_53":54,"_55":54,"_56":-5,"_57":-5,"_18":58,"_59":60,"_61":62,"_63":62,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":217,"_84":218,"_86":219,"_88":25},"tree",[169,172,174,176],"files",[169,170,171,172,173,174,175,176],"counts",{"_159":141,"_160":138,"_161":141,"_162":163,"_164":165},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_47":153,"_32":154,"_30":155,"_137":-5,"_39":40,"_38":156,"_139":62,"_36":157,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_27":158},{"_47":150,"_32":28,"_30":31,"_137":-5,"_39":40,"_38":14,"_139":62,"_36":151,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_27":152},{"_47":145,"_32":146,"_30":147,"_137":-5,"_39":40,"_38":66,"_139":62,"_36":148,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_27":149},{"_47":134,"_32":135,"_30":136,"_137":-5,"_39":40,"_38":138,"_139":62,"_36":140,"_13":141,"_33":21,"_35":142,"_24":25,"_143":-5,"_27":144},"02709e88-37dd-11f0-addf-9e149126039e","README.md","02709f46-37dd-11f0-addf-9e149126039e","parentId",1,"latest",["D",1748008281665],0,"# GitHub OAuth Template for Val Town\n\nA complete GitHub OAuth implementation template that demonstrates how to build OAuth authentication without database sessions, using secure HTTP-only cookies to store credentials.\n\n## Features\n\n- 🔐 Complete GitHub OAuth 2.0 flow\n- 🍪 Secure cookie-based credential storage (no database required)\n- 🛡️ HTTP-only cookies for security\n- 📱 Responsive frontend with user profile display\n- 🔄 Token refresh handling\n- 🚀 Ready to deploy on Val Town\n\n## Setup Instructions\n\n1. **Create a GitHub OAuth App:**\n - Go to GitHub Settings > Developer settings > OAuth Apps\n - Click \"New OAuth App\"\n - Set Application name: \"Your App Name\"\n - Set Homepage URL: `https://your-val-name.web.val.run`\n - Set Authorization callback URL: `https://your-val-name.web.val.run/auth/callback`\n\n2. **Set Environment Variables in Val Town:**\n - `GITHUB_CLIENT_ID`: Your GitHub OAuth app's client ID\n - `GITHUB_CLIENT_SECRET`: Your GitHub OAuth app's client secret\n\n3. **Deploy:**\n - The main entry point is `backend/index.ts`\n - Set it as an HTTP trigger\n - Your app will be available at `https://your-val-name.web.val.run`\n\n## Project Structure\n\n```\n├── backend/\n│ ├── index.ts # Main Hono app with OAuth routes\n│ └── github.ts # GitHub API client\n├── frontend/\n│ ├── index.html # Main HTML template\n│ ├── app.tsx # React app component\n│ └── style.css # Styling\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## How It Works\n\n1. **Authentication Flow:**\n - User clicks \"Login with GitHub\"\n - Redirected to GitHub OAuth authorization\n - GitHub redirects back with authorization code\n - Backend exchanges code for access token\n - Token stored in secure HTTP-only cookie\n\n2. **API Requests:**\n - Frontend makes requests to backend endpoints\n - Backend reads token from cookie\n - Backend makes authenticated requests to GitHub API\n - Results returned to frontend\n\n3. **Security:**\n - Tokens never exposed to client-side JavaScript\n - HTTP-only cookies prevent XSS attacks\n - Secure flag ensures HTTPS-only transmission\n\n## API Endpoints\n\n- `GET /` - Main application page\n- `GET /auth/login` - Initiate GitHub OAuth flow\n- `GET /auth/callback` - Handle OAuth callback\n- `GET /auth/logout` - Clear authentication cookies\n- `GET /api/user` - Get authenticated user profile\n- `GET /api/repos` - Get user's repositories\n\n## Environment Variables\n\n- `GITHUB_CLIENT_ID` - GitHub OAuth app client ID (required)\n- `GITHUB_CLIENT_SECRET` - GitHub OAuth app client secret (required)","label",[135],"060d16de-37dd-11f0-b796-9e149126039e","shared","837038cf-0535-413e-ac1a-698c10c07985",["D",1748008287715],[146],"325c09de-37dd-11f0-a2ab-9e149126039e",["D",1748008362061],[28],"0bbe309a-37dd-11f0-ace0-9e149126039e","backend","b14b1910-cbb4-4dc1-881d-c881ecb6a4fb",3,["D",1748008297272],[154],"pulls","branches","forks","envVars",{"_166":141,"_168":141},"connections",{"_166":141,"_167":141},"count","unfilledCount","emptyCount",{"_47":153,"_32":154,"_30":155,"_137":-5,"_39":40,"_38":156,"_139":62,"_36":213,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_178":214,"_27":215},{"_47":206,"_32":207,"_30":208,"_137":155,"_39":40,"_38":156,"_139":62,"_36":209,"_13":141,"_33":185,"_35":210,"_24":25,"_143":-5,"_178":211,"_27":212},{"_47":199,"_32":200,"_30":60,"_137":155,"_39":40,"_38":201,"_139":25,"_36":202,"_13":141,"_33":185,"_35":203,"_24":25,"_143":-5,"_178":204,"_27":205},{"_47":150,"_32":28,"_30":31,"_137":-5,"_39":40,"_38":14,"_139":62,"_36":196,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_178":197,"_27":198},{"_47":192,"_32":44,"_30":43,"_137":31,"_39":40,"_38":14,"_139":62,"_36":193,"_13":141,"_33":21,"_35":45,"_24":25,"_143":-5,"_178":194,"_27":195},{"_47":145,"_32":146,"_30":147,"_137":-5,"_39":40,"_38":66,"_139":62,"_36":189,"_13":141,"_33":34,"_35":-5,"_24":25,"_143":-5,"_178":190,"_27":191},{"_47":181,"_32":182,"_30":183,"_137":147,"_39":40,"_38":66,"_139":62,"_36":184,"_13":141,"_33":185,"_35":186,"_24":25,"_143":-5,"_178":187,"_27":188},{"_47":134,"_32":135,"_30":136,"_137":-5,"_39":40,"_38":138,"_139":62,"_36":177,"_13":141,"_33":21,"_35":142,"_24":25,"_143":-5,"_178":179,"_27":180},["D",1748008281665],"children",[],[135],"060ccb02-37dd-11f0-b796-9e149126039e","types.ts","060ccba2-37dd-11f0-b796-9e149126039e",["D",1748008287715],"script","// Shared types for GitHub OAuth template\n\nexport interface GitHubUser {\n id: number;\n login: string;\n name: string | null;\n email: string | null;\n avatar_url: string;\n html_url: string;\n bio: string | null;\n public_repos: number;\n followers: number;\n following: number;\n created_at: string;\n}\n\nexport interface GitHubRepo {\n id: number;\n name: string;\n full_name: string;\n description: string | null;\n html_url: string;\n clone_url: string;\n language: string | null;\n stargazers_count: number;\n forks_count: number;\n updated_at: string;\n private: boolean;\n}\n\nexport interface OAuthTokenResponse {\n access_token: string;\n token_type: string;\n scope: string;\n}\n\nexport interface AppState {\n user: GitHubUser | null;\n repos: GitHubRepo[];\n loading: boolean;\n error: string | null;\n}",[],[146,182],["D",1748008287715],[175],[146],"325bf53e-37dd-11f0-a2ab-9e149126039e",["D",1748008362061],[],[28,44],["D",1748008362061],[173],[28],"1b6e376a-37dd-11f0-addf-9e149126039e","index.ts",4,["D",1748008323592],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/helper\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { GitHubAPI, exchangeCodeForToken } from \"./github.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Main page - serve HTML with initial data\napp.get(\"/\", async (c) => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Check if user is authenticated\n const accessToken = getCookie(c, \"github_token\");\n let initialData = { user: null, repos: [], loading: false, error: null };\n \n if (accessToken) {\n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n initialData.user = user;\n } catch (error) {\n console.error(\"Failed to fetch user data:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n }\n }\n \n // Inject initial data\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n});\n\n// Start GitHub OAuth flow\napp.get(\"/auth/login\", (c) => {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n \n if (!clientId) {\n return c.json({ error: \"GitHub OAuth not configured\" }, 500);\n }\n \n const baseUrl = new URL(c.req.url).origin;\n const redirectUri = `${baseUrl}/auth/callback`;\n const scope = \"user:email,repo\";\n const state = crypto.randomUUID(); // CSRF protection\n \n // Store state in cookie for verification\n setCookie(c, \"oauth_state\", state, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 600, // 10 minutes\n });\n \n const authUrl = new URL(\"https://github.com/login/oauth/authorize\");\n authUrl.searchParams.set(\"client_id\", clientId);\n authUrl.searchParams.set(\"redirect_uri\", redirectUri);\n authUrl.searchParams.set(\"scope\", scope);\n authUrl.searchParams.set(\"state\", state);\n \n return new Response(null, {\n status: 302,\n headers: { Location: authUrl.toString() }\n });\n});\n\n// Handle OAuth callback\napp.get(\"/auth/callback\", async (c) => {\n const url = new URL(c.req.url);\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const error = url.searchParams.get(\"error\");\n \n // Check for OAuth errors\n if (error) {\n return c.html(`\n

Authentication Error

GitHub OAuth error: ${error}

\n Go back\n `);\n }\n \n // Verify state parameter (CSRF protection)\n const storedState = getCookie(c, \"oauth_state\");\n if (!state || state !== storedState) {\n return c.html(`\n

Authentication Error

Invalid state parameter. Please try again.

\n Go back\n `);\n }\n \n // Clear state cookie\n deleteCookie(c, \"oauth_state\");\n \n if (!code) {\n return c.html(`\n

Authentication Error

No authorization code received.

\n Go back\n `);\n }\n \n try {\n // Exchange code for access token\n const tokenData = await exchangeCodeForToken(code);\n \n // Store token in secure cookie\n setCookie(c, \"github_token\", tokenData.access_token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 30, // 30 days\n });\n \n // Redirect to main page\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n \n } catch (error) {\n console.error(\"OAuth callback error:\", error);\n return c.html(`\n

Authentication Error

Failed to complete authentication: ${error.message}

\n Go back\n `);\n }\n});\n\n// Logout - clear cookies\napp.get(\"/auth/logout\", (c) => {\n deleteCookie(c, \"github_token\");\n return new Response(null, {\n status: 302,\n headers: { Location: \"/\" }\n });\n});\n\n// API: Get authenticated user\napp.get(\"/api/user\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const user = await github.getUser();\n return c.json(user);\n } catch (error) {\n console.error(\"Failed to fetch user:\", error);\n // Clear invalid token\n deleteCookie(c, \"github_token\");\n return c.json({ error: \"Failed to fetch user data\" }, 401);\n }\n});\n\n// API: Get user repositories\napp.get(\"/api/repos\", async (c) => {\n const accessToken = getCookie(c, \"github_token\");\n \n if (!accessToken) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n \n try {\n const github = new GitHubAPI(accessToken);\n const repos = await github.getRepos();\n return c.json(repos);\n } catch (error) {\n console.error(\"Failed to fetch repos:\", error);\n return c.json({ error: \"Failed to fetch repositories\" }, 500);\n }\n});\n\n// Health check\napp.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", timestamp: new Date().toISOString() });\n});\n\nexport default app.fetch;",[],[154,200],"0bbe2a78-37dd-11f0-ace0-9e149126039e","github.ts","0bbe2b2c-37dd-11f0-ace0-9e149126039e",["D",1748008297272],"// GitHub API client for server-side requests\n\nimport type { GitHubUser, GitHubRepo, OAuthTokenResponse } from \"../shared/types.ts\";\n\nexport class GitHubAPI {\n private baseURL = \"https://api.github.com\";\n \n constructor(private accessToken: string) {}\n\n private async request(endpoint: string): Promise {\n const response = await fetch(`${this.baseURL}${endpoint}`, {\n headers: {\n \"Authorization\": `Bearer ${this.accessToken}`,\n \"Accept\": \"application/vnd.github.v3+json\",\n \"User-Agent\": \"Val-Town-GitHub-OAuth-Template\",\n },\n });\n\n if (!response.ok) {\n throw new Error(`GitHub API error: ${response.status} ${response.statusText}`);\n }\n\n return response.json();\n }\n\n async getUser(): Promise {\n return this.request(\"/user\");\n }\n\n async getRepos(page = 1, perPage = 30): Promise {\n return this.request(`/user/repos?page=${page}&per_page=${perPage}&sort=updated`);\n }\n}\n\nexport async function exchangeCodeForToken(code: string): Promise {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"GITHUB_CLIENT_SECRET\");\n\n if (!clientId || !clientSecret) {\n throw new Error(\"GitHub OAuth credentials not configured\");\n }\n\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: {\n \"Accept\": \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_id: clientId,\n client_secret: clientSecret,\n code,\n }),\n });\n\n if (!response.ok) {\n throw new Error(`Failed to exchange code for token: ${response.statusText}`);\n }\n\n const data = await response.json();\n \n if (data.error) {\n throw new Error(`GitHub OAuth error: ${data.error_description || data.error}`);\n }\n\n return data;\n}",[],[154,207],["D",1748008297272],[170,171],[154],["D",1748008151091],{"_100":99,"_107":103},{"_100":99,"_101":-5,"_102":103,"_18":58,"_104":105,"_106":25},{"_13":89,"_32":90,"_47":40,"_91":48,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":49,"_98":99},"ctx",{"_82":-5,"_127":253,"_254":255,"_256":257,"_258":25,"_259":25,"_260":25,"_261":62,"_262":-5,"_263":-7,"_264":-7,"_265":141,"_266":25,"_267":25,"_268":-5,"_269":25,"_270":25,"_271":25,"_272":-5},"ENV",{"_224":225,"_226":227,"_228":90,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5