This val is protected by a password.

To access it, you'll need to get one from @${handle}.

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n password: string | string[];\n sessionTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function passwordAuth(next, options?: PasswordAuthOptions) {\n let passwords: string[];\n if (!options?.password) {\n passwords = [];\n } else if (typeof options?.password == \"string\") {\n passwords = [options.password];\n } else {\n passwords = options.password;\n }\n\n const sessionTable = options?.sessionTable || \"password_auth_session\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage(val.handle));\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n if (!passwords.includes(password) && !(await verifyApiToken(password))) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n const session = await createSession(sessionTable, valSlug);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signin\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req);\n };\n}","label","children",[69],"contentHash","add280df1c80a4e5d3b9169fb6f21539fecf10058a163621fc27b9de43948c8c","README.md",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":81,"_79":26,"_34":95,"_40":56,"_82":96,"_84":97,"_62":46,"_86":-5,"_87":-7,"_68":98,"_89":99},"16c8d326-25f1-11f0-ad23-569c3dd06744","16c8d39e-25f1-11f0-ad23-569c3dd06744",["D",1709748965831],"file","# Password Auth Middleware\n\nProtect your vals behind a password. Use session cookies to persist authentication.\n\n![6ed0648ae8813e958dbe79468572cb52f578239c0fae55857a13660beebdc5fd.png](https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/36c1dc4f-4e19-457b-ad89-0bf139754e00/public)\n\n## Demo\n\nSee @pomdtr/password_auth_test\n\n## Usage\n\nIf you want to use an [api token](https://www.val.town/settings/api) to authenticate: \n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n});\n```\n\nOr if you prefer to use a string:\n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { password: Deno.env.get(\"MY_PASSWORD\") });\n```\n\nOr if you want to share your val with someone without sharing your main password, you can set multiple ones\n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { password: [Deno.env.get(\"MY_PASSWORD\"), Deno.env.get(\"STEVE_PASSWORD\")] });\n```\n\nNote that authenticating using your api token is always an option.\n\n## TODO\n\n- [x] allow to authenticate using a val town token\n- [ ] add a way to send an email to ask a password from the val owner\n- [ ] automatically extend the session\n- [ ] automatically remove expired sessions\n\n## FAQ\n\n> How to sign out ?\n\nNavigate to `/signout`.\n\nMigrated from folder: Archive/password_auth",[91],"7e92ab55bf2cfbc4822837405945e24d3ecfcd90bd28b59fe8dcd961d6ec6ee7",["D",1746037784792],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_137":133},"org",{"_11":12,"_131":-5,"_132":133,"_105":106,"_134":135,"_136":46},"branch","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":55,"_13":14,"_34":187,"_44":-5,"_101":26,"_47":48,"_102":48,"_103":-5,"_104":-5,"_105":106,"_107":-5,"_108":26,"_109":-5,"_110":-5,"_111":81,"_51":112,"_113":-5,"_114":-5,"_115":-5,"_116":-5,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_126":188,"_128":189,"_130":190,"_45":46},"tree",[181,182],"files",[181,182],"counts",{"_171":56,"_172":81,"_173":56,"_174":175,"_176":177},"contents",[165,166],"upstreamProject",{"_32":39,"_13":14,"_103":-5,"_104":-5,"_47":48,"_126":163},"upstreamBranch",{"_32":33,"_34":161,"_36":162,"_13":16,"_38":39,"_40":22,"_41":-5,"_42":-5,"_43":-5,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":52,"_53":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746209076068],["D",1755789148862],{"_11":50,"_137":164},"https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":81,"_79":26,"_34":169,"_40":56,"_82":96,"_84":97,"_62":46,"_86":-5,"_68":170},{"_32":73,"_13":69,"_74":75,"_76":-5,"_77":54,"_78":20,"_79":26,"_34":167,"_40":81,"_82":83,"_84":85,"_62":46,"_86":-5,"_68":168},["D",1709748985880],[69],["D",1709748965831],[91],"pulls","branches","forks","envVars",{"_178":56,"_180":56},"connections",{"_178":56,"_179":56},"count","unfilledCount","emptyCount",{"_32":93,"_13":91,"_74":94,"_76":-5,"_77":54,"_78":81,"_79":26,"_34":95,"_40":56,"_82":96,"_84":97,"_62":46,"_86":-5,"_87":185,"_68":186},{"_32":73,"_13":69,"_74":75,"_76":-5,"_77":54,"_78":20,"_79":26,"_34":80,"_40":81,"_82":83,"_84":85,"_62":46,"_86":-5,"_87":183,"_68":184},[],[69],[],[91],["D",1746037784792],{"_11":12,"_137":133},{"_11":12,"_131":-5,"_132":133,"_105":106,"_134":135,"_136":46},{"_40":20,"_13":16,"_32":54,"_38":55,"_41":33,"_42":56,"_57":48,"_58":39,"_59":52,"_53":14,"_49":12},"ctx",{"_126":-5,"_158":224,"_225":226,"_227":228,"_229":46,"_230":46,"_231":46,"_232":26,"_233":-5,"_234":-7,"_235":-7,"_236":56,"_237":46,"_238":46,"_239":-5,"_240":46,"_241":46,"_242":46,"_243":-5},"ENV",{"_195":196,"_197":198,"_199":16,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergestevekrouse/mainintopomdtr/main

README.md+58-0

main.tsx+194-0