[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_177":178,"_179":180},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_106":85,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":119,"_120":121,"_122":25,"_123":124,"_125":25,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","b0b1a57c-25f0-11f0-ad23-569c3dd06744","name","fileType","script","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport { inferRequestVal } from \"https://esm.town/v/andreterron/inferRequestVal?v=2\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { html } from \"https://esm.town/v/stevekrouse/html?v=5\";\nimport { zip } from \"npm:lodash-es\";\nimport { nanoid } from \"npm:nanoid\";\n\ntype Session = {\n id: string;\n expiresAt: number;\n};\n\nasync function createSessionTable(tableName: string) {\n await sqlite.execute(`CREATE TABLE ${tableName} (\n id TEXT NOT NULL PRIMARY KEY,\n expires_at INTEGER NOT NULL,\n val_slug STRING NOT NULL\n );`);\n}\n\nasync function createSession(tableName: string, valSlug: string): Promise {\n try {\n const expires_at = new Date();\n expires_at.setDate(expires_at.getDate() + 7);\n const session: Session = { id: nanoid(), expiresAt: expires_at.getTime() };\n await sqlite.execute({\n sql: `INSERT INTO ${tableName} (id, val_slug, expires_at) VALUES (?, ?, ?)`,\n args: [session.id, valSlug, session.expiresAt],\n });\n return session;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n await createSessionTable(tableName);\n return createSession(tableName, valSlug);\n }\n\n throw e;\n }\n}\n\nasync function getSession(tableName: string, sessionID: string, valSlug: string): Promise {\n try {\n const { rows, columns } = await sqlite.execute({\n sql: `SELECT * FROM ${tableName} WHERE id = ? AND val_slug = ?`,\n args: [sessionID, valSlug],\n });\n\n if (rows.length == 0) {\n return null;\n }\n\n return Object.fromEntries(zip(columns, rows.at(0))) as Session;\n } catch (e) {\n if (e.message.includes(\"no such table\")) {\n return null;\n }\n\n throw e;\n }\n}\n\nconst loginPage = `\n \n \n \n \n \n

This website is protected behind a password.

\n \n

This website is protected behind ${val.handle}'s Val Town API token.

If you are ${val.handle}, get your API token here.

If you are not ${val.handle}, you can fork this val to your account, and then login with your API token.\n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n verifyPassword: (password: string) => boolean | Promise;\n sessionTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function passwordAuth(next, options?: PasswordAuthOptions) {\n const sessionTable = options?.sessionTable || \"password_auth_session\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage);\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n if (!await options.verifyPassword(password)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n const session = await createSession(sessionTable, valSlug);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (req.headers.has(\"Authorization\")) {\n const requestToken = req.headers.get(\"Authorization\").replace(\"Bearer \", \"\").trim();\n if (!await options.verifyPassword(requestToken)) {\n return new Response(null, {\n status: 403,\n });\n }\n return next(req);\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signin\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req);\n };\n}","createdAt",["D",1726064375805],"branchVersion","branchId","b0afa880-25f0-11f0-ad23-569c3dd06744","id","b0af6c44-25f0-11f0-ad23-569c3dd06744","vtTokenSessionAuth",["D",1746037613513],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":55,"_102":103,"_104":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":88,"_89":61,"_90":51,"_91":92,"_93":94,"_95":45,"_96":97},"isOwned",4,"main","projectId","forkedBranchId","e85571b2-277f-11f0-b46e-569c3dd06744","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","e8551e38-277f-11f0-b46e-569c3dd06744","forkedProjectOrgId","4b933fb9-e150-4558-9d0a-845e595c8c78","projectName","userHandle","stevekrouse","handle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":173,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":-5,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":174,"_79":175,"_81":176,"_83":25},"tree",[164,165],"files",[164,165],"counts",{"_154":61,"_155":145,"_156":61,"_157":158,"_159":160},"contents",[139,140],"upstreamProject",{"_43":92,"_32":136,"_53":-5,"_54":-5,"_50":51,"_77":137},"upstreamBranch",{"_43":88,"_38":130,"_131":132,"_32":85,"_86":92,"_13":133,"_87":-5,"_89":-5,"_134":-5,"_47":-5,"_83":25,"_50":51,"_96":135,"_62":94,"_95":136},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746209076068],"updatedAt",["D",1755789148862],90,"lockfileKey","pomdtr","password_auth",{"_98":135,"_105":138},"https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg",{"_43":148,"_32":149,"_30":150,"_142":-5,"_41":42,"_40":145,"_143":49,"_38":151,"_13":61,"_33":20,"_35":152,"_24":25,"_146":-5,"_27":153},{"_43":141,"_32":28,"_30":31,"_142":-5,"_41":42,"_40":14,"_143":25,"_38":144,"_13":145,"_33":34,"_35":37,"_24":25,"_146":-5,"_27":147},"b0b56e50-25f0-11f0-ad23-569c3dd06744","parentId","latest",["D",1726064375805],1,"label",[28],"b0b1acc0-25f0-11f0-ad23-569c3dd06744","README.md","b0b1ad38-25f0-11f0-ad23-569c3dd06744",["D",1726064161636],"# Val Town Token Session Auth\n\nProtect your vals behind your Val Town API Token. Use session cookies to persist authentication.\n\nForked from @pomdtr/password_auth.\n\n## Usage\n\n```ts\nimport { vtTokenSessionAuth } from \"https://esm.town/v/stevekrouse/vtTokenSessionAuthSafe\";\n\nexport default vtTokenSessionAuth(() => Response.json(\"Authenticated!\"))\n```\n\nTo sign out, navigate to `/signout`.\n\nMigrated from folder: Archive/vtTokenSessionAuth",[149],"pulls","branches","forks","envVars",{"_161":61,"_163":61},"connections",{"_161":61,"_162":61},"count","unfilledCount","emptyCount",{"_43":148,"_32":149,"_30":150,"_142":-5,"_41":42,"_40":145,"_143":49,"_38":170,"_13":61,"_33":20,"_35":152,"_24":25,"_146":-5,"_167":171,"_27":172},{"_43":141,"_32":28,"_30":31,"_142":-5,"_41":42,"_40":14,"_143":25,"_38":166,"_13":145,"_33":34,"_35":37,"_24":25,"_146":-5,"_167":168,"_27":169},["D",1726064375805],"children",[],[28],["D",1726064161636],[],[149],["D",1746037613513],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":55,"_102":103,"_104":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":88,"_89":61,"_90":51,"_91":92,"_93":94,"_95":45,"_96":97},"ctx",{"_77":-5,"_127":210,"_211":212,"_213":214,"_215":25,"_216":25,"_217":25,"_218":49,"_219":-5,"_220":-7,"_221":-7,"_222":61,"_223":25,"_224":25,"_225":-5,"_226":25,"_227":25,"_228":25,"_229":-5},"ENV",{"_181":182,"_183":184,"_185":85,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2