This website is protected behind ${val.handle}'s Val Town API token.

If you are ${val.handle}, get your API token here.

If you are not ${val.handle}, you can fork this val to your account, and then login with your API token.\n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n verifyPassword: (password: string) => boolean | Promise;\n sessionTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function passwordAuth(next, options?: PasswordAuthOptions) {\n const sessionTable = options?.sessionTable || \"password_auth_session\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage(val));\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n if (!await options.verifyPassword(password)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n const session = await createSession(sessionTable, valSlug);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (req.headers.has(\"Authorization\")) {\n const requestToken = req.headers.get(\"Authorization\").replace(\"Bearer \", \"\").trim();\n if (!await options.verifyPassword(requestToken)) {\n return new Response(null, {\n status: 403,\n });\n }\n return next(req);\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signin\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req);\n };\n}","label","children",[70],"contentHash","f09ae489ed03d1cc869a8c4fb68722ddfbc2bf783d518c3dad33718802b32df2","README.md",{"_32":94,"_13":92,"_75":95,"_77":-5,"_78":55,"_79":96,"_80":26,"_34":97,"_40":57,"_83":98,"_85":99,"_63":46,"_87":-5,"_88":-7,"_69":100,"_90":101},"b0b1acc0-25f0-11f0-ad23-569c3dd06744","b0b1ad38-25f0-11f0-ad23-569c3dd06744",1,["D",1726064161636],"file","# Val Town Token Session Auth\n\nProtect your vals behind your Val Town API Token. Use session cookies to persist authentication.\n\nForked from @pomdtr/password_auth.\n\n## Usage\n\n```ts\nimport { vtTokenSessionAuth } from \"https://esm.town/v/stevekrouse/vtTokenSessionAuthSafe\";\n\nexport default vtTokenSessionAuth(() => Response.json(\"Authenticated!\"))\n```\n\nTo sign out, navigate to `/signout`.\n\nMigrated from folder: Archive/vtTokenSessionAuth",[92],"0d9e77dfdf0ccfaae7b8c6ccf5164b4b9c1387f4dc8696b56fa7abc6762ee7d1",["D",1746037613513],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_139":135},"org",{"_11":12,"_133":-5,"_134":135,"_107":108,"_136":137,"_138":46},"branch","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":56,"_13":14,"_34":189,"_44":-5,"_103":26,"_47":48,"_104":48,"_105":-5,"_106":-5,"_107":108,"_109":-5,"_110":26,"_111":-5,"_112":-5,"_113":57,"_51":114,"_115":-5,"_116":-5,"_117":-5,"_118":-5,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_128":190,"_130":191,"_132":192,"_45":46},"tree",[183,184],"files",[183,184],"counts",{"_173":57,"_174":96,"_175":57,"_176":177,"_178":179},"contents",[167,168],"upstreamProject",{"_32":39,"_13":54,"_105":-5,"_106":-5,"_47":48,"_128":165},"upstreamBranch",{"_32":33,"_34":163,"_36":164,"_13":16,"_38":39,"_40":22,"_41":-5,"_42":-5,"_43":-5,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746209076068],["D",1755789148862],{"_11":50,"_139":166},"https://images.clerk.dev/oauth_github/img_2RCoAITJZH1QencEgtVjh4Qirj4.jpeg",{"_32":94,"_13":92,"_75":95,"_77":-5,"_78":55,"_79":96,"_80":26,"_34":171,"_40":57,"_83":98,"_85":99,"_63":46,"_87":-5,"_69":172},{"_32":74,"_13":70,"_75":76,"_77":-5,"_78":55,"_79":20,"_80":26,"_34":169,"_40":82,"_83":84,"_85":86,"_63":46,"_87":-5,"_69":170},["D",1726064663757],[70],["D",1726064161636],[92],"pulls","branches","forks","envVars",{"_180":57,"_182":57},"connections",{"_180":57,"_181":57},"count","unfilledCount","emptyCount",{"_32":94,"_13":92,"_75":95,"_77":-5,"_78":55,"_79":96,"_80":26,"_34":97,"_40":57,"_83":98,"_85":99,"_63":46,"_87":-5,"_88":187,"_69":188},{"_32":74,"_13":70,"_75":76,"_77":-5,"_78":55,"_79":20,"_80":26,"_34":81,"_40":82,"_83":84,"_85":86,"_63":46,"_87":-5,"_88":185,"_69":186},[],[70],[],[92],["D",1746037613513],{"_11":12,"_139":135},{"_11":12,"_133":-5,"_134":135,"_107":108,"_136":137,"_138":46},{"_40":20,"_13":16,"_32":55,"_38":56,"_41":33,"_42":57,"_58":48,"_59":39,"_60":52,"_53":14,"_49":12},"ctx",{"_128":-5,"_160":226,"_227":228,"_229":230,"_231":46,"_232":46,"_233":46,"_234":26,"_235":-5,"_236":-7,"_237":-7,"_238":57,"_239":46,"_240":46,"_241":-5,"_242":46,"_243":46,"_244":46,"_245":-5},"ENV",{"_197":198,"_199":200,"_201":16,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergestevekrouse/mainintopomdtr/main

README.md+17-0

main.tsx+172-0