Fiberplane OpenTelemetry Trace Collector on ValTown

\n Visit /fp to view the Fiberplane API explorer.\n

\n\n\n\n`.trim());\n});\n\nexport default app;",[],[349,358],"5ada1bc2-4272-11f0-bf0a-76b3cceeab13","auth.ts","e56f55e0-62b5-4714-acba-83e705cc0b2d",["D",1749171936578],"import { timingSafeEqual } from \"https://deno.land/std/crypto/mod.ts\";\n\nimport { HTTPException } from \"../deps/hono.ts\";\nimport type { AppMiddleware } from \"./types.ts\";\n\n/**\n * Middleware that authenticates requests with a Bearer token.\n * Assumes that `AUTH_TOKEN` is set in the environment.\n *\n * @TODO - Improve token comparison.\n * Simple string comparison is not very secure against timing attacks.\n */\nexport const authenticate: AppMiddleware = async (ctx, next) => {\n const authHeader = ctx.req.header(\"Authorization\");\n\n if (!authHeader?.startsWith(\"Bearer \")) {\n throw new HTTPException(401, {\n message: \"Missing or invalid bearer token\",\n });\n }\n\n const token = authHeader.slice(7);\n\n const isValid = timingSafeTokenComparison(token, ctx.env.AUTH_TOKEN);\n\n if (!isValid) {\n throw new HTTPException(401, {\n message: \"Invalid token\",\n });\n }\n\n await next();\n};\n\n/**\n * Token comparison that mitigates against timing based attacks\n */\nfunction timingSafeTokenComparison(userToken: string, appToken: string) {\n const userTokenByes = new TextEncoder().encode(userToken);\n const appTokenBytes = new TextEncoder().encode(appToken);\n \n // Check if lengths match (this is considered acceptable to reveal)\n if (userTokenByes.length !== appTokenBytes.length) {\n return false;\n }\n \n // Perform constant-time comparison\n const isValid = timingSafeEqual(userTokenByes, appTokenBytes);\n\n return isValid;\n}",[],[349,365],"5ada44bc-4272-11f0-bf0a-76b3cceeab13",["D",1749171936578],[204,205,206,207],[349],["D",1749171936578],{"_11":12,"_139":75},{"_11":12,"_135":-5,"_74":75,"_31":73,"_136":137,"_138":30},{"_39":40,"_13":16,"_33":36,"_123":89,"_124":125,"_126":127,"_128":94,"_129":130,"_131":132,"_133":14,"_134":12},"ctx",{"_51":-5,"_160":412,"_413":414,"_415":416,"_417":30,"_418":30,"_419":30,"_420":24,"_421":-5,"_422":-7,"_423":-7,"_424":26,"_425":30,"_426":30,"_427":-5,"_428":30,"_429":30,"_430":30,"_431":-5},"ENV",{"_383":384,"_385":386,"_387":16,"_388":389,"_390":391,"_392":393,"_394":395,"_396":397,"_398":399,"_400":401,"_402":403,"_404":405,"_406":407,"_408":409,"_410":411},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","a3e067d4463eea85f6334f8e583e8516ae58c4f6","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · deps