This website is protected behind a password.

\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\ntype Handler = (req?: Request) => Response | Promise;\n\ntype PasswordAuthOptions = {\n verifyPassword: (password: string) => boolean | Promise;\n sessionTable?: string;\n};\n\nconst cookieName = \"auth_session\";\n\nexport function passwordAuth(next, options?: PasswordAuthOptions) {\n const sessionTable = options?.sessionTable || \"password_auth_session\";\n return async (req: Request) => {\n const val = inferRequestVal(req);\n const valSlug = `${val.handle}/${val.name}`;\n\n const url = new URL(req.url);\n if (url.pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage);\n }\n\n if (url.pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const password = formData.get(\"password\") as string;\n if (!await options.verifyPassword(password)) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n const session = await createSession(sessionTable, valSlug);\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n setCookie(res.headers, {\n name: cookieName,\n value: session.id,\n maxAge: session.expiresAt,\n httpOnly: true,\n secure: true,\n // to work in val.town iframes\n sameSite: \"None\",\n });\n\n return res;\n }\n\n if (url.pathname == \"/signout\") {\n const res = redirect(\"/signin\");\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (req.headers.has(\"Authorization\")) {\n const requestToken = req.headers.get(\"Authorization\").replace(\"Bearer \", \"\").trim();\n if (!await options.verifyPassword(requestToken)) {\n return new Response(null, {\n status: 403,\n });\n }\n return next(req);\n }\n\n const sessionID = getCookies(req.headers)[cookieName];\n if (!sessionID) {\n return redirect(\"/signin\");\n }\n\n const session = await getSession(sessionTable, sessionID, valSlug);\n if (!session) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n if (session.expiresAt < Date.now()) {\n const res = redirect(`/signin`);\n deleteCookie(res.headers, cookieName);\n return res;\n }\n\n return next(req);\n };\n}","label",[136],"6a0a264c-5c34-11f0-a1f1-0224a6c84d84","README.md","e1916dbe-3354-4739-8c3b-0aed91c13d84",["D",1752004063466],"# Password Auth Middleware\n\nProtect your vals behind a password. Use session cookies to persist authentication.\n\n![6ed0648ae8813e958dbe79468572cb52f578239c0fae55857a13660beebdc5fd.png](https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/36c1dc4f-4e19-457b-ad89-0bf139754e00/public)\n\n## Usage\n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth?v=84\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { verifyPassword: (password) => password == Deno.env.get(\"VAL_PASSWORD\") });\n```\n\nIf you want to use an [api token](https://www.val.town/settings/api) to authenticate: \n\n```ts\nimport { passwordAuth } from \"https://esm.town/v/pomdtr/password_auth?v=84\";\nimport { verifyToken } from \"https://esm.town/v/pomdtr/verifyToken\";\n\nexport default passwordAuth(() => {\n return new Response(\"OK\");\n}, { verifyPassword: verifyToken });\n```\n\n## TODO\n\n- [x] allow to authenticate using a val town token\n- [ ] add a way to send an email to ask a password from the val owner\n- [ ] automatically extend the session\n- [ ] automatically remove expired sessions\n\n## FAQ\n\n> How to sign out ?\n\nNavigate to `/signout`.",[152],"pulls","branches","forks","envVars",{"_164":20,"_166":20},"connections",{"_164":20,"_165":20},"count","unfilledCount","emptyCount",{"_32":151,"_13":152,"_137":153,"_139":-5,"_140":54,"_141":22,"_142":143,"_34":173,"_40":20,"_145":116,"_147":155,"_62":26,"_149":-5,"_170":174,"_104":175},{"_32":135,"_13":136,"_137":138,"_139":-5,"_140":54,"_141":22,"_142":143,"_34":169,"_40":20,"_145":146,"_147":148,"_62":26,"_149":-5,"_170":171,"_104":172},["D",1752004063466],"children",[],[136],["D",1752004063466],[],[152],["D",1752004063466],{"_11":12,"_103":99},{"_11":12,"_97":-5,"_98":99,"_71":72,"_100":101,"_102":26},{"_40":22,"_13":16,"_32":54,"_38":55,"_42":33,"_43":56,"_57":48,"_58":39,"_59":52,"_53":14,"_49":12},"ctx",{"_92":-5,"_126":213,"_214":215,"_216":217,"_218":26,"_219":26,"_220":26,"_221":143,"_222":-5,"_223":-7,"_224":-7,"_225":20,"_226":26,"_227":26,"_228":-5,"_229":26,"_230":26,"_231":26,"_232":-5},"ENV",{"_184":185,"_186":187,"_188":16,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergethebigmacmurray/mainintopomdtr/main