Search

Every user who wants to use this system is required to set up a JWKS endpoint at `@handle/jwks` (Instructions: [@postpostscript/jwks](https://val.town/v/postpostscript/jwks)). This is the foundation for trusted communication between code executed by different Val Town accounts, and is what enables this system

Anyone who wants to _sign in_ must fork the [@postpostscript/authId](https://val.town/v/postpostscript/authId) val which provides the sign in mechanism _just for you_. You can modify this to your liking as long as it provides the same outputs (redirecting back to the Client with `token` and `clientToken` query string params) with the same inputs (a Client Token)

If I want to require authentication for my HTTP val, I need to use middleware to protect the endpoint(s). The simplest of that is [@postpostscript/authMiddleware.authMiddlewareCookie](https://postpostscript-modulehighlightvaluelink.web.val.run/?module=@postpostscript/authMiddleware&name=authMiddlewareCookie), which will provide a login form for the endpoint and pass through the request once a trusted token is stored in the AUTH_ID_TOKEN cookie. By default, the val's owner is the only one who can sign into it. Here's an example JWT Payload that provides access to `@example/exampleApp`:

"sub": "@postpostscript/authId",

"clientTokenId": "12abb6d0-6c88-4d2f-bb56-88f79a2b4503",

"iat": 1709694976,

- I have been given permission to act as them (`scope`: `@postpostscript/authId/id`)

- I was authenticated at the request of a trusted client (`clientTokenId`: `12abb6d0-6c88-4d2f-bb56-88f79a2b4503`)

- `@example/exampleApp` is the only val that should accept this token (`aud`: `@example/exampleApp`)

- I entered my Val Town username (@postpostscript)

- I clicked "Go to Your Sign In Page" and was redirected to https://postpostscript-authid.web.val.run/?clientToken=[...]

- Since I hadn't verified my identity on my sign in page in an hour, I needed to do that by clicking "Send Sign In Link to My Email" and clicking the link in that email. Now the `@postpostscript/authId` endpoint knew I was @postpostscript!

- Next I reviewed the list of scopes `@example/exampleApp` was requesting. In this case, it was only the required scope of `@postpostscript/authId/id`, the one proving I am me. In other apps, I may see other scopes that the apps have _requested_ that I can optionally accept

- I clicked Provide Access to `@example/exampleApp` and was redirected to https://example-exampleapp.web.val.run/?token=[...]&clientToken[...]. If the app is happy with those tokens, I am now authenticated. If it were locked down to only be available to @example, I'd see an error here

"request/v1/*": "makes an API request as you",

A token [@postpostscript/authMiddleware.authMiddlewareCookie](https://postpostscript-modulehighlightvaluelink.web.val.run/?module=@postpostscript/authMiddleware&name=authMiddlewareCookie) generates to represent a sign-in request. It is passed to a user's sign-in page and then passed back afterwards to ensure both parties trust each other

Out of the box, [@postpostscript/jwks.verify](https://postpostscript-modulehighlightvaluelink.web.val.run/?module=@postpostscript/jwks&name=verify) enforces the maximum number of times a token can be validated when the field `maxUses` is present in its payload. Client Tokens use this to ensure that 1 sign-in request = 1 sign-in attempt, successful or not

[Browserbase](https://www.browserbase.com/) is a developer platform to run, manage, and monitor headless browsers at scale. We’ll use Browserbase to navigate to, and scrape our different news sources. We’ll also use [Browserbase’s Proxies](https://docs.browserbase.com/features/stealth-mode#proxies-and-residential-ips) to ensure we simulate authentic user interactions across multiple [browser sessions](https://docs.browserbase.com/features/sessions).

Get started with Browserbase for free [here](https://www.browserbase.com/sign-up).

[Defer and stream](https://the-guild.dev/graphql/yoga-server/docs/features/defer-stream) are directives that allow you to improve latency for clients by sending the most important data as soon as it’s ready.

roomId: string,

serverUrl: string = "https://matrix.org",

const url = `${serverUrl}/_matrix/client/v3/rooms/${

encodeURIComponent(roomId)

}/join`;

</div>

<div class="tech-stack">${project.keywords && project.keywords.map(tech => `<p>${tech}</p>`).join('') || ''}</div>

<aside>${project.description || ''}</aside>

<div class="highlights">

${project.highlights && project.highlights.map(desc => `<p class="highlight-item">${desc}</p>`).join('') || ''}

import { ogImage } from "https://esm.town/v/moe/ogImage"

export default async function(req: Request): Promise<Response> {

[Lit](https://lit.dev/docs/ssr/server-usage/) is kind of like Google's answer to React: it's a little more reliant on browser APIs like custom elements and the shadow DOM, a little less 'magic', like using JSX.

This is an example of using Lit and rendering it straight to a string, which is something that's recently popular. It works pretty well, right off the bat: Lit provides nice ESM modules and a pretty smooth workflow!

import process from "node:process";

import { Client } from "npm:@notionhq/client";

import { fetch } from "npm:cross-fetch";

export default async function(interval: Interval) {

throw new Error("Please fill in your API key and database ID");

let dont_update = [];

const notion = new Client({ auth: NOTION_API_KEY });

const databaseId = PAPERPILE_DB_ID;

const queryResponse = await notion.databases.query({

[Browserbase](https://www.browserbase.com/) is a developer platform to run, manage, and monitor headless browsers at scale. We’ll use Browserbase to navigate to, and scrape our different news sources. We’ll also use [Browserbase’s Proxies](https://docs.browserbase.com/features/stealth-mode#proxies-and-residential-ips) to ensure we simulate authentic user interactions across multiple [browser sessions](https://docs.browserbase.com/features/sessions).

Get started with Browserbase for free [here](https://www.browserbase.com/sign-up).

const postgres = await import("https://deno.land/x/postgres/mod.ts");

const client = new postgres.Client(Deno.env.get("neon_url"));

await client.connect();

export const testPostgres = await client.queryObject`select CURRENT_TIME;`;

[Browserbase](https://www.browserbase.com/) is a developer platform to run, manage, and monitor headless browsers at scale. We’ll use Browserbase to navigate to, and scrape our different news sources. We’ll also use [Browserbase’s Proxies](https://docs.browserbase.com/features/stealth-mode#proxies-and-residential-ips) to ensure we simulate authentic user interactions across multiple [browser sessions](https://docs.browserbase.com/features/sessions).

Get started with Browserbase for free [here](https://www.browserbase.com/sign-up).

import { createClient } from "https://esm.sh/@supabase/supabase-js@2";

const DISCORD_WEBHOOK = Deno.env.get("DISCORD_TANAKI_WEBHOOK");

export default async function(interval: Interval) {

const supabase = createClient(

Deno.env.get("TANAKI_SUPABASE_URL"),

[Browserbase](https://www.browserbase.com/) is a developer platform to run, manage, and monitor headless browsers at scale. We’ll use Browserbase to navigate to, and scrape our different news sources. We’ll also use [Browserbase’s Proxies](https://docs.browserbase.com/features/stealth-mode#proxies-and-residential-ips) to ensure we simulate authentic user interactions across multiple [browser sessions](https://docs.browserbase.com/features/sessions).

Get started with Browserbase for free [here](https://www.browserbase.com/sign-up).

[Browserbase](https://www.browserbase.com/) is a developer platform to run, manage, and monitor headless browsers at scale. We’ll use Browserbase to navigate to, and scrape our different news sources. We’ll also use [Browserbase’s Proxies](https://docs.browserbase.com/features/stealth-mode#proxies-and-residential-ips) to ensure we simulate authentic user interactions across multiple [browser sessions](https://docs.browserbase.com/features/sessions).

Get started with Browserbase for free [here](https://www.browserbase.com/sign-up).

const postgres = await import("https://deno.land/x/postgres/mod.ts");

const client = new postgres.Client(process.env.neon);

await client.connect();

console.log(await client.queryObject`select CURRENT_TIME;`);