/** @jsxImportSource https://esm.sh/preact */ import { blob } from "https://esm.town/v/std/blob"; // import * as opaque from "npm:@cloudflare/opaque-ts"; import { Hono } from "npm:hono@3"; import { render } from "npm:preact-render-to-string"; const resp = (content, status) => new Response(render(content), { status, headers: { "Content-Type": "text/html", }, }); const trimSuffix = (s: string, suffix: string): string => { if (!s.endsWith(suffix)) { return s; } return s.slice(0, s.length - suffix.length); }; const getPassword = async (): Promise => { try { let resp = await blob.get(PASSWORD_BLOB_KEY); return await resp.text(); } catch (e) { return undefined; } }; const KNOWN_HOSTNAME = ".web.val.run"; const PASSWORD_BLOB_KEY = "password"; // hah const app = new Hono(); app.get("/", async (c) => { const password = await getPassword(); const u = new URL(c.req.url); if (!u.host.endsWith(KNOWN_HOSTNAME)) { return resp((

Hostname does not end with {KNOWN_HOSTNAME}, cannot continue

), 400); } const userAndValName = trimSuffix(u.host, KNOWN_HOSTNAME); const [username, valName] = userAndValName.split("-"); if (username === "") { return resp((

Username not found

), 400); } if (valName !== "userspaceauth") { return resp((

Val must be called "userspaceAuth"

), 400); } let content = password ?

Your password has been set up and this val is ready to authenticate requests for you

: ( ); return resp( (<>

Username: {username}

Val Name: {valName}

{content}

), 200, ); }); app.post("/", async (c) => { const fd = await c.req.formData(); const password = fd.get("password"); // TODO: more validation if (typeof password !== "string" || password.length < 8) { return resp((

Invalid password!

), 400); } await blob.set(PASSWORD_BLOB_KEY, "password"); return c.redirect("/"); }); app.get("/reset", async (c) => { // TODO: this can be abused await blob.delete(PASSWORD_BLOB_KEY); }); app.post("/validate", async (c) => { const realPassword = await getPassword(); const fd = await c.req.formData(); const password = fd.get("password"); const match = password === realPassword; return c.json(match, match ? 200 : 401); }); app.get("/validate/:password", async (c) => { const realPassword = await getPassword(); const password = c.req.param("password"); const match = password === realPassword; return c.json(match, match ? 200 : 401); }); export default app.fetch; // console.log(await opaque.getOpaqueConfig(opaque.OpaqueID.OPAQUE_P521).ake.generateAuthKeyPair());

userspaceAuth

Versions

v0