/** @jsxImportSource npm:hono/jsx **/ import { createDate, isWithinExpirationDate, TimeSpan } from "npm:oslo"; import codeOnValTown from "https://esm.town/v/andreterron/codeOnValTown?v=50"; import { ValTownAdapter } from "https://esm.town/v/pomdtr/lucia_adapter"; import { createUser, getUser, verifyPassword } from "https://esm.town/v/pomdtr/lucia_sqlite"; import { Hono } from "npm:hono"; import { getCookie } from "npm:hono/cookie"; import { HTTPException } from "npm:hono/http-exception"; import { jsxRenderer } from "npm:hono/jsx-renderer"; import { Lucia, Session, User, verifyRequestOrigin } from "npm:lucia@3.0.1"; const userTable = "user"; const sessionTable = "session"; const adapter = new ValTownAdapter({ user: "user", session: "session", }); export const lucia = new Lucia(adapter, { getUserAttributes: (attributes) => { return { username: attributes.username, }; }, }); declare module "npm:lucia" { interface Register { Lucia: typeof lucia; DatabaseUserAttributes: DatabaseUserAttributes; } } interface DatabaseUserAttributes { username: string; } const router = new Hono<{ Variables: { user: User | null; session: Session | null; }; }>(); router.use("*", async (c, next) => { const sessionId = getCookie(c, lucia.sessionCookieName) ?? null; if (!sessionId) { c.set("user", null); c.set("session", null); return next(); } const { session, user } = await lucia.validateSession(sessionId); if (session && session.fresh) { // use `header()` instead of `setCookie()` to avoid TS errors c.header("Set-Cookie", lucia.createSessionCookie(session.id).serialize(), { append: true, }); } if (!session) { c.header("Set-Cookie", lucia.createBlankSessionCookie().serialize(), { append: true, }); } c.set("user", user); c.set("session", session); return next(); }); router.use(jsxRenderer(({ children }) => (

{children} ))); router.get("/", c => { const user = c.get("user"); if (!user) { return c.render(

You are not signed in

, ); } return c.render(

You are signed in as {user.username}

, ); }); router.get("/signup", c => c.render(

Sign up

, )); router.post("/signup", async c => { const body = await c.req.parseBody(); if (typeof body.username !== "string" || typeof body.password !== "string") { throw new HTTPException(400); } const userID = await createUser(userTable, body.username, body.password); const session = await lucia.createSession(userID, {}); c.header("Set-Cookie", lucia.createSessionCookie(session.id).serialize(), { append: true, }); return c.redirect("/"); }); router.get("/signin", c => c.render(

, )); router.post("/signin", async c => { const body = await c.req.parseBody(); if (typeof body.username !== "string" || typeof body.password !== "string") { throw new HTTPException(400); } const user = await getUser(userTable, body.username); if (!user) { throw new HTTPException(400); } const validPassword = await verifyPassword(user.hashed_password, body.password); if (!validPassword) { return new Response("Incorrect username or password", { status: 400, }); } const session = await lucia.createSession(user.id, {}); const sessionCookie = lucia.createSessionCookie(session.id); c.header("Set-Cookie", sessionCookie.serialize(), { append: true, }); return c.redirect("/"); }); router.post("/signout", async c => { const session = c.get("session"); if (!session) { throw new HTTPException(401); } await lucia.invalidateSession(session.id); c.header("Set-Cookie", lucia.createBlankSessionCookie().serialize(), { append: true, }); return c.redirect("/"); }); export default codeOnValTown(router.fetch);