\n \n

\n \n`;\n\nexport function redirect(location: string): Response {\n return new Response(null, {\n headers: {\n location,\n },\n status: 302,\n });\n}\n\nfunction generateAccessToken(user) {\n return jwt.sign(user, process.env.ACCESS_TOKEN_SECRET, { expiresIn: \"1800s\" });\n}\n\ntype User = {\n id: string;\n username: string;\n};\n\nasync function fetchUser(token: string): Promise {\n const resp = await fetch(\"https://api.val.town/v1/me\", {\n headers: {\n Authorization: `Bearer ${token}`,\n },\n });\n\n if (resp.status !== 200) {\n throw new Error(\"Could not fetch user\");\n }\n\n return resp.json();\n}\n\nfunction signout() {\n const res = redirect(\"/\");\n cookie.setCookie(res.headers, {\n name: \"user-jwt\",\n value: \"\",\n httpOnly: true,\n secure: true,\n sameSite: \"None\",\n maxAge: 0,\n });\n return res;\n}\n\nexport function auth(handler) {\n const secretKey = Deno.env.get(\"AUTH_SECRET_KEY\");\n if (!secretKey) {\n throw new Error(\"env var AUTH_SECRET_KEY not set\");\n }\n return async (req: Request) => {\n const { pathname, hostname, origin } = new URL(req.url);\n const val = {\n username: `@${hostname.split(\"-\")[0]}`,\n };\n\n if (pathname == \"/signin\" && req.method == \"GET\") {\n return html(loginPage);\n }\n\n if (pathname == \"/signin\" && req.method == \"POST\") {\n const formData = await req.formData();\n const token = formData.get(\"token\").toString();\n const user = await fetchUser(token);\n if (user.username != val.username) {\n return new Response(\"Unauthorized\", {\n status: 403,\n });\n }\n\n const webToken = jwt.sign(user, secretKey, { expiresIn: \"7d\" });\n const res = redirect(\"/\");\n cookie.setCookie(res.headers, {\n name: \"user-jwt\",\n value: webToken,\n httpOnly: true,\n secure: true,\n sameSite: \"None\",\n });\n return res;\n }\n\n if (pathname == \"/signout\") {\n return signout();\n }\n\n const webToken = cookie.getCookies(req.headers)[\"user-jwt\"];\n if (!webToken) {\n return redirect(\"/signin\");\n }\n try {\n const user = jwt.verify(webToken, secretKey) as User;\n if (user.username != val.username) {\n return new Response(`Unauthorized`, {\n status: 403,\n });\n }\n } catch (err) {\n return signout();\n }\n\n return handler(req);\n };\n}","createdAt",["D",1704818115025],"version",1,"currentUserHasLiked","likeCount","forkCount","referenceCount","dependencyCount",5,"commentCount","prCount","mergedPr",{"_131":132,"_133":134},"handle","stevekrouse","profileImageUrl","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","forkedVal",{"_114":137,"_131":138,"_98":99,"_119":139,"_140":-5},"7e72c800-af06-11ee-86f0-a6995376af49","pomdtr",94,"prDisabledHint","interval","slug","stevekrouse/auth_middleware","description","Authentication middleware Guards your public http vals behind a login page. This val use a json web token stored as an http-only cookie to persist authentication. Usage Set an AUTH_SECRET_KEY env variable (used to sign/verify jwt tokens). Use an API token to authenticate. import { auth } from \"https://esm.town/v/pomdtr/auth_middleware\";\n\nasync function handler(req: Request): Promise {\n return new Response(\"You are authenticated!\");\n}\n\nexport default auth(handler); See @pomdtr/test_auth for an example ⚠️ Make sure to only provides your api token to vals you trust (i.e. your own), as it gives access to your whole account.","versions",[148,151],{"_119":120,"_149":-5,"_117":150,"_114":112},"prId",["D",1704818115025],{"_119":31,"_149":-5,"_117":152,"_114":153},["D",1704818052934],"ec060002-af0c-11ee-9db6-a6995376af49","recentThread","breadcrumbs","comments",[],"isOwner","routes/_app.v.$handle.$name.versions.$(version)",{"_93":161,"_162":163,"_94":164},"single","redirect","/v/stevekrouse/auth_middleware/versions",{"_114":153,"_115":165,"_119":31,"_117":166,"_167":99,"_100":101,"_109":110,"_131":132,"_11":96,"_168":-5,"_169":-5,"_170":-5,"_158":26,"_142":143},"import * as cookie from \"https://deno.land/std/http/cookie.ts\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { callerRef } from \"https://esm.town/v/pomdtr/refs\";\nimport { sql } from \"https://esm.town/v/pomdtr/sql\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\nimport { html } from \"https://esm.town/v/stevekrouse/html?v=5\";\nimport jwt from \"npm:jsonwebtoken\";\n\nconst cookieName = \"user-jwt\";\n\nconst loginPage = `\n \n \n \n \n \n

\n \n

auth_middleware

Version 0