/** @jsxImportSource npm:hono/jsx **/ import { ValTownAdapter } from "https://esm.town/v/stevekrouse/lucia_adapter"; import { createUser, getUser, verifyPassword } from "https://esm.town/v/stevekrouse/lucia_sqlite"; import { Hono } from "npm:hono"; import { getCookie } from "npm:hono/cookie"; import { csrf } from "npm:hono/csrf"; import { HTTPException } from "npm:hono/http-exception"; import { jsxRenderer } from "npm:hono/jsx-renderer"; import { Lucia, Session, User, verifyRequestOrigin } from "npm:lucia@3.0.1"; import { createDate, isWithinExpirationDate, TimeSpan } from "npm:oslo"; const userTable = "user"; const sessionTable = "session"; const adapter = new ValTownAdapter({ userTable, sessionTable }); export const lucia = new Lucia(adapter, { getUserAttributes: (attributes) => { return { username: attributes.username, }; }, }); declare module "npm:lucia" { interface Register { Lucia: typeof lucia; DatabaseUserAttributes: DatabaseUserAttributes; } } interface DatabaseUserAttributes { username: string; } const app = new Hono<{ Variables: { user: User | null; session: Session | null; }; }>(); // Learn more: https://lucia-auth.com/guides/validate-session-cookies/hono app.use(csrf()); app.use("*", async (c, next) => { const sessionId = getCookie(c, lucia.sessionCookieName) ?? null; if (!sessionId) { c.set("user", null); c.set("session", null); return next(); } const { session, user } = await lucia.validateSession(sessionId); if (session && session.fresh) { // use `header()` instead of `setCookie()` to avoid TS errors c.header("Set-Cookie", lucia.createSessionCookie(session.id).serialize(), { append: true, }); } if (!session) { c.header("Set-Cookie", lucia.createBlankSessionCookie().serialize(), { append: true, }); } c.set("user", user); c.set("session", session); return next(); }); app.use(jsxRenderer(({ children }) => (

{children} ))); app.get("/", c => { const user = c.get("user"); if (!user) { return c.render(

You are not signed in

, ); } return c.render(

You are signed in as {user.username}

, ); }); app.get("/signup", c => c.render(

Sign up

, )); app.post("/signup", async c => { const body = await c.req.parseBody(); if (typeof body.username !== "string" || typeof body.password !== "string") { throw new HTTPException(400); } const username = body.username; const password = body.password; if ( username.length < 3 || username.length > 31 || !/^[a-z0-9_-]+$/.test(username) ) { return new Response("Invalid username: needs to be > 3 and < 31 characters and match regex: ^[a-z0-9_-]+$", { status: 400, }); } if (password.length < 6 || password.length > 255) { return new Response("Invalid password: needs to be > 6 and < 255 characters", { status: 400, }); } const userID = await createUser({ userTable, sessionTable, username, password, }); const session = await lucia.createSession(userID, {}); c.header("Set-Cookie", lucia.createSessionCookie(session.id).serialize(), { append: true, }); return c.redirect("/"); }); app.get("/signin", c => c.render(

, )); app.post("/signin", async c => { const body = await c.req.parseBody(); if (typeof body.username !== "string" || typeof body.password !== "string") { throw new HTTPException(400); } const user = await getUser(userTable, body.username); if (!user) { throw new HTTPException(400); } const validPassword = await verifyPassword(user.hashed_password, body.password); if (!validPassword) { return new Response("Incorrect username or password", { status: 400, }); } const session = await lucia.createSession(user.id, {}); const sessionCookie = lucia.createSessionCookie(session.id); c.header("Set-Cookie", sessionCookie.serialize(), { append: true, }); return c.redirect("/"); }); app.post("/signout", async c => { const session = c.get("session"); if (!session) { throw new HTTPException(401); } await lucia.invalidateSession(session.id); c.header("Set-Cookie", lucia.createBlankSessionCookie().serialize(), { append: true, }); return c.redirect("/"); }); export default app.fetch;

lucia_demo