import { extractValInfo } from "https://esm.town/v/pomdtr/extractValInfo"; import { zValidator } from "npm:@hono/zod-validator"; import ValTown from "npm:@valtown/sdk"; import { Hono } from "npm:hono"; import { hc } from "npm:hono/client"; import jwt from "npm:jsonwebtoken@9.0.2"; import z from "npm:zod"; const { httpEndpoint, rawUrl, htmlUrl } = extractValInfo(import.meta.url); const publicKeyPem = ` -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Srzty/n2zxU+2+CxUD s2BmSZ5LzTK1/kBMpJNMtQxmtdAcy3gYuYoflszBSeSHPLvYvGof3y9JTN3WH8Iv Jl4Medje3oAhRwAfV1T7r8xik8YGU4zjeI3oO2b/HTkEbN923wXWZ/w6zFJYGmXh Y3g4Qse3AQtx64Yo97paPDfhROxlT9h5qIkzRI5aAeRQTRRYMXMi2w1ICV03jde3 584wBWgo/+xMXA1UuRxukDmVsg5uzZh701tp99QoUnq42aUnjsLQjWnFKdiESXRv L0+QBkGPcwHALSIKoV45rr9CWNbBqi1ZywFdjw/XYcIRxpiO2omNxCe7kkRYW6AR 5QIDAQAB -----END PUBLIC KEY----- `; async function newSession(valTownToken: string) { const privateKeyPem = ` -----BEGIN PRIVATE KEY----- ${(Deno.env.get("VT_SESSION_PRIVATE_KEY") || "").replaceAll(" ", "\n")} -----END PRIVATE KEY-----`; const client = new ValTown({ bearerToken: valTownToken }); try { // Fetch user data const resp = await client.me.profile.retrieve(); const token = jwt.sign(resp, privateKeyPem, { algorithm: "RS256", expiresIn: "1h" }); return token; } catch (error) { console.error("Error creating session:", error); throw error; } } function validate(token: string) { const decoded = jwt.verify(token, publicKeyPem, { algorithms: ["RS256"] }) as & Awaited< ReturnType< InstanceType["me"]["profile"]["retrieve"] > > & jwt.JwtPayload; return decoded; } const app = new Hono(); const routes = app.post( "/new", zValidator("json", z.object({ valtownToken: z.string() })), async (c) => { const { valtownToken } = c.req.valid("json"); return c.json(await newSession(valtownToken)); }, ).post( "/validate", zValidator("json", z.object({ sessionToken: z.string() })), async (c) => { const { sessionToken } = c.req.valid("json"); return c.json(validate(sessionToken)); }, ).get("/", async (c) => { return c.html(` ValSession

ValSession

${htmlUrl}

Create short lived session (1hr) with your Val Town token so that you can safely authenticate with other services!

import { ValSession } from "${rawUrl}";

// Generate a token from your valtown api key.
const token = await ValSession.new(Deno.env.get("valtown"));

// Other services can use it to authenticate
const user = await ValSession.validate(token);

// user =>  {
//   id: "418c1e39-eb48-4f2f-8c97-122ece94631c",
//   bio: "🕳️",
//   username: "maxm",
//   profileImageUrl: "...",
//   url: "https://www.val.town/u/maxm",
//   tier: "pro",
//   email: "max.t.mcdonnell@gmail.com",
//   iat: 1732382035,
//   exp: 1732385635
// }

`); }).notFound((c) => { return c.json({ error: "Not Found" }, 404); }); type valSessionApi = typeof routes; const client = hc(httpEndpoint); export class ValSession { static async new(valtownToken: string): Promise { let resp = await client.new.$post({ json: { valtownToken } }); return await resp.json(); } static async validate(token: string) { let resp = await client.validate.$post({ json: { sessionToken: token } }); return await resp.json(); } } export default app.fetch.bind(app);