@geekity/cms 0.3.0

package/dist/admin/routes.js

@@ -0,0 +1,383 @@
+import { contentFilePath, freeSlug, saveDocument } from '../content/save.js';
+import { defaultPermalink, slugify } from '../content/slug.js';
+import { normalizeBody } from '../content/writer.js';
+import { adminAssetResponse, ADMIN_ASSET_PREFIX } from './assets.js';
+import { credentialProblem } from './credentials.js';
+import { editorPath, mountDocumentScreens, PAGE_KIND, POST_KIND } from './documents.js';
+import { FEDERATION_PATH, mountFederationScreen } from './federation.js';
+import { flash, takeFlash } from './flash.js';
+import { mountPreview } from './preview.js';
+import { AVATAR_PATH, mountSettings } from './settings.js';
+import { ADMIN_PREFIX, clearSessionCookie, CSRF_FIELD, csrfTokenMatches, sessionIdFrom, setSessionCookie, } from './session.js';
+import { DuplicateUsernameError } from './store.js';
+import { ADMIN_TEMPLATES, createAdminTemplateEnvironment } from './templates.js';
+import { mountUploads, refuseOversizedUpload, UPLOADS_PATH } from './uploads.js';
+import { mountUsers } from './users.js';
+/** Where the login form lives. */
+export const LOGIN_PATH = `${ADMIN_PREFIX}/login`;
+/** Where the first-run form lives. */
+export const SETUP_PATH = `${ADMIN_PREFIX}/setup`;
+/** Where the logout form posts. */
+export const LOGOUT_PATH = `${ADMIN_PREFIX}/logout`;
+/** Where the dashboard's quick draft form posts. */
+export const QUICK_DRAFT_PATH = `${ADMIN_PREFIX}/quick-draft`;
+/**
+ * The sections of the admin, in the order doc-5 lists them.
+ *
+ * Every screen renders the same list and marks one of them, so a screen added
+ * later only has to name its section. The screens behind most of these links
+ * are still placeholders; the navigation is the shape of the whole admin, not
+ * of the part that is built.
+ */
+export const ADMIN_SECTIONS = [
+    { section: 'dashboard', label: 'Dashboard', url: ADMIN_PREFIX },
+    { section: 'posts', label: 'Posts', url: `${ADMIN_PREFIX}/posts` },
+    { section: 'pages', label: 'Pages', url: `${ADMIN_PREFIX}/pages` },
+    { section: 'settings', label: 'Settings', url: `${ADMIN_PREFIX}/settings` },
+    { section: 'users', label: 'Users', url: `${ADMIN_PREFIX}/users` },
+    { section: 'federation', label: 'Federation', url: `${ADMIN_PREFIX}/federation` },
+];
+/** How many recent posts the dashboard lists. */
+export const DASHBOARD_RECENT_POSTS = 5;
+/** Where the editor for a post lives. */
+export function postEditorPath(slug) {
+    return editorPath(POST_KIND, slug);
+}
+/**
+ * Register the admin on a Hono app.
+ *
+ * Everything under `/admin` goes through one guard, registered as middleware
+ * rather than per route, so a path with no handler of its own — `/admin/posts`
+ * before TASK-11 builds it — still redirects an anonymous visitor to the login
+ * form instead of falling through to the public site's 404.
+ *
+ * The guard decides three things, in order: whether the site has any users at
+ * all (none means every admin URL is the setup form), whether the request
+ * carries a live session, and, for anything but a GET, whether it carries this
+ * session's CSRF token.
+ */
+export function mountAdmin(app) {
+    // Built on the first request, because the config that says whether to cache
+    // templates is only on the context.
+    let environment;
+    function templates(c) {
+        environment ??= createAdminTemplateEnvironment({ noCache: c.var.config.watch });
+        return environment;
+    }
+    /**
+     * Render one admin template.
+     *
+     * Everything the chrome needs — who is signed in, the navigation, the CSRF
+     * token, the queued flash messages — is put in the context here rather than
+     * by each handler, so a new screen is a template and a `section` name.
+     * Reading the flash is what clears it, so it shows on exactly this page.
+     */
+    function render(c, template, context = {}) {
+        const session = c.var.session;
+        const userId = session?.userId ?? null;
+        const html = templates(c).render(template, {
+            site: c.var.renderer.site(),
+            adminUrl: ADMIN_PREFIX,
+            siteUrl: '/',
+            assetPrefix: ADMIN_ASSET_PREFIX,
+            navigation: ADMIN_SECTIONS,
+            logoutUrl: LOGOUT_PATH,
+            csrfToken: session?.csrfToken ?? '',
+            user: userId === null ? undefined : c.var.admin.getUserById(userId),
+            flash: takeFlash(c),
+            ...context,
+        });
+        return c.html(html);
+    }
+    // Registered before the guard, so the login page can load its stylesheet
+    // while nobody is logged in. Nothing under it is secret.
+    app.get(`${ADMIN_ASSET_PREFIX}*`, (c) => {
+        const pathname = new URL(c.req.url).pathname.slice(ADMIN_ASSET_PREFIX.length);
+        const response = adminAssetResponse(decodePath(pathname), c.req.header('if-none-match'));
+        return response ?? c.notFound();
+    });
+    // In front of the guard, because the guard parses the form to find the CSRF
+    // token and parsing a multipart form reads the whole file into memory. Both
+    // multipart endpoints need it: the editor's uploads and the avatar's.
+    app.use(UPLOADS_PATH, refuseOversizedUpload);
+    app.use(AVATAR_PATH, refuseOversizedUpload);
+    app.use(ADMIN_PREFIX, guard);
+    app.use(`${ADMIN_PREFIX}/*`, guard);
+    app.get(SETUP_PATH, (c) => {
+        anonymousSession(c);
+        return render(c, ADMIN_TEMPLATES.setup, { setupUrl: SETUP_PATH, username: '' });
+    });
+    app.post(SETUP_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const username = text(body[USERNAME_FIELD]).trim();
+        const password = text(body[PASSWORD_FIELD]);
+        const confirmation = text(body['password_confirmation']);
+        const problem = setupProblem(username, password, confirmation);
+        if (problem !== undefined)
+            return refuseSetup(c, username, problem);
+        let user;
+        try {
+            user = c.var.admin.createUser({ username, password });
+        }
+        catch (error) {
+            if (error instanceof DuplicateUsernameError) {
+                return refuseSetup(c, username, error.message);
+            }
+            throw error;
+        }
+        // The first admin is logged straight in; making an account and then being
+        // shown a login form would be a pointless second step.
+        return logIn(c, user);
+    });
+    app.get(LOGIN_PATH, (c) => {
+        anonymousSession(c);
+        return render(c, ADMIN_TEMPLATES.login, { loginUrl: LOGIN_PATH, username: '' });
+    });
+    app.post(LOGIN_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const username = text(body[USERNAME_FIELD]).trim();
+        const password = text(body[PASSWORD_FIELD]);
+        const user = c.var.admin.verifyPassword(username, password);
+        if (user === undefined) {
+            // One message for both failures, so the form cannot be used to find out
+            // which usernames exist.
+            anonymousSession(c);
+            c.status(401);
+            return render(c, ADMIN_TEMPLATES.login, {
+                loginUrl: LOGIN_PATH,
+                username,
+                error: 'That username and password do not match.',
+            });
+        }
+        return logIn(c, user);
+    });
+    app.post(LOGOUT_PATH, (c) => {
+        const session = c.var.session;
+        if (session !== undefined)
+            c.var.admin.deleteSession(session.id);
+        clearSessionCookie(c, c.var.config);
+        return c.redirect(LOGIN_PATH, 303);
+    });
+    app.get(ADMIN_PREFIX, (c) => {
+        const store = c.var.store;
+        return render(c, ADMIN_TEMPLATES.dashboard, {
+            section: 'dashboard',
+            counts: store.counts(),
+            recent: store.listAll({ type: 'post', limit: DASHBOARD_RECENT_POSTS }).map((document) => ({
+                title: document.title,
+                slug: document.slug,
+                date: document.date,
+                draft: document.draft,
+                editUrl: postEditorPath(document.slug),
+            })),
+            quickDraftUrl: QUICK_DRAFT_PATH,
+            // The one number on the dashboard that is not about the content
+            // directory: it is what says whether publishing is reaching anybody.
+            followers: c.var.admin.countFollowers(),
+            federationUrl: FEDERATION_PATH,
+        });
+    });
+    /**
+     * The dashboard's quick draft: a title and a body, straight to a draft file.
+     *
+     * It writes a draft rather than a published post because the point of the box
+     * is to catch an idea before it goes, and because the editor TASK-11 builds is
+     * where the decision to publish belongs.
+     */
+    app.post(QUICK_DRAFT_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const title = text(body['title']).trim();
+        if (title === '') {
+            flash(c, 'error', 'A draft needs a title.');
+            return c.redirect(ADMIN_PREFIX, 303);
+        }
+        const contentDir = c.var.config.contentDir;
+        const store = c.var.store;
+        const date = new Date().toISOString();
+        const slug = await freeSlug({
+            contentDir,
+            store,
+            type: 'post',
+            slug: slugify(title) || 'untitled',
+            date,
+        });
+        const document = await saveDocument({
+            contentDir,
+            store,
+            path: contentFilePath({ type: 'post', slug, date }),
+            content: {
+                title,
+                date,
+                permalink: defaultPermalink({ type: 'post', slug, date }),
+                tags: [],
+                draft: true,
+                extra: {},
+                body: normalizeBody(text(body['body'])),
+            },
+        });
+        await c.var.announce({
+            type: 'created',
+            path: document.path,
+            previous: undefined,
+            next: document,
+            origin: 'admin',
+        });
+        flash(c, 'notice', `Draft saved: ${document.title}`);
+        return c.redirect(postEditorPath(document.slug), 303);
+    });
+    // The listing and the editor. Posts and pages are the same screens over the
+    // same store; the kind decides what a file is called and which fields the
+    // form has.
+    mountDocumentScreens(app, { kind: POST_KIND, render });
+    mountDocumentScreens(app, { kind: PAGE_KIND, render });
+    // The two endpoints the editor talks to rather than navigates to. Both are
+    // inside the guard, so both need the session's CSRF token like every other
+    // POST in the admin.
+    mountPreview(app);
+    mountUploads(app);
+    // The site's own settings: SQLite is the source, content/_data/site.json is
+    // the mirror an Eleventy build of the same content reads.
+    mountSettings(app, { render });
+    // Who may sign in: the list, the add form, and the change-password form for
+    // whoever is looking at it.
+    mountUsers(app, { render });
+    // The fediverse side: the actor, the followers, the inbox log, and what the
+    // site sent to whom.
+    mountFederationScreen(app, { render });
+    const built = new Set([
+        POST_KIND.section,
+        PAGE_KIND.section,
+        'dashboard',
+        'settings',
+        'users',
+        'federation',
+    ]);
+    // The sections doc-5 lists but no task has built yet. They are registered so
+    // the navigation goes somewhere: a link that 404s reads as a broken admin,
+    // and the guard already keeps strangers out of all of them.
+    for (const item of ADMIN_SECTIONS) {
+        if (built.has(item.section))
+            continue;
+        app.get(item.url, (c) => render(c, ADMIN_TEMPLATES.placeholder, { section: item.section, heading: item.label }));
+    }
+    // `/admin/` is the same screen as `/admin`, and only one of them is the URL.
+    app.get(`${ADMIN_PREFIX}/`, (c) => c.redirect(ADMIN_PREFIX, 301));
+    /** The session to hang a CSRF token on, made on the spot if there is none. */
+    function anonymousSession(c) {
+        const existing = c.var.session;
+        if (existing !== undefined)
+            return existing;
+        const session = c.var.admin.createSession({
+            userId: null,
+            lifetimeSeconds: c.var.config.sessionLifetime,
+        });
+        setSessionCookie(c, session.id, { config: c.var.config, expiresAt: session.expiresAt });
+        c.set('session', session);
+        return session;
+    }
+    /** Re-render the setup form with a message, and the status a bad form gets. */
+    function refuseSetup(c, username, error) {
+        anonymousSession(c);
+        c.status(400);
+        return render(c, ADMIN_TEMPLATES.setup, { setupUrl: SETUP_PATH, username, error });
+    }
+    /**
+     * Start an authenticated session and send the browser to the dashboard.
+     *
+     * The session the request arrived with is deleted rather than promoted, so a
+     * session id an attacker planted before login is not the id that ends up
+     * logged in.
+     */
+    function logIn(c, user) {
+        const admin = c.var.admin;
+        const previous = c.var.session;
+        if (previous !== undefined)
+            admin.deleteSession(previous.id);
+        // Logging in is rare and cheap; it is a good moment to sweep the table.
+        admin.pruneSessions();
+        const session = admin.createSession({
+            userId: user.id,
+            lifetimeSeconds: c.var.config.sessionLifetime,
+        });
+        setSessionCookie(c, session.id, { config: c.var.config, expiresAt: session.expiresAt });
+        c.set('session', session);
+        return c.redirect(ADMIN_PREFIX, 303);
+    }
+}
+const USERNAME_FIELD = 'username';
+const PASSWORD_FIELD = 'password';
+/**
+ * The one gate in front of every admin URL.
+ *
+ * It is exported so a site that mounts its own admin routes can put them
+ * behind the same guard, and so the ordering is testable.
+ */
+export const guard = async (c, next) => {
+    const admin = c.var.admin;
+    const pathname = new URL(c.req.url).pathname;
+    // Reading a session prunes it when it has expired, so an expired session is
+    // gone from here on, not merely ignored.
+    const sessionId = sessionIdFrom(c);
+    const session = sessionId === undefined ? undefined : admin.getSession(sessionId);
+    c.set('session', session);
+    const isSetup = pathname === SETUP_PATH;
+    const isLogin = pathname === LOGIN_PATH;
+    if (admin.countUsers() === 0) {
+        // Nobody can log in yet, so there is exactly one thing to do here.
+        if (!isSetup)
+            return c.redirect(SETUP_PATH, 302);
+    }
+    else {
+        // Setup is over. Offering the form again would be an open door.
+        if (isSetup)
+            return c.redirect(session?.userId == null ? LOGIN_PATH : ADMIN_PREFIX, 302);
+        if (!isLogin && (session === undefined || session.userId === null)) {
+            return c.redirect(LOGIN_PATH, 302);
+        }
+    }
+    if (c.req.method !== 'GET' && c.req.method !== 'HEAD') {
+        if (session === undefined || !csrfTokenMatches(session.csrfToken, await submittedToken(c))) {
+            return c.text('That form was stale or came from somewhere else. Reload and try again.', 403);
+        }
+    }
+    await next();
+};
+/** The CSRF token in the request body, if the body is a form at all. */
+async function submittedToken(c) {
+    const contentType = c.req.header('content-type') ?? '';
+    if (!contentType.includes('application/x-www-form-urlencoded') &&
+        !contentType.includes('multipart/form-data')) {
+        return undefined;
+    }
+    // Hono caches the parsed form, so the handler behind this parses nothing twice.
+    const body = await c.req.parseBody();
+    return body[CSRF_FIELD];
+}
+/**
+ * A percent-decoded request path. A path that will not decode is handed on as
+ * it arrived, where it will match no file and become a 404.
+ */
+function decodePath(pathname) {
+    try {
+        return decodeURIComponent(pathname);
+    }
+    catch {
+        return pathname;
+    }
+}
+/** A form field as a string. A file upload, or a missing field, is the empty one. */
+function text(value) {
+    return typeof value === 'string' ? value : '';
+}
+/** What is wrong with a proposed first admin, or `undefined` when nothing is. */
+function setupProblem(username, password, confirmation) {
+    // The same rules `geekity user add` enforces, so an account made either way
+    // is an account the other door would have accepted.
+    const problem = credentialProblem(username, password);
+    if (problem !== undefined)
+        return problem;
+    if (password !== confirmation)
+        return 'The two passwords do not match.';
+    return undefined;
+}
+//# sourceMappingURL=routes.js.map

package/dist/admin/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/admin/routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,kCAAkC;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,QAAQ,CAAC;AAClD,sCAAsC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,QAAQ,CAAC;AAClD,mCAAmC;AACnC,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,YAAY,SAAS,CAAC;AACpD,oDAAoD;AACpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,YAAY,cAAc,CAAC;AAY9D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE;IAC/D,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,QAAQ,EAAE;IAClE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,QAAQ,EAAE;IAClE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,YAAY,WAAW,EAAE;IAC3E,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,QAAQ,EAAE;IAClE,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,YAAY,aAAa,EAAE;CAClF,CAAC;AAEF,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,yCAAyC;AACzC,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,GAAqB;IAC9C,4EAA4E;IAC5E,oCAAoC;IACpC,IAAI,WAAoC,CAAC;IAEzC,SAAS,SAAS,CAAC,CAAsB;QACvC,WAAW,KAAK,8BAA8B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,MAAM,CACb,CAAsB,EACtB,QAAgB,EAChB,OAAO,GAA4B,EAAE;QAErC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;QAEvC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC3B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,kBAAkB;YAC/B,UAAU,EAAE,cAAc;YAC1B,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;YACnC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YACnE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACnB,GAAG,OAAO;SACX,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,yEAAyE;IACzE,yDAAyD;IACzD,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QACzF,OAAO,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,4EAA4E;IAC5E,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,EAAE,KAAK,CAAC,CAAC;IAEpC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEpE,IAAI,IAAU,CAAC;QACf,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,uDAAuD;QACvD,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,wEAAwE;YACxE,yBAAyB;YACzB,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE;gBACtC,QAAQ,EAAE,UAAU;gBACpB,QAAQ;gBACR,KAAK,EAAE,0CAA0C;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjE,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,SAAS,EAAE;YAC1C,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YACtB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACxF,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;aACvC,CAAC,CAAC;YACH,aAAa,EAAE,gBAAgB;YAC/B,gEAAgE;YAChE,qEAAqE;YACrE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE;YACvC,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;YAC1B,UAAU;YACV,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU;YAClC,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YAClC,UAAU;YACV,KAAK;YACL,IAAI,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACnD,OAAO,EAAE;gBACP,KAAK;gBACL,IAAI;gBACJ,SAAS,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACzD,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;aACxC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,YAAY;IACZ,oBAAoB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,oBAAoB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,2EAA2E;IAC3E,qBAAqB;IACrB,YAAY,CAAC,GAAG,CAAC,CAAC;IAClB,YAAY,CAAC,GAAG,CAAC,CAAC;IAElB,4EAA4E;IAC5E,0DAA0D;IAC1D,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/B,4EAA4E;IAC5E,4BAA4B;IAC5B,UAAU,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5B,4EAA4E;IAC5E,qBAAqB;IACrB,qBAAqB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,SAAS,CAAC,OAAO;QACjB,SAAS,CAAC,OAAO;QACjB,WAAW;QACX,UAAU;QACV,OAAO;QACP,YAAY;KACb,CAAC,CAAC;IAEH,6EAA6E;IAC7E,2EAA2E;IAC3E,4DAA4D;IAC5D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACtB,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CACvF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAElE,8EAA8E;IAC9E,SAAS,gBAAgB,CAAC,CAAsB;QAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAE5C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;YACxC,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe;SAC9C,CAAC,CAAC;QACH,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+EAA+E;IAC/E,SAAS,WAAW,CAAC,CAAsB,EAAE,QAAgB,EAAE,KAAa;QAC1E,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;OAMG;IACH,SAAS,KAAK,CAAC,CAAsB,EAAE,IAAU;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,wEAAwE;QACxE,KAAK,CAAC,aAAa,EAAE,CAAC;QAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe;SAC9C,CAAC,CAAC;QACH,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,cAAc,GAAG,UAAU,CAAC;AAElC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACpE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE7C,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE1B,MAAM,OAAO,GAAG,QAAQ,KAAK,UAAU,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,KAAK,UAAU,CAAC;IAExC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7B,mEAAmE;QACnE,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,gEAAgE;QAChE,IAAI,OAAO;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,wEAAwE,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAEF,wEAAwE;AACxE,KAAK,UAAU,cAAc,CAAC,CAAsB;IAClD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACvD,IACE,CAAC,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1D,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC5C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,gFAAgF;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CACnB,QAAgB,EAChB,QAAgB,EAChB,YAAoB;IAEpB,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,iCAAiC,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/admin/session.d.ts

@@ -0,0 +1,44 @@
+import type { Context } from 'hono';
+import type { ResolvedConfig } from '../config.ts';
+import type { GeekityEnv } from '../env.ts';
+/** Where the admin lives. Everything under it needs a session. */
+export declare const ADMIN_PREFIX = "/admin";
+/** Name of the cookie holding the session id. */
+export declare const SESSION_COOKIE = "geekity_session";
+/** Name of the hidden field every mutating admin form carries. */
+export declare const CSRF_FIELD = "csrf_token";
+/**
+ * Whether the session cookie gets `Secure`, which is decided by the site's
+ * base URL rather than being hard-coded.
+ *
+ * doc-5 says the cookie is always `Secure`. It is not, quite: a `Secure`
+ * cookie is dropped on a plain-HTTP origin, so a site being developed on
+ * `http://localhost:3000` could never hold a login. `Secure` therefore goes on
+ * whenever the site says it is served over https, which covers every
+ * deployment, and comes off for local http, which is the only case it would
+ * have broken.
+ */
+export declare function usesSecureCookies(config: Pick<ResolvedConfig, 'baseUrl'>): boolean;
+/**
+ * Put the session id in the response's cookie.
+ *
+ * `HttpOnly` keeps it away from scripts, `SameSite=Lax` keeps it off
+ * cross-site POSTs (belt to the CSRF token's braces), and `Path=/admin` keeps
+ * it off every public request, so a cached public page can never carry it.
+ */
+export declare function setSessionCookie(c: Context<GeekityEnv>, sessionId: string, options: {
+    config: ResolvedConfig;
+    expiresAt: string;
+}): void;
+/** Drop the session cookie. The attributes have to match the ones it was set with. */
+export declare function clearSessionCookie(c: Context<GeekityEnv>, config: ResolvedConfig): void;
+/** The session id the request carries, or `undefined`. */
+export declare function sessionIdFrom(c: Context<GeekityEnv>): string | undefined;
+/**
+ * Whether a submitted token is this session's, compared in constant time.
+ *
+ * Both are hex of a fixed length, so a length mismatch is already a mismatch
+ * and short-circuiting on it leaks nothing.
+ */
+export declare function csrfTokenMatches(expected: string, submitted: unknown): boolean;
+//# sourceMappingURL=session.d.ts.map

package/dist/admin/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/admin/session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,kEAAkE;AAClE,eAAO,MAAM,YAAY,WAAW,CAAC;AAErC,iDAAiD;AACjD,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAEhD,kEAAkE;AAClE,eAAO,MAAM,UAAU,eAAe,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,OAAO,CAMlF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD,IAAI,CAQN;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAOvF;AAED,0DAA0D;AAC1D,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,SAAS,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAG9E"}

package/dist/admin/session.js

@@ -0,0 +1,69 @@
+import { timingSafeEqual } from 'node:crypto';
+import { deleteCookie, getCookie, setCookie } from 'hono/cookie';
+/** Where the admin lives. Everything under it needs a session. */
+export const ADMIN_PREFIX = '/admin';
+/** Name of the cookie holding the session id. */
+export const SESSION_COOKIE = 'geekity_session';
+/** Name of the hidden field every mutating admin form carries. */
+export const CSRF_FIELD = 'csrf_token';
+/**
+ * Whether the session cookie gets `Secure`, which is decided by the site's
+ * base URL rather than being hard-coded.
+ *
+ * doc-5 says the cookie is always `Secure`. It is not, quite: a `Secure`
+ * cookie is dropped on a plain-HTTP origin, so a site being developed on
+ * `http://localhost:3000` could never hold a login. `Secure` therefore goes on
+ * whenever the site says it is served over https, which covers every
+ * deployment, and comes off for local http, which is the only case it would
+ * have broken.
+ */
+export function usesSecureCookies(config) {
+    try {
+        return new URL(config.baseUrl).protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Put the session id in the response's cookie.
+ *
+ * `HttpOnly` keeps it away from scripts, `SameSite=Lax` keeps it off
+ * cross-site POSTs (belt to the CSRF token's braces), and `Path=/admin` keeps
+ * it off every public request, so a cached public page can never carry it.
+ */
+export function setSessionCookie(c, sessionId, options) {
+    setCookie(c, SESSION_COOKIE, sessionId, {
+        path: ADMIN_PREFIX,
+        httpOnly: true,
+        sameSite: 'Lax',
+        secure: usesSecureCookies(options.config),
+        expires: new Date(options.expiresAt),
+    });
+}
+/** Drop the session cookie. The attributes have to match the ones it was set with. */
+export function clearSessionCookie(c, config) {
+    deleteCookie(c, SESSION_COOKIE, {
+        path: ADMIN_PREFIX,
+        httpOnly: true,
+        sameSite: 'Lax',
+        secure: usesSecureCookies(config),
+    });
+}
+/** The session id the request carries, or `undefined`. */
+export function sessionIdFrom(c) {
+    const value = getCookie(c, SESSION_COOKIE);
+    return value === undefined || value === '' ? undefined : value;
+}
+/**
+ * Whether a submitted token is this session's, compared in constant time.
+ *
+ * Both are hex of a fixed length, so a length mismatch is already a mismatch
+ * and short-circuiting on it leaks nothing.
+ */
+export function csrfTokenMatches(expected, submitted) {
+    if (typeof submitted !== 'string' || submitted.length !== expected.length)
+        return false;
+    return timingSafeEqual(Buffer.from(submitted, 'utf8'), Buffer.from(expected, 'utf8'));
+}
+//# sourceMappingURL=session.js.map

package/dist/admin/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/admin/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAKjE,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC,iDAAiD;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,kEAAkE;AAClE,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuC;IACvE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,CAAsB,EACtB,SAAiB,EACjB,OAAsD;IAEtD,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE;QACtC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,CAAsB,EAAE,MAAsB;IAC/E,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE;QAC9B,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAAC,CAAsB;IAClD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,SAAkB;IACnE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,CAAC"}