···
const session = await getIronSession<Session>(req, res, {
password: env.COOKIE_SECRET,
if (!session.did) return null
const oauthSession = await ctx.oauthClient.restore(session.did)
return oauthSession ? new Agent(oauthSession) : null
···
'/oauth-client-metadata.json',
-
handler((req: Request, res: Response) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
res.json(ctx.oauthClient.clientMetadata)
···
'/.well-known/jwks.json',
-
handler((req: Request, res: Response) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
res.json(ctx.oauthClient.jwks)
···
// OAuth callback to complete session creation
-
handler(async (req: Request, res: Response) => {
res.setHeader('cache-control', 'no-store')
const params = new URLSearchParams(req.originalUrl.split('?')[1])
···
-
handler(async (req: Request, res: Response) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
-
return res.type('html').send(page(login({})))
···
-
handler(async (req: Request, res: Response) => {
res.setHeader('cache-control', 'no-store')
-
const input = ifString(req.body.input)
-
return res.type('html').send(page(login({ error: 'invalid input' })))
-
// @NOTE "input" can be a handle, a DID or a service URL (PDS).
// Initiate the OAuth flow
const url = await ctx.oauthClient.authorize(input, {
scope: 'atproto transition:generic',
res.redirect(url.toString())
ctx.logger.error({ err }, 'oauth authorize failed')
-
err instanceof OAuthResolverError
-
: "couldn't initiate login"
return res.type('html').send(page(login({ error })))
···
-
handler(async (req: Request, res: Response) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
···
-
handler(async (req: Request, res: Response) => {
// Never store this route
res.setHeader('cache-control', 'no-store')
···
-
handler(async (req: Request, res: Response) => {
-
// Prevent caching of this page when the credentials change
-
res.setHeader('Vary', 'Cookie')
// If the user is signed in, get an agent which communicates with their server
const agent = await getSessionAgent(req, res, ctx)
···
return res.type('html').send(page(home({ statuses, didHandleMap })))
-
// Make sure this page does not get cached in public caches (proxies)
-
res.setHeader('cache-control', 'private')
// Fetch additional information about the logged-in user
const profileResponse = await agent.com.atproto.repo
···
-
handler(async (req: Request, res: Response) => {
-
// Never store this route
-
res.setHeader('cache-control', 'no-store')
// If the user is signed in, get an agent which communicates with their server
const agent = await getSessionAgent(req, res, ctx)
···
.send('<h1>Error: Session required</h1>')
-
// Construct & validate their status record
-
const rkey = TID.nextStr()
$type: 'xyz.statusphere.status',
status: req.body?.status,
···
const res = await agent.com.atproto.repo.putRecord({
collection: 'xyz.statusphere.status',
···
+
res.setHeader('Vary', 'Cookie')
const session = await getIronSession<Session>(req, res, {
password: env.COOKIE_SECRET,
if (!session.did) return null
+
// This page is dynamic and should not be cached publicly
+
res.setHeader('cache-control', `max-age=${MAX_AGE}, private`)
const oauthSession = await ctx.oauthClient.restore(session.did)
return oauthSession ? new Agent(oauthSession) : null
···
'/oauth-client-metadata.json',
+
handler((req, res) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
res.json(ctx.oauthClient.clientMetadata)
···
'/.well-known/jwks.json',
+
handler((req, res) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
res.json(ctx.oauthClient.jwks)
···
// OAuth callback to complete session creation
+
handler(async (req, res) => {
res.setHeader('cache-control', 'no-store')
const params = new URLSearchParams(req.originalUrl.split('?')[1])
···
+
handler(async (req, res) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
+
res.type('html').send(page(login({})))
···
+
handler(async (req, res) => {
+
// Never store this route
res.setHeader('cache-control', 'no-store')
// Initiate the OAuth flow
+
// Validate input: can be a handle, a DID or a service URL (PDS).
+
const input = ifString(req.body.input)
+
throw new Error('Invalid input')
+
// Initiate the OAuth flow
const url = await ctx.oauthClient.authorize(input, {
scope: 'atproto transition:generic',
res.redirect(url.toString())
ctx.logger.error({ err }, 'oauth authorize failed')
+
const error = err instanceof Error ? err.message : 'unexpected error'
return res.type('html').send(page(login({ error })))
···
+
handler(async (req, res) => {
res.setHeader('cache-control', `max-age=${MAX_AGE}, public`)
···
+
handler(async (req, res) => {
// Never store this route
res.setHeader('cache-control', 'no-store')
···
+
handler(async (req, res) => {
// If the user is signed in, get an agent which communicates with their server
const agent = await getSessionAgent(req, res, ctx)
···
return res.type('html').send(page(home({ statuses, didHandleMap })))
// Fetch additional information about the logged-in user
const profileResponse = await agent.com.atproto.repo
···
+
handler(async (req, res) => {
// If the user is signed in, get an agent which communicates with their server
const agent = await getSessionAgent(req, res, ctx)
···
.send('<h1>Error: Session required</h1>')
+
// Construct their status record
$type: 'xyz.statusphere.status',
status: req.body?.status,
···
const res = await agent.com.atproto.repo.putRecord({
collection: 'xyz.statusphere.status',
cduck.me