Function fetch

telemetry-dashboard/src/index.ts:230–274

(request, env)

export default {
  async fetch(request, env): Promise<Response> {
    try {
      const url = new URL(request.url);
      const method = request.method;
      const isRead = method === 'GET' || method === 'HEAD';

      // --- unauthenticated surface: exactly these three routes ---------------
      if (isRead && url.pathname === '/robots.txt') {
        return new Response(ROBOTS_TXT, { headers: { 'content-type': 'text/plain; charset=utf-8' } });
      }
      if (url.pathname === '/login') {
        if (isRead) return await handleLoginPage(env, request, url);
        if (method === 'POST') return await handleLoginSubmit(env, request);
        return new Response('method not allowed\n', { status: 405, headers: { allow: 'GET, POST' } });
      }
      if (url.pathname === '/logout') {
        if (method !== 'POST') {
          return new Response('method not allowed\n', { status: 405, headers: { allow: 'POST' } });
        }
        if (!isSameOriginPost(request)) return new Response('bad request\n', { status: 400 });
        return redirect('/login', { headers: { 'set-cookie': clearedSessionCookie() } });
      }

      // --- everything else needs a session -----------------------------------
      const isApi = url.pathname === '/api' || url.pathname.startsWith('/api/');
      if (!(await hasValidSession(env, request))) {
        return isApi ? json({ error: 'unauthorized' }, { status: 401 }) : loginRedirect(url);
      }

      if (isApi) {
        if (!isRead) {
          return json({ error: 'method not allowed' }, { status: 405, headers: { allow: 'GET' } });
        }
        return await apiResponse(env, url);
      }

      if (!isRead) {
        return new Response('method not allowed\n', { status: 405, headers: { allow: 'GET' } });
      }
      return await serveAsset(env, request);
    } catch (err) {
      console.error(JSON.stringify({ msg: 'unhandled error', err: String(err) }));
      return new Response('internal error\n', { status: 500 });
    }
  },
} satisfies ExportedHandler<Env>;