improved constants

Author: roboslone

README.md

@@ -22,23 +22,27 @@ Operates completely in browser, except for [GitHub token exchange](https://githu
 To run your own instance of Habbitses you'll need several things:
 
 - GitHub code exchange server, you can use or fork [mine](https://github.com/roboslone/github-oauth-exchange) or write your own supporting the same [protocol](https://buf.build/roboslone-oauth/github)
-- your server address patched into [`ExchangeClient`](https://github.com/roboslone/habbitses/blob/main/src/lib/queries.ts#L20)
-- GitHub pages enabled for your repo, pushed to `main` branch are published with [GitHub workflow](https://github.com/roboslone/habbitses/blob/main/.github/workflows/deploy.yml)
+- your server address and GitHub application client ID patched into `src/lib/const.ts`
+- GitHub pages enabled for your repo, pushes to `main` branch are published with [GitHub workflow](https://github.com/roboslone/habbitses/blob/main/.github/workflows/deploy.yml)
 
 If you're using my exchange server, don't forget to put it behind TLS termination proxy (e.g. `nginx`) and set up CORS to allow your domain(s).
 
 ## GitHub rate limits
+
 All requests within Habbitses will count towards your [API rate limits](https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api).  
 At the time of writing limit is 15 000 requests per hour, so this should not be a problem.
 
 ## Security and privacy
-Code exchange server **will have access** to your access and refresh tokens.  
-So you should only install Habbitses to a single repository containing your habit data.  
+
+Code exchange server **will have access** to your access and refresh tokens.
+
+So you should only install Habbitses to a single repository containing your habit data.
 
 App doesn't have any trackers (other than for your habits, duh) or ads and doesn't collect any data.  
-However, it's technically possible for exchange server administrator to use your access token to read your repository contents and therefore your habit data, including broken habits (via git logs).  
+However, it's technically possible for exchange server administrator to use your access token to read your repository contents and therefore your habit data, including broken habits (via git logs).
 
 ## Screenshots
+
 <img width="292.5" height="633" alt="localhost_5173_habbitses_(iPhone 12 Pro) (1)" src="https://github.com/user-attachments/assets/fc1f49f3-c151-44d4-aed8-5d7630798ad9" />
 <img width="292.5" height="633" alt="localhost_5173_habbitses_(iPhone 12 Pro) (3)" src="https://github.com/user-attachments/assets/f4bbf187-fd0e-4bd9-bdb8-373a9d61735c" />
 <img width="292.5" height="633" alt="localhost_5173_habbitses_(iPhone 12 Pro)" src="https://github.com/user-attachments/assets/9d5619b3-8125-4b32-ac28-3372fb63d5aa" />

src/components/auth/auth-wall.tsx

@@ -3,7 +3,8 @@ import { LogoutButton } from "@/components/auth/logout-button"
 import { ErrorView } from "@/components/util/error-view"
 import { LoadingPage } from "@/components/util/loading-page"
 import { OctokitContext } from "@/components/util/octokit-provider"
-import { type StoredToken, type StoredTokens, clientId, useStoredTokens } from "@/lib/auth"
+import { type StoredToken, type StoredTokens, useStoredTokens } from "@/lib/auth"
+import { clientId } from "@/lib/const"
 import { ExchangeClient } from "@/lib/queries"
 import type { ExchangeResponse, RefreshResponse, Token } from "@/proto/github/v1/exchange_pb"
 import { Octokit } from "octokit"

src/components/auth/login-button.tsx

@@ -1,6 +1,6 @@
 import GitHubLogo from "@/assets/github.svg?url"
 import { Button } from "@/components/ui/button"
-import { clientId } from "@/lib/auth"
+import { clientId } from "@/lib/const"
 import type React from "react"
 
 export const LoginButton: React.FC<React.ComponentProps<typeof Button>> = (props) => {

src/lib/auth.ts

@@ -2,8 +2,6 @@ import { Octokit } from "octokit"
 import { toast } from "sonner"
 import useLocalStorage from "use-local-storage"
 
-export const clientId = "Iv23liRvkyXb7ekzNQEf"
-
 export interface StoredToken {
     value: string
     expiresAt: Date

src/lib/const.ts

@@ -0,0 +1,2 @@
+export const clientId = "Iv23liRvkyXb7ekzNQEf"
+export const githubExchangeAddress = "https://robosl.one"

src/lib/queries.ts

@@ -22,6 +22,7 @@ import { toast } from "sonner"
 import { decode, encode } from "uint8-to-base64"
 
 import { type StoredAccount, useStoredAccount } from "./auth"
+import { githubExchangeAddress } from "./const"
 import {
     type RepoContent,
     useStoredCollection,
@@ -38,7 +39,7 @@ const textDecoder = new TextDecoder()
 export const ExchangeClient = createClient(
     ExchangeService,
     createGrpcWebTransport({
-        baseUrl: "https://robosl.one",
+        baseUrl: githubExchangeAddress,
         defaultTimeoutMs: 30 * 1000,
         fetch: (input, init) => fetch(input, { ...init, credentials: "include" }),
     }),