1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
import { API_URL } from '$lib/api'
import type { AccountSchema, CleanUser, SessionSchema } from '$lib/APITypes'
import type { RequestHandler } from '@sveltejs/kit'
// @ts-ignore Cloudflare Workers can't read process.env
const skyblockStatsApiKey = process?.env?.SKYBLOCK_STATS_API_KEY || SKYBLOCK_STATS_API_KEY
if (!skyblockStatsApiKey)
console.warn('DISCORD_CLIENT_ID is not set as an environment variable. This is required for logging in with Discord to work.')
function redirect(status: number, location: string) {
return {
status,
headers: {
location,
},
}
}
export const post: RequestHandler = async ({ request, locals }) => {
if (!skyblockStatsApiKey) {
return redirect(303, `/verify?error=NO_KEY`)
}
if (locals.sid === undefined) {
return redirect(303, '/login')
}
const form = await request.formData()
// username or uuid
const playerIdentifier = form.get('ign')
if (!playerIdentifier) {
return redirect(303, `/verify?error=NO_IGN`)
}
const playerResponse: CleanUser = await fetch(`${API_URL}player/${playerIdentifier}`).then(res => res.json())
const sessionResponse: { session: SessionSchema | null, account: AccountSchema | null } = await fetch(`${API_URL}accounts/session`, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
},
body: JSON.stringify({
uuid: locals.sid,
}),
}).then(r => r.json())
if (!sessionResponse.session)
return redirect(303, '/login')
const hypixelDiscordName = playerResponse.player?.socials.discord
if (!hypixelDiscordName)
return redirect(303, `/verify?error=NOT_LINKED`)
const discordUser = sessionResponse.session.discord_user
const actualDiscordName = discordUser.name
// some people link themselves as <id>#<discrim> instead of <name>#<discrim>
const actualDiscordIdDiscrim = `${discordUser.id}#${discordUser.name.split('#')[1]}`
if (!(hypixelDiscordName === actualDiscordName || hypixelDiscordName === actualDiscordIdDiscrim))
return redirect(303, `/verify?error=WRONG_NAME¤t=${encodeURIComponent(hypixelDiscordName)}&correct=${encodeURIComponent(actualDiscordName)}`)
const updatedAccount: AccountSchema = {
discordId: sessionResponse.session.discord_user.id,
minecraftUuid: playerResponse.player?.uuid
}
await fetch(`${API_URL}accounts/update`, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
key: skyblockStatsApiKey
},
body: JSON.stringify(updatedAccount),
}).then(r => r.json())
return redirect(303, '/profile')
}
|
