1 files changed, 83 insertions, 0 deletions
diff --git a/api/src/routes/applications/#id/bot/index.ts b/api/src/routes/applications/#id/bot/index.ts
new file mode 100644
index 00000000..562c31fe
--- /dev/null
+++ b/api/src/routes/applications/#id/bot/index.ts
@@ -0,0 +1,83 @@
+import { Request, Response, Router } from "express";
+import { route } from "@fosscord/api";
+import { Application, Config, FieldErrors, generateToken, OrmUtils, Snowflake, trimSpecial, User, handleFile } from "@fosscord/util";
+import { HTTPError } from "lambert-server";
+import { verifyToken } from "node-2fa";
+
+const router: Router = Router();
+
+router.post("/", route({}), async (req: Request, res: Response) => {
+	const app = await Application.findOne({where: {id: req.params.id}});
+	if(!app) return res.status(404);
+	const username = trimSpecial(app.name);
+	const discriminator = await User.generateDiscriminator(username);
+	if (!discriminator) {
+		// We've failed to generate a valid and unused discriminator
+		throw FieldErrors({
+			username: {
+				code: "USERNAME_TOO_MANY_USERS",
+				message: req?.t("auth:register.USERNAME_TOO_MANY_USERS"),
+			},
+		});
+	}
+
+	const user = OrmUtils.mergeDeep(new User(), {
+		created_at: new Date(),
+		username: username,
+		discriminator,
+		id: app.id,
+		bot: true,
+		system: false,
+		premium_since: 0,
+		desktop: false,
+		mobile: false,
+		premium: false,
+		premium_type: 0,
+		bio: app.description,
+		mfa_enabled: true,
+		totp_secret: "",
+		totp_backup_codes: [],
+		verified: true,
+		disabled: false,
+		deleted: false,
+		email: null,
+		rights: Config.get().register.defaultRights,
+		nsfw_allowed: true,
+		public_flags: "0",
+		flags: "0",
+		data: {
+			hash: null,
+			valid_tokens_since: new Date(),
+		},
+		settings: {},
+		extended_settings: {},
+		fingerprints: [],
+		notes: {},
+	});
+	await user.save();
+	app.bot = user;
+	await app.save();
+	res.send().status(204)
+});
+
+router.post("/reset", route({}), async (req: Request, res: Response) => {
+	let bot = await User.findOne({where: {id: req.params.id}});
+	let owner = await User.findOne({where: {id: req.user_id}});
+	if(!bot) return res.status(404);
+	if(owner?.totp_secret && (!req.body.code || verifyToken(owner.totp_secret, req.body.code))) {
+		throw new HTTPError(req.t("auth:login.INVALID_TOTP_CODE"), 60008);
+	}
+	bot.data = { hash: undefined, valid_tokens_since: new Date() };
+	await bot.save();
+	let token = await generateToken(bot.id);
+	res.json({token}).status(200);
+});
+
+router.patch("/", route({}), async (req: Request, res: Response) => {
+	if (req.body.avatar) req.body.avatar = await handleFile(`/avatars/${req.params.id}`, req.body.avatar as string);
+	let app = OrmUtils.mergeDeep(await User.findOne({where: {id: req.params.id}}), req.body);
+	await app.save();
+	res.json(app).status(200);
+});
+
+export default router;
\ No newline at end of file