From 8ee792c2a2dcf1fdd7c32e94158b544899315aa4 Mon Sep 17 00:00:00 2001
From: Madeline <46743919+MaddyUnderStars@users.noreply.github.com>
Date: Fri, 12 May 2023 14:05:28 +1000
Subject: Prevent /invites/:code for bots

---
 src/api/routes/invites/index.ts | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src')

diff --git a/src/api/routes/invites/index.ts b/src/api/routes/invites/index.ts
index 5a9cd942..6de4d583 100644
--- a/src/api/routes/invites/index.ts
+++ b/src/api/routes/invites/index.ts
@@ -18,6 +18,7 @@
 
 import { route } from "@spacebar/api";
 import {
+	DiscordApiErrors,
 	emitEvent,
 	getPermission,
 	Guild,
@@ -75,6 +76,8 @@ router.post(
 		},
 	}),
 	async (req: Request, res: Response) => {
+		if (req.user_bot) throw DiscordApiErrors.BOT_PROHIBITED_ENDPOINT;
+
 		const { code } = req.params;
 		const { guild_id } = await Invite.findOneOrFail({
 			where: { code: code },
-- 
cgit 1.4.1