summary refs log tree commit diff
diff options
context:
space:
mode:
authorRory& <root@rory.gay>2026-07-01 18:38:21 +0200
committerRory& <root@rory.gay>2026-07-01 19:46:31 +0200
commit0e4ac094907c559d5856e99d60a635a8cb3f9858 (patch)
treea6fbe3a6d5a467064e13302bd67c6ec310879ab7
parentEnforce that a given applications emoji set can only be modified by the appli... (diff)
downloadserver-ts-0e4ac094907c559d5856e99d60a635a8cb3f9858.tar.xz
Handle non-existant applications more gracefully
-rw-r--r--src/api/routes/applications/#application_id/emojis.ts3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/api/routes/applications/#application_id/emojis.ts b/src/api/routes/applications/#application_id/emojis.ts

index 7e66afb6..65cf0250 100644 --- a/src/api/routes/applications/#application_id/emojis.ts +++ b/src/api/routes/applications/#application_id/emojis.ts
@@ -98,6 +98,7 @@ router.post( const body = req.body as EmojiCreateSchema; const app = await Application.findOne({ where: { id: application_id } }); + if (!app) throw DiscordApiErrors.UNKNOWN_APPLICATION; if (req.user_id != app?.id && req.user_id != app?.owner_id) throw DiscordApiErrors.ACTION_NOT_AUTHORIZED_ON_APPLICATION; const id = Snowflake.generate(); @@ -148,6 +149,7 @@ router.patch( const body = req.body as ApplicationEmojiModifySchema; const app = await Application.findOne({ where: { id: application_id } }); + if (!app) throw DiscordApiErrors.UNKNOWN_APPLICATION; if (req.user_id != app?.id && req.user_id != app?.owner_id) throw DiscordApiErrors.ACTION_NOT_AUTHORIZED_ON_APPLICATION; if (body.name?.includes("-")) body.name = body.name?.replaceAll("-", ""); // Dashes are invalid apparently @@ -180,6 +182,7 @@ router.delete( const { emoji_id, application_id } = req.params as { [key: string]: string }; const app = await Application.findOne({ where: { id: application_id } }); + if (!app) throw DiscordApiErrors.UNKNOWN_APPLICATION; if (req.user_id != app?.id && req.user_id != app?.owner_id) throw DiscordApiErrors.ACTION_NOT_AUTHORIZED_ON_APPLICATION; await Emoji.delete({