using Microsoft.AspNetCore.Mvc; using SqlKata; using Newtonsoft.Json; using Newtonsoft.Json.Linq; using PluralKit.Core; namespace PluralKit.API; // Internal API definitions // I would prefer if you do not use any of these APIs in your own integrations. // It is unstable and subject to change at any time (which is why it's not versioned) // If for some reason you do need access to something defined here, // let us know in #api-support on the support server (https://discord.com/invite/PczBt78) and I'll see if it can be made public [ApiController] [Route("private")] public class PrivateController: PKControllerBase { private readonly RedisService _redis; public PrivateController(IServiceProvider svc) : base(svc) { _redis = svc.GetRequiredService(); } [HttpGet("meta")] public async Task> Meta() { var db = _redis.Connection.GetDatabase(); var redisInfo = await db.HashGetAllAsync("pluralkit:shardstatus"); var shards = redisInfo.Select(x => Proto.Unmarshal(x.Value)).OrderBy(x => x.ShardId); var redisClusterInfo = await db.HashGetAllAsync("pluralkit:cluster_stats"); var clusterInfo = redisClusterInfo.Select(x => JsonConvert.DeserializeObject(x.Value)); var guildCount = clusterInfo.Sum(x => x.GuildCount); var channelCount = clusterInfo.Sum(x => x.ChannelCount); var stats = await _repo.GetStats(); var o = new JObject(); o.Add("shards", shards.ToJson()); o.Add("stats", stats.ToJson(guildCount, channelCount)); o.Add("version", BuildInfoService.FullVersion); return Ok(o); } [HttpPost("bulk_privacy/member")] public async Task BulkMemberPrivacy([FromBody] JObject inner) { HttpContext.Items.TryGetValue("SystemId", out var systemId); if (systemId == null) throw Errors.GenericAuthError; var data = new JObject(); data.Add("privacy", inner); var patch = MemberPatch.FromJSON(data); patch.AssertIsValid(); if (patch.Errors.Count > 0) throw new ModelParseError(patch.Errors); await _db.ExecuteQuery(patch.Apply(new Query("members").Where("system", systemId))); return NoContent(); } [HttpPost("bulk_privacy/group")] public async Task BulkGroupPrivacy([FromBody] JObject inner) { HttpContext.Items.TryGetValue("SystemId", out var systemId); if (systemId == null) throw Errors.GenericAuthError; var data = new JObject(); data.Add("privacy", inner); var patch = GroupPatch.FromJson(data); patch.AssertIsValid(); if (patch.Errors.Count > 0) throw new ModelParseError(patch.Errors); await _db.ExecuteQuery(patch.Apply(new Query("groups").Where("system", systemId))); return NoContent(); } [HttpPost("discord/callback")] public async Task DiscordLogin([FromBody] JObject data) { if (_config.ClientId == null) return NotFound(); using var client = new HttpClient(); var res = await client.PostAsync("https://discord.com/api/v10/oauth2/token", new FormUrlEncodedContent( new Dictionary{ { "client_id", _config.ClientId }, { "client_secret", _config.ClientSecret }, { "grant_type", "authorization_code" }, { "redirect_uri", data.Value("redirect_domain") + "/login/discord" }, { "code", data.Value("code") }, })); var h = await res.Content.ReadAsStringAsync(); var c = JsonConvert.DeserializeObject(h); if (c.access_token == null) return BadRequest(PrivateJsonExt.ObjectWithError(c.error_description)); client.DefaultRequestHeaders.Add("Authorization", $"Bearer {c.access_token}"); var resp = await client.GetAsync("https://discord.com/api/v10/users/@me"); var user = JsonConvert.DeserializeObject(await resp.Content.ReadAsStringAsync()); var userId = user.Value("id"); var system = await ResolveSystem(userId); if (system == null) return BadRequest(PrivateJsonExt.ObjectWithError("User does not have a system registered!")); var config = await _repo.GetSystemConfig(system.Id); // TODO // resp = await client.GetAsync("https://discord.com/api/v10/users/@me/guilds"); // var guilds = JsonConvert.DeserializeObject(await resp.Content.ReadAsStringAsync()); // await _redis.Connection.GetDatabase().HashSetAsync( // $"user_guilds::{userId}", // guilds.Select(g => new HashEntry(g.Value("id"), true)).ToArray() // ); var o = new JObject(); o.Add("system", system.ToJson(LookupContext.ByOwner)); o.Add("config", config.ToJson()); o.Add("user", user); o.Add("token", system.Token); return Ok(o); } } public record OAuth2TokenResponse { public string access_token; public string? error; public string? error_description; } public static class PrivateJsonExt { public static JObject ObjectWithError(string error) { var o = new JObject(); o.Add("error", error); return o; } public static JArray ToJson(this IEnumerable shards) { var o = new JArray(); foreach (var shard in shards) { var s = new JObject(); s.Add("id", shard.ShardId); if (!shard.Up) s.Add("status", "down"); else s.Add("status", "up"); s.Add("ping", shard.Latency); s.Add("disconnection_count", shard.DisconnectionCount); s.Add("last_heartbeat", shard.LastHeartbeat.ToString()); s.Add("last_connection", shard.LastConnection.ToString()); if (shard.HasClusterId) s.Add("cluster_id", shard.ClusterId); o.Add(s); } return o; } }