From 1af0223042ef3686101524275dff0d98875ea202 Mon Sep 17 00:00:00 2001
From: Carter Penterman <carterpenterman@gmail.com>
Date: Sat, 9 Jul 2022 15:22:33 -0500
Subject: [PATCH] submit command verifies roblox acct with discord acct

---
 commands/submit.js | 33 +++++++++++++++++++++++++++++++++
 config/.gitignore  |  2 ++
 package.json       |  1 +
 3 files changed, 36 insertions(+)
 create mode 100644 config/.gitignore

diff --git a/commands/submit.js b/commands/submit.js
index 8d98559..b4f0dd0 100644
--- a/commands/submit.js
+++ b/commands/submit.js
@@ -2,8 +2,34 @@ const { SlashCommandBuilder } = require('@discordjs/builders');
 const { parse } = require("csv-parse/sync");
 const fs = require('node:fs');
 const noblox = require("noblox.js");
+const axios = require("axios").default
+
+async function robloxUserFromDiscord(id) {
+    if (isNaN(id)) return undefined;
+    try  {
+        const res =  await axios.get(`https://verify.eryn.io/api/user/${id}`)
+        return res.data.robloxId
+    } catch (error) {
+        return undefined;
+    }
+}
+
+async function robloxUsernameFromId(id) {
+    if (isNaN(id)) return undefined;
+    try  {
+        const res =  await axios.get(`https://users.roblox.com/v1/users/${id}`)
+        return res.data.name
+    } catch (error) {
+        return undefined;
+    }
+}
 
 async function execute(interaction) {
+    const userId = await robloxUserFromDiscord(interaction.user.id)
+    if (!userId) {
+        const msg = "You don't have a Roblox account linked with your Discord account. Visit https://verify.eryn.io/";
+        await interaction.reply({content: msg, ephemeral: true});
+    }
     const game = interaction.options.getString("game");
 
     let fname;
@@ -26,6 +52,13 @@ async function execute(interaction) {
             await interaction.reply({content: `(id: ${id}) is not a valid model ID.`, ephemeral: true});
             return;
         }
+        if (info.Creator.Id != userId) {
+            const assetUsername = await robloxUsernameFromId(info.Creator.Id);
+            const interactionUsername = await robloxUsernameFromId(userId);
+            const msg = `The account linked to your Discord (${interactionUsername}) is not the owner of this model (${assetUsername}), so you cannot submit it.`
+            await interaction.reply({content: msg, ephemeral: true});
+            return
+        }
     } catch (error) {
         console.log(error);
         await interaction.reply({content: `There is a problem with this asset ID (id: ${id}).`, ephemeral: true});
diff --git a/config/.gitignore b/config/.gitignore
new file mode 100644
index 0000000..c96a04f
--- /dev/null
+++ b/config/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
\ No newline at end of file
diff --git a/package.json b/package.json
index 3e5a6fd..d34d389 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,7 @@
   "dependencies": {
     "@discordjs/builders": "^0.13.0",
     "@discordjs/rest": "^0.4.1",
+    "axios": "^0.27.2",
     "csv-parse": "^5.0.4",
     "discord-api-types": "^0.32.1",
     "discord.js": "^13.6.0",