rockcord 4.0.0-dev.4

package/src/util/Redact.js

@@ -0,0 +1,26 @@
+'use strict';
+
+const sensitive =
+  /token|secret|password|authorization|cookie|ticket|captcha_key|captcha_rqdata|captcha_rqtoken|mfaCode|TOTPKey/i;
+
+function redact(value, seen = new WeakSet()) {
+  if (value === null || typeof value !== 'object') return value;
+  if (seen.has(value)) return '[Circular]';
+  seen.add(value);
+  if (Array.isArray(value)) return value.map(item => redact(item, seen));
+  return Object.fromEntries(
+    Object.entries(value).map(([key, item]) => [
+      key,
+      sensitive.test(key) || (key === 'data' && value.mfa_type) ? '[REDACTED]' : redact(item, seen),
+    ]),
+  );
+}
+
+redact.path = value =>
+  typeof value === 'string'
+    ? value
+        .replace(/(\/webhooks\/[^/]+\/)[^/?]+/g, '$1[REDACTED]')
+        .replace(/([?&](?:token|authorization|code)=)[^&]+/gi, '$1[REDACTED]')
+    : value;
+
+module.exports = redact;

package/src/util/RemoteAuth.js

@@ -0,0 +1,449 @@
+'use strict';
+
+const { Buffer } = require('node:buffer');
+const crypto = require('node:crypto');
+const EventEmitter = require('node:events');
+const { StringDecoder } = require('node:string_decoder');
+const { setTimeout } = require('node:timers');
+const { fetch } = require('undici');
+const WebSocket = require('ws');
+const { UserAgent } = require('./Constants');
+const Options = require('./Options');
+
+const defaultClientOptions = Options.createDefault();
+
+const baseURL = 'https://discord.com/ra/';
+
+const wsURL = 'wss://remote-auth-gateway.discord.gg/?v=2';
+
+const receiveEvent = {
+  HELLO: 'hello',
+  NONCE_PROOF: 'nonce_proof',
+  PENDING_REMOTE_INIT: 'pending_remote_init',
+  HEARTBEAT_ACK: 'heartbeat_ack',
+  PENDING_TICKET: 'pending_ticket',
+  CANCEL: 'cancel',
+  PENDING_LOGIN: 'pending_login',
+};
+
+const sendEvent = {
+  INIT: 'init',
+  NONCE_PROOF: 'nonce_proof',
+  HEARTBEAT: 'heartbeat',
+};
+
+const Event = {
+  READY: 'ready',
+  ERROR: 'error',
+  CANCEL: 'cancel',
+  WAIT_SCAN: 'pending',
+  FINISH: 'finish',
+  CLOSED: 'closed',
+  DEBUG: 'debug',
+};
+
+/**
+ * Discord Auth QR
+ * @extends {EventEmitter}
+ * @abstract
+ */
+class DiscordAuthWebsocket extends EventEmitter {
+  #ws = null;
+  #heartbeatTimer = null;
+  #expireTimer = null;
+  #closed = true;
+  #fetchController = null;
+  #heartbeatInterval = null;
+  #expire = null;
+  #publicKey = null;
+  #privateKey = null;
+  #ticket = null;
+  #fingerprint = '';
+  #userDecryptString = '';
+
+  /**
+   * Creates a new DiscordAuthWebsocket instance.
+   */
+  constructor() {
+    super();
+    this.token = '';
+  }
+
+  /**
+   * @type {string}
+   */
+  get AuthURL() {
+    return baseURL + this.#fingerprint;
+  }
+
+  /**
+   * @type {Date}
+   */
+  get exprire() {
+    return this.#expire;
+  }
+
+  /**
+   * @type {UserRaw}
+   */
+  get user() {
+    return DiscordAuthWebsocket.decryptUser(this.#userDecryptString);
+  }
+
+  #createWebSocket(url) {
+    this.#ws = new WebSocket(url, {
+      headers: {
+        Origin: 'https://discord.com',
+        'User-Agent': UserAgent,
+      },
+    });
+    this.#handleWebSocket();
+  }
+
+  #handleWebSocket() {
+    const ws = this.#ws;
+    this.#ws.on('error', error => {
+      if (this.#ws !== ws) return;
+      /**
+       * WS Error
+       * @event DiscordAuthWebsocket#error
+       * @param {Error} error Error
+       */
+      this.#fail(error);
+    });
+    this.#ws.on('open', () => {
+      if (this.#ws !== ws) return;
+      /**
+       * Debug Event
+       * @event DiscordAuthWebsocket#debug
+       * @param {string} msg Debug msg
+       */
+      this.emit(Event.DEBUG, '[WS] Client Connected');
+    });
+    this.#ws.on('close', () => {
+      if (this.#ws !== ws) return;
+      this.emit(Event.DEBUG, '[WS] Connection closed');
+      this.destroy();
+    });
+    this.#ws.on('message', message => {
+      if (this.#ws !== ws) return;
+      try {
+        this.#handleMessage(message);
+      } catch (error) {
+        this.#fail(error);
+      }
+    });
+  }
+
+  #fail(error) {
+    if (this.listenerCount(Event.ERROR)) this.emit(Event.ERROR, error);
+    else this.emit(Event.DEBUG, error.message);
+    this.destroy();
+  }
+
+  #handleMessage(message) {
+    message = JSON.parse(message);
+    switch (message.op) {
+      case receiveEvent.HELLO: {
+        this.#ready(message);
+        break;
+      }
+
+      case receiveEvent.NONCE_PROOF: {
+        this.#receiveNonceProof(message);
+        break;
+      }
+
+      case receiveEvent.PENDING_REMOTE_INIT: {
+        this.#fingerprint = message.fingerprint;
+        /**
+         * Ready Event
+         * @event DiscordAuthWebsocket#ready
+         * @param {DiscordAuthWebsocket} client WS
+         */
+        this.emit(Event.READY, this);
+        break;
+      }
+
+      case receiveEvent.HEARTBEAT_ACK: {
+        this.emit(Event.DEBUG, `Heartbeat acknowledged.`);
+        this.#heartbeatAck();
+        break;
+      }
+
+      case receiveEvent.PENDING_TICKET: {
+        this.#pendingLogin(message);
+        break;
+      }
+
+      case receiveEvent.CANCEL: {
+        /**
+         * Cancel
+         * @event DiscordAuthWebsocket#cancel
+         * @param {DiscordAuthWebsocket} client WS
+         */
+        this.emit(Event.CANCEL, this);
+        this.destroy();
+        break;
+      }
+
+      case receiveEvent.PENDING_LOGIN: {
+        this.#ticket = message.ticket;
+        this.#findRealToken();
+        break;
+      }
+    }
+  }
+
+  #send(op, data) {
+    if (!this.#ws) return;
+    let payload = { op: op };
+    if (data !== null) payload = { ...payload, ...data };
+    this.#ws.send(JSON.stringify(payload));
+  }
+
+  #heartbeatAck() {
+    clearTimeout(this.#heartbeatTimer);
+    this.#heartbeatTimer = setTimeout(() => {
+      this.#send(sendEvent.HEARTBEAT);
+    }, this.#heartbeatInterval).unref();
+  }
+
+  #ready(data) {
+    this.emit(Event.DEBUG, 'Attempting server handshake...');
+    this.#expire = new Date(Date.now() + data.timeout_ms);
+    clearTimeout(this.#expireTimer);
+    this.#expireTimer = setTimeout(
+      () => this.#fail(new Error('Remote authentication expired')),
+      data.timeout_ms,
+    ).unref();
+    this.#heartbeatInterval = data.heartbeat_interval;
+    this.#createKey();
+    this.#heartbeatAck();
+    this.#init();
+  }
+
+  #createKey() {
+    const key = crypto.generateKeyPairSync('rsa', {
+      modulusLength: 2048,
+      publicKeyEncoding: {
+        type: 'spki',
+        format: 'pem',
+      },
+      privateKeyEncoding: {
+        type: 'pkcs1',
+        format: 'pem',
+      },
+    });
+    this.#privateKey = key.privateKey;
+    this.#publicKey = key.publicKey;
+  }
+
+  #encodePublicKey() {
+    const decoder = new StringDecoder('utf-8');
+    let pub_key = decoder.write(this.#publicKey);
+    pub_key = pub_key.split('\n').slice(1, -2).join('');
+    return pub_key;
+  }
+
+  #init() {
+    const public_key = this.#encodePublicKey();
+    this.#send(sendEvent.INIT, { encoded_public_key: public_key });
+  }
+
+  #receiveNonceProof(data) {
+    const nonce = data.encrypted_nonce;
+    const decrypted_nonce = this.#decryptPayload(nonce);
+    const proof = crypto
+      .createHash('sha256')
+      .update(decrypted_nonce)
+      .digest()
+      .toString('base64')
+      .replace(/\+/g, '-')
+      .replace(/\//g, '_')
+      .replace(/=+/, '')
+      .replace(/\s+$/, '');
+    this.#send(sendEvent.NONCE_PROOF, { proof: proof });
+  }
+
+  #decryptPayload(encrypted_payload) {
+    const payload = Buffer.from(encrypted_payload, 'base64');
+    const decoder = new StringDecoder('utf-8');
+    const private_key = decoder.write(this.#privateKey);
+    const data = crypto.privateDecrypt(
+      {
+        key: private_key,
+        padding: crypto.constants.RSA_PKCS1_OAEP_PADDING,
+        oaepHash: 'sha256',
+      },
+      payload,
+    );
+    return data;
+  }
+
+  #pendingLogin(data) {
+    const user_data = this.#decryptPayload(data.encrypted_user_payload);
+    this.#userDecryptString = user_data.toString();
+
+    /**
+     * @typedef {Object} UserRaw
+     * @property {Snowflake} id
+     * @property {string} username
+     * @property {number} discriminator
+     * @property {string} avatar
+     */
+
+    /**
+     * Emitted whenever a user is scan QR Code.
+     * @event DiscordAuthWebsocket#pending
+     * @param {UserRaw} user Discord User Raw
+     */
+    this.emit(Event.WAIT_SCAN, this.user);
+  }
+
+  #awaitLogin(client) {
+    return new Promise((resolve, reject) => {
+      const cleanup = () => {
+        this.removeListener(Event.FINISH, finish);
+        this.removeListener(Event.ERROR, error);
+        this.removeListener(Event.CANCEL, cancel);
+        this.removeListener(Event.CLOSED, closed);
+      };
+      const finish = token => {
+        cleanup();
+        Promise.resolve()
+          .then(() => client.login(token))
+          .then(resolve, reject);
+      };
+      const error = reason => {
+        cleanup();
+        reject(reason);
+      };
+      const cancel = () => error(new Error('Remote authentication cancelled'));
+      const closed = () => error(new Error('Remote authentication closed before login'));
+      this.once(Event.FINISH, finish);
+      this.once(Event.ERROR, error);
+      this.once(Event.CANCEL, cancel);
+      this.once(Event.CLOSED, closed);
+    });
+  }
+
+  /**
+   * Connect WS
+   * @param {Client} [client] DiscordJS Client
+   * @returns {Promise<void>}
+   */
+  connect(client) {
+    this.destroy();
+    this.#closed = false;
+    this.#fingerprint = '';
+    this.#ticket = null;
+    this.token = '';
+    const pending = client ? this.#awaitLogin(client) : Promise.resolve();
+    try {
+      this.#createWebSocket(wsURL);
+    } catch (error) {
+      this.#fail(error);
+      if (!client) return Promise.reject(error);
+    }
+    return pending;
+  }
+
+  /**
+   * Destroy client
+   * @returns {void}
+   */
+  destroy() {
+    if (this.#closed) return;
+    this.#closed = true;
+    clearTimeout(this.#heartbeatTimer);
+    clearTimeout(this.#expireTimer);
+    this.#fetchController?.abort();
+    const ws = this.#ws;
+    this.#ws = null;
+    ws?.close();
+    this.emit(Event.DEBUG, 'WebSocket closed.');
+    /**
+     * Emitted whenever a connection is closed.
+     * @event DiscordAuthWebsocket#closed
+     */
+    this.emit(Event.CLOSED);
+  }
+
+  /**
+   * Generate QR code for user to scan (Terminal)
+   * @returns {void}
+   */
+  generateQR() {
+    if (!this.#fingerprint) return;
+    require('qrcode').toString(this.AuthURL, { type: 'utf8', errorCorrectionLevel: 'L' }, (err, url) => {
+      if (err) {
+        //
+      }
+      console.log(url);
+    });
+  }
+
+  #findRealToken() {
+    const controller = new AbortController();
+    this.#fetchController = controller;
+    return fetch(`https://discord.com/api/v9/users/@me/remote-auth/login`, {
+      signal: controller.signal,
+      method: 'POST',
+      headers: {
+        Accept: '*/*',
+        'Accept-Language': 'en-US',
+        'Content-Type': 'application/json',
+        'Sec-Fetch-Dest': 'empty',
+        'Sec-Fetch-Mode': 'cors',
+        'Sec-Fetch-Site': 'same-origin',
+        'X-Debug-Options': 'bugReporterEnabled',
+        'X-Super-Properties': `${Buffer.from(JSON.stringify(defaultClientOptions.ws.properties), 'ascii').toString(
+          'base64',
+        )}`,
+        'X-Discord-Locale': 'en-US',
+        'User-Agent': UserAgent,
+        Referer: 'https://discord.com/channels/@me',
+        Connection: 'keep-alive',
+        Origin: 'https://discord.com',
+      },
+      body: JSON.stringify({
+        ticket: this.#ticket,
+      }),
+    })
+      .then(r => r.json())
+      .then(res => {
+        if (this.#closed || this.#fetchController !== controller) return;
+        if (!res.encrypted_token) throw new Error('Remote authentication did not return an encrypted token');
+        if (res.encrypted_token) {
+          this.token = this.#decryptPayload(res.encrypted_token).toString();
+        }
+        /**
+         * Emitted whenever a real token is found.
+         * @event DiscordAuthWebsocket#finish
+         * @param {string} token Discord Token
+         */
+        this.emit(Event.FINISH, this.token);
+        this.destroy();
+      })
+      .catch(error => {
+        if (!this.#closed && this.#fetchController === controller) this.#fail(error);
+      });
+  }
+
+  static decryptUser(payload) {
+    const values = payload.split(':');
+    const id = values[0];
+    const username = values[3];
+    const discriminator = values[1];
+    const avatar = values[2];
+    return {
+      id,
+      username,
+      discriminator,
+      avatar,
+    };
+  }
+}
+
+module.exports = DiscordAuthWebsocket;

package/src/util/RoleFlags.js

@@ -0,0 +1,37 @@
+'use strict';
+
+const BitField = require('./BitField');
+
+/**
+ * Data structure that makes it easy to interact with an {@link GuildMember#flags} bitfield.
+ * @extends {BitField}
+ */
+class RoleFlags extends BitField {}
+
+/**
+ * @name RoleFlags
+ * @kind constructor
+ * @memberof RoleFlags
+ * @param {BitFieldResolvable} [bits=0] Bit(s) to read from
+ */
+
+/**
+ * Numeric guild member flags. All available properties:
+ * * `IN_PROMPT`
+ * @type {Object}
+ * @see {@link https://discord.com/developers/docs/topics/permissions#role-object-role-flags}
+ */
+RoleFlags.FLAGS = {
+  IN_PROMPT: 1 << 0,
+};
+
+/**
+ * Data that can be resolved to give a role flag bitfield. This can be:
+ * * A string (see {@link RoleFlags.FLAGS})
+ * * A role flag
+ * * An instance of RoleFlags
+ * * An Array of RoleFlagsResolvable
+ * @typedef {string|number|RoleFlags|RoleFlagsResolvable[]} RoleFlagsResolvable
+ */
+
+module.exports = RoleFlags;

package/src/util/SnowflakeUtil.js

@@ -0,0 +1,92 @@
+'use strict';
+
+// Discord epoch (2015-01-01T00:00:00.000Z)
+const EPOCH = 1_420_070_400_000;
+let INCREMENT = BigInt(0);
+
+/**
+ * A container for useful snowflake-related methods.
+ */
+class SnowflakeUtil extends null {
+  /**
+   * A {@link https://docs.x.com/resources/fundamentals/x-ids Twitter snowflake},
+   * except the epoch is 2015-01-01T00:00:00.000Z.
+   *
+   * If we have a snowflake '266241948824764416' we can represent it as binary:
+   * ```
+   * 64                                          22     17     12          0
+   *  000000111011000111100001101001000101000000  00001  00000  000000000000
+   *  number of milliseconds since Discord epoch  worker  pid    increment
+   * ```
+   * @typedef {string} Snowflake
+   */
+
+  /**
+   * Generates a Discord snowflake.
+   * <info>This hardcodes the worker's id as 1 and the process's id as 0.</info>
+   * @param {number|Date} [timestamp=Date.now()] Timestamp or date of the snowflake to generate
+   * @returns {Snowflake} The generated snowflake
+   */
+  static generate(timestamp = Date.now()) {
+    if (timestamp instanceof Date) timestamp = timestamp.getTime();
+    if (typeof timestamp !== 'number' || isNaN(timestamp)) {
+      throw new TypeError(
+        `"timestamp" argument must be a number (received ${isNaN(timestamp) ? 'NaN' : typeof timestamp})`,
+      );
+    }
+    if (INCREMENT >= 4095n) INCREMENT = BigInt(0);
+
+    // Assign WorkerId as 1 and ProcessId as 0:
+    return ((BigInt(timestamp - EPOCH) << 22n) | (1n << 17n) | INCREMENT++).toString();
+  }
+
+  /**
+   * A deconstructed snowflake.
+   * @typedef {Object} DeconstructedSnowflake
+   * @property {number} timestamp Timestamp the snowflake was created
+   * @property {Date} date Date the snowflake was created
+   * @property {number} workerId The worker's id in the snowflake
+   * @property {number} processId The process's id in the snowflake
+   * @property {number} increment Increment in the snowflake
+   * @property {string} binary Binary representation of the snowflake
+   */
+
+  /**
+   * Deconstructs a Discord snowflake.
+   * @param {Snowflake} snowflake Snowflake to deconstruct
+   * @returns {DeconstructedSnowflake}
+   */
+  static deconstruct(snowflake) {
+    const bigIntSnowflake = BigInt(snowflake);
+    return {
+      timestamp: Number(bigIntSnowflake >> 22n) + EPOCH,
+      get date() {
+        return new Date(this.timestamp);
+      },
+      workerId: Number((bigIntSnowflake >> 17n) & 0b11111n),
+      processId: Number((bigIntSnowflake >> 12n) & 0b11111n),
+      increment: Number(bigIntSnowflake & 0b111111111111n),
+      binary: bigIntSnowflake.toString(2).padStart(64, '0'),
+    };
+  }
+
+  /**
+   * Retrieves the timestamp field's value from a Discord snowflake.
+   * @param {Snowflake} snowflake Snowflake to get the timestamp value from
+   * @returns {number}
+   */
+  static timestampFrom(snowflake) {
+    return Number(BigInt(snowflake) >> 22n) + EPOCH;
+  }
+
+  /**
+   * Discord's epoch value (2015-01-01T00:00:00.000Z).
+   * @type {number}
+   * @readonly
+   */
+  static get EPOCH() {
+    return EPOCH;
+  }
+}
+
+module.exports = SnowflakeUtil;

package/src/util/Speaking.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const BitField = require('./BitField');
+
+/**
+ * Data structure that makes it easy to interact with a {@link VoiceConnection#speaking}
+ * and {@link guildMemberSpeaking} event bitfields.
+ * @extends {BitField}
+ */
+class Speaking extends BitField {}
+
+/**
+ * @name Speaking
+ * @kind constructor
+ * @memberof Speaking
+ * @param {BitFieldResolvable} [bits=0] Bit(s) to read from
+ */
+
+/**
+ * Numeric speaking flags. All available properties:
+ * * `SPEAKING`
+ * * `SOUNDSHARE`
+ * * `PRIORITY_SPEAKING`
+ * @type {Object}
+ * @see {@link https://discord.com/developers/docs/topics/voice-connections#speaking}
+ */
+Speaking.FLAGS = {
+  SPEAKING: 1 << 0,
+  SOUNDSHARE: 1 << 1,
+  PRIORITY_SPEAKING: 1 << 2,
+};
+
+module.exports = Speaking;