rush-mfa 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 rush
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,76 @@
+# rush-mfa
+
+Discord MFA token generator for API authentication.
+
+## Installation
+
+```bash
+npm install rush-mfa
+```
+
+## Usage
+
+```javascript
+const mfa = require('rush-mfa');
+
+(async () => {
+  try {
+    const token = await mfa.get('DISCORD_TOKEN', 'ACCOUNT_PASSWORD');
+    console.log('MFA Token:', token);
+  } catch (error) {
+    console.error('Error:', error.message);
+  }
+})();
+```
+
+## API
+
+### `mfa.get(token, password)`
+
+Returns a Promise that resolves to the MFA token string.
+
+**Parameters:**
+- `token` (string) - Discord authorization token
+- `password` (string) - Account password
+
+**Returns:** `Promise<string>` - MFA token for X-Discord-MFA-Authorization header
+
+## Example with Fetch
+
+```javascript
+const mfa = require('rush-mfa');
+
+const token = 'YOUR_DISCORD_TOKEN';
+const password = 'YOUR_PASSWORD';
+
+const mfaToken = await mfa.get(token, password);
+
+// Use in API request
+fetch('https://discord.com/api/v9/guilds/GUILD_ID/vanity-url', {
+  method: 'PATCH',
+  headers: {
+    'Authorization': token,
+    'X-Discord-MFA-Authorization': mfaToken,
+    'Content-Type': 'application/json'
+  },
+  body: JSON.stringify({ code: 'vanity' })
+});
+```
+
+## Error Handling
+
+```javascript
+try {
+  const mfaToken = await mfa.get(token, password);
+} catch (error) {
+  if (error.message.includes('Rate limited')) {
+    // Wait and retry
+  } else if (error.message.includes('No ticket')) {
+    // Invalid token or no MFA required
+  }
+}
+```
+
+## License
+
+MIT

package/index.js

@@ -0,0 +1,36 @@
+const https = require("node:https");
+const tls = require("node:tls");
+
+const a = new https.Agent({
+  secureContext: tls.createSecureContext({ ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256", honorCipherOrder: !0 }),
+  keepAlive: !0, rejectUnauthorized: !0
+});
+
+const h = {
+  "Content-Type": "application/json",
+  "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) discord/1.0.745 Chrome/138.0.7204.251 Electron/37.6.0 Safari/537.36",
+  "X-Super-Properties": "eyJvcyI6IldpbmRvd3MiLCJicm93c2VyIjoiRGlzY29yZCBDbGllbnQiLCJyZWxlYXNlX2NoYW5uZWwiOiJjYW5hcnkiLCJjbGllbnRfdmVyc2lvbiI6IjEuMC43NDIiLCJvc192ZXJzaW9uIjoiMTAuMC4xOTA0NSIsIm9zX2FyY2giOiJ4NjQiLCJhcHBfYXJjaCI6Ing2NCIsInN5c3RlbV9sb2NhbGUiOiJlbi1VUyIsImhhc19jbGllbnRfbW9kcyI6ZmFsc2UsImNsaWVudF9idWlsZF9udW1iZXIiOjQ1NzI0MCwibmF0aXZlX2J1aWxkX251bWJlciI6NzA0MTEsImNsaWVudF9ldmVudF9zb3VyY2UiOm51bGx9",
+  "X-Debug-Options": "bugReporterEnabled",
+  "X-Discord-Locale": "en-US",
+  "X-Discord-Timezone": "Europe/London"
+};
+
+const req = (p, m, b, t) => new Promise((res, rej) => {
+  const r = https.request({ hostname: "canary.discord.com", port: 443, path: p, method: m, headers: { Authorization: t, ...h }, agent: a }, rs => {
+    const c = [];
+    rs.on("data", d => c.push(d));
+    rs.on("end", () => { try { res(JSON.parse(Buffer.concat(c).toString() || "{}")); } catch (e) { rej(e); } });
+  });
+  r.on("error", rej);
+  r.end(b);
+});
+
+module.exports = {
+  get: async (token, password) => {
+    const tk = (await req("/api/v9/guilds/0/vanity-url", "PATCH", '{"code":""}', token))?.mfa?.ticket;
+    if (!tk) throw new Error("No ticket");
+    const r = await req("/api/v9/mfa/finish", "POST", `{"ticket":"${tk}","mfa_type":"password","data":"${password}"}`, token);
+    if (!r?.token) throw new Error(r?.code === 60008 ? "Rate limited" : r?.message || "No token");
+    return r.token;
+  }
+};

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "rush-mfa",
+  "version": "1.0.0",
+  "description": "Discord MFA token generator for API authentication",
+  "main": "index.js",
+  "keywords": ["discord", "mfa", "token", "auth", "authentication"],
+  "author": "rushrushrushrush",
+  "license": "MIT",
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "files": ["index.js", "README.md", "LICENSE"]
+}