851 lines
33 KiB
JavaScript
851 lines
33 KiB
JavaScript
const colors = require("colors");
|
|
require("dotenv").config();
|
|
const fs = require("fs");
|
|
const express = require("express");
|
|
const expressWs = require("express-ws");
|
|
const app = express();
|
|
const ws = expressWs(app);
|
|
const port = process.env.PORT || 3000;
|
|
const { exec } = require("child_process");
|
|
const sqlite3 = require("sqlite3").verbose();
|
|
const db = new sqlite3.Database("./database.db");
|
|
const ttsCommands = require("./tts.json")
|
|
// Find all migrations .sql files in ./migrations, execute them in order
|
|
db.on("open", () => {
|
|
db.on("error", (err) => {
|
|
console.log(`${colors.red("[DB]")} ${err}`);
|
|
});
|
|
console.log(`${colors.cyan("[DB]")} Connected to the database`);
|
|
fs.readdirSync("./migrations").forEach((file) => {
|
|
if (file.endsWith(".sql")) {
|
|
const migration = fs.readFileSync(`./migrations/${file}`, "utf8");
|
|
try {
|
|
db.run(migration)
|
|
console.log(`${colors.cyan("[DB]")} ${file} ${colors.green("executed")}`);
|
|
} catch (error) {
|
|
console.log(`${colors.red("[DB]")} ${file} ${colors.red("failed")}`);
|
|
}
|
|
}
|
|
});
|
|
});
|
|
|
|
const Discord = require("discord.js");
|
|
const {
|
|
REST,
|
|
Routes
|
|
} = require('discord.js');
|
|
const { title, send } = require("process");
|
|
const rest = new REST({
|
|
version: '10'
|
|
}).setToken(process.env.DISCORD_TOKEN);
|
|
const client = new Discord.Client({
|
|
intents: [
|
|
"Guilds"
|
|
]
|
|
});
|
|
|
|
app.use(express.json());
|
|
|
|
app.use((req, res, next) => {
|
|
// Log all requests with IP address
|
|
console.log(`${colors.cyan("[EXPRESS]")} ${req.ip} ${req.method} ${req.url}`);
|
|
next();
|
|
});
|
|
|
|
|
|
|
|
// Vars
|
|
|
|
var handledTransactions = [];
|
|
|
|
// Funcs
|
|
|
|
function sanitizeForTTS(input) {
|
|
// Remove any HTML tags and other potentially dangerous characters
|
|
let sanitized = input.replace(/<[^>]*>?/gm, ""); // Remove HTML tags
|
|
sanitized = sanitized.replace(/[^\w\s,.!?'-]/g, ""); // Allow only basic punctuation and word characters
|
|
|
|
// Replace multiple spaces with a single space
|
|
sanitized = sanitized.replace(/\s\s+/g, " ");
|
|
|
|
// Trim extra whitespace from the beginning and end
|
|
sanitized = sanitized.trim();
|
|
|
|
// Optionally, you could replace or normalize abbreviations
|
|
sanitized = sanitized.replace(/\bMr\.\b/g, "Mister");
|
|
sanitized = sanitized.replace(/\bMrs\.\b/g, "Misses");
|
|
sanitized = sanitized.replace(/\bDr\.\b/g, "Doctor");
|
|
sanitized = sanitized.replace(/\bSt\.\b/g, "Saint");
|
|
|
|
// Additional logic can go here (e.g., profanity filtering, replacing unsupported characters)
|
|
|
|
return sanitized;
|
|
}
|
|
|
|
function runCommand(command, stdin) {
|
|
return new Promise((resolve, reject) => {
|
|
const child = exec(command, (error, stdout, stderr) => {
|
|
if (error) {
|
|
console.error(`exec error: ${error}`);
|
|
reject(error);
|
|
} else {
|
|
resolve(stdout);
|
|
}
|
|
});
|
|
if (stdin) {
|
|
child.stdin.write(stdin);
|
|
child.stdin.end();
|
|
}
|
|
});
|
|
}
|
|
|
|
// runcommand but i can pass stdin as an argument
|
|
|
|
// generateAccountNumber() // Returns a random 10 digit number, checks if it already exists in the database, and loops until it gets one that doesn't exist
|
|
function generateAccountNumber() {
|
|
let accountNumber = Math.floor(Math.random() * 10000000000);
|
|
db.get("SELECT * FROM accounts WHERE id = ?", accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
accountNumber = generateAccountNumber();
|
|
}
|
|
});
|
|
return accountNumber;
|
|
}
|
|
|
|
// generateTransactionNumber() // Returns a random 10 digit number
|
|
function generateTransactionNumber() {
|
|
return Math.floor(Math.random() * 10000000000);
|
|
}
|
|
|
|
function sendDemo(accountNumber, transaction, placeName, systemName, zoneNumber, zoneName, event, placeId) {
|
|
return new Promise((resolve, reject) => {
|
|
if (handledTransactions.includes(transaction)) {
|
|
resolve(); // Duplicate transaction
|
|
} else {
|
|
handledTransactions.push(transaction);
|
|
// Check if the account exists and is verified
|
|
|
|
if (placeName.length > (process.env.MAX_LENGTH || 500) || systemName.length > (process.env.MAX_LENGTH || 500) || zoneName.length > (process.env.MAX_LENGTH || 500) || event.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long.`);
|
|
console.log(`${colors.red("[ERROR]")} PlaceName: ${placeName.length} SystemName: ${systemName.length} ZoneName: ${zoneName.length} EventName: ${event.length}`);
|
|
reject("Input too long");
|
|
}
|
|
// Account exists and is verified
|
|
// Send the alert
|
|
runCommand(ttsCommands[0].replace("%s", `/tmp/${transaction}.wav`), `Hello. This is an automated call from KCA SecuriNet Monitoring. ${systemName} has reported a ${event}, ZONE ${zoneNumber}, ${zoneName}, at ${placeName}`).then((output) => {
|
|
runCommand(`ffmpeg -y -i /tmp/${transaction}.wav -ar 8000 -ac 1 -c:a pcm_s16le /tmp/${transaction}-alert.wav`).then(() => {
|
|
runCommand(`rm /tmp/${transaction}.wav`)
|
|
// strip extension from filename
|
|
|
|
client.channels.cache.get("1269078717552922745").send({
|
|
embeds: [{
|
|
title: "Demo Alert",
|
|
description: `Place: [${placeName}](https://roblox.com/games/${placeId}/linkgenerator)\nSystem: ${systemName}\nZone: ${zoneNumber} - ${zoneName}\nEvent: ${event}`
|
|
}],
|
|
files: [{
|
|
attachment: `/tmp/${transaction}-alert.wav`,
|
|
name: `${transaction}-alert.wav`
|
|
}]
|
|
}).then(() => {
|
|
resolve();
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
}
|
|
});
|
|
}
|
|
|
|
function sendAlert(accountNumber, transaction, placeName, systemName, zoneNumber, zoneName, event) {
|
|
// replace any non alphanumeric characters with nothing in all inputs
|
|
placeName = placeName.replace(/[^a-zA-Z0-9]/g, "");
|
|
systemName = systemName.replace(/[^a-zA-Z0-9]/g, "");
|
|
zoneName = zoneName.replace(/[^a-zA-Z0-9]/g, "");
|
|
event = event.replace(/[^a-zA-Z0-9]/g, "");
|
|
//zoneNumber = zoneNumber.replace(/[^a-zA-Z0-9]/g, "");
|
|
return new Promise((resolve, reject) => {
|
|
if (handledTransactions.includes(transaction)) {
|
|
resolve(); // Duplicate transaction
|
|
} else {
|
|
handledTransactions.push(transaction);
|
|
// Check if the account exists and is verified
|
|
db.get("SELECT * FROM accounts WHERE id = ? AND verified = 1", accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
reject(err);
|
|
} else if (row) {
|
|
if (new Date(row.cooldown) > new Date()) {
|
|
console.log("Cooldown")
|
|
reject("Cooldown");
|
|
} else {
|
|
console.log("Not cooldown")
|
|
newCooldown = new Date();
|
|
newCooldown.setMinutes(newCooldown.getMinutes() + 5);
|
|
|
|
db.run("UPDATE accounts SET cooldown = ? WHERE id = ?", newCooldown.toISOString() ,accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
}
|
|
});
|
|
}
|
|
|
|
// Check if any of the inputs are over 500 characters, if so reject
|
|
if (placeName.length > (process.env.MAX_LENGTH || 500) || systemName.length > (process.env.MAX_LENGTH || 500) || zoneName.length > (process.env.MAX_LENGTH || 500) || event.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long.`);
|
|
console.log(`${colors.red("[ERROR]")} PlaceName: ${placeName.length} SystemName: ${systemName.length} ZoneName: ${zoneName.length} EventName: ${event.length}`);
|
|
reject("Input too long");
|
|
}
|
|
|
|
// Account exists and is verified
|
|
// Send the alert
|
|
runCommand(ttsCommands[row.ttsOverride].value.replace("%s", `/tmp/${transaction}.wav`), `Hello. This is an automated call from KCA SecuriNet Monitoring. ${systemName} has reported a ${event}, ZONE ${zoneNumber}, ${zoneName}, at ${placeName}`).then((output) => {
|
|
runCommand(`ffmpeg -y -i /tmp/${transaction}.wav -ar 8000 -ac 1 -c:a pcm_s16le /tmp/${transaction}-alert.wav`).then(() => {
|
|
runCommand(`rm /tmp/${transaction}.wav`)
|
|
// strip extension from filename
|
|
|
|
runCommand(`/var/lib/asterisk/bin/originate ${row.phone} roblox.s.1 0 0 /tmp/${transaction}-alert "IktDQSBTZWN1cmlOZXQiIDw5OTk5Pg=="`).then(() => {
|
|
console.log(`Alert sent to ${row.phone}`);
|
|
resolve();
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
|
|
db.get("SELECT * FROM links WHERE linked_from = ?", accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.get("SELECT * FROM accounts WHERE id = ?", row.linked_to, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
runCommand(`/var/lib/asterisk/bin/originate ${row.phone} roblox.s.1 0 0 /tmp/${transaction}-alert "IktDQSBTZWN1cmlOZXQiIDw5OTk5Pg=="`).then(() => {
|
|
console.log(`Alert sent to ${row.phone}`);
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
});
|
|
}
|
|
});
|
|
}
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
} else {
|
|
resolve();
|
|
// Account does not exist or is not verified
|
|
}
|
|
});
|
|
}
|
|
});
|
|
}
|
|
|
|
function sendTTS(accountNumber, transaction, text) {
|
|
// Set textFiltered to a string safe for TTS input
|
|
const textFiltered = sanitizeForTTS(text)
|
|
return new Promise((resolve, reject) => {
|
|
if (handledTransactions.includes(transaction)) {
|
|
resolve(); // Duplicate transaction
|
|
} else {
|
|
handledTransactions.push(transaction);
|
|
// Check if the account exists and is verified
|
|
db.get("SELECT * FROM accounts WHERE id = ? AND verified = 1", accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
reject(err);
|
|
} else if (row) {
|
|
// Account exists and is verified
|
|
// Send the alert
|
|
runCommand(ttsCommands[row.ttsOverride].value.replace("%s", `/tmp/${transaction}.wav`), `Hello. This is an automated call from KCA SecuriNet Monitoring. ${textFiltered}`).then((output) => {
|
|
runCommand(`ffmpeg -y -i /tmp/${transaction}.wav -ar 8000 -ac 1 -c:a pcm_s16le /tmp/${transaction}-tts.wav`).then(() => {
|
|
runCommand(`rm /tmp/${transaction}.wav`)
|
|
// strip extension from filename
|
|
|
|
runCommand(`/var/lib/asterisk/bin/originate ${row.phone} roblox.s.1 0 0 /tmp/${transaction}-tts "IktDQSBTZWN1cmlOZXQiIDw5OTk5Pg=="`).then(() => {
|
|
console.log(`TTS sent to ${row.phone}`);
|
|
resolve();
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
|
|
db.get("SELECT * FROM links WHERE linked_from = ?", accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.get("SELECT * FROM accounts WHERE id = ?", row.linked_to, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
runCommand(`/var/lib/asterisk/bin/originate ${row.phone} roblox.s.1 0 0 /tmp/${transaction}-tts "IktDQSBTZWN1cmlOZXQiIDw5OTk5Pg=="`).then(() => {
|
|
console.log(`TTS sent to ${row.to}`);
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
});
|
|
}
|
|
});
|
|
}
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
}).catch((error) => {
|
|
console.error(error);
|
|
reject(error);
|
|
});
|
|
} else {
|
|
resolve();
|
|
// Account does not exist or is not verified
|
|
}
|
|
});
|
|
}
|
|
});
|
|
}
|
|
|
|
function sendVerificationCode(account) {
|
|
// Get verification code from database
|
|
db.get("SELECT * FROM accounts WHERE id = ?", account, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
if (new Date(row.cooldown) > new Date()) {
|
|
reject("Cooldown");
|
|
} else {
|
|
newCooldown = new Date();
|
|
newCooldown.setMinutes(newCooldown.getMinutes() + 5);
|
|
|
|
db.run("UPDATE accounts SET cooldown = ? WHERE id = ?", newCooldown.toISOString() ,accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
}
|
|
});
|
|
}
|
|
// Send verification code to phone number
|
|
runCommand(ttsCommands[row.ttsOverride].value.replace("%s", `/tmp/${account}-code.wav`), `Hello. This is an automated call from KCA SecuriNet Monitoring. To verify your phone number, use the slash verify command on Discord. Your verification code is ${row.verification_code.split("").join(", ")}. Repeating, your code is ${row.verification_code.split("").join(", ")}. Once again, your code is ${row.verification_code.split("").join(", ")}`).then((output) => {
|
|
runCommand(`ffmpeg -y -i /tmp/${account}-code.wav -ar 8000 -ac 1 -c:a pcm_s16le /tmp/${account}-verification.wav`).then(() => {
|
|
runCommand(`rm /tmp/${account}-code.wav`)
|
|
// strip extension from filename
|
|
|
|
runCommand(`/var/lib/asterisk/bin/originate ${row.phone} roblox.s.1 0 0 /tmp/${account}-verification "IktDQSBTZWN1cmlOZXQiIDw5OTk5Pg=="`).then(() => {
|
|
console.log(`Verification code sent to ${row.phone}`);
|
|
})
|
|
})
|
|
})
|
|
} else {
|
|
return;
|
|
// Account does not exist or is not verified
|
|
}
|
|
});
|
|
}
|
|
|
|
function generatePhoneCode() {
|
|
// generate 6 digit
|
|
return Math.floor(100000 + Math.random() * 900000).toString();
|
|
}
|
|
|
|
client.on("ready", async () => {
|
|
//sendDemo("6371787150", generateTransactionNumber(), "KCA Product Showcase", "Building Security", 1, "Front Door", "alarm");
|
|
console.log(`${colors.cyan("[Discord]")} Logged in as ${client.user.tag}`);
|
|
|
|
const commands = require("./commands.json");
|
|
commands.push({
|
|
name: "voice",
|
|
description: "Set the TTS voice for your account",
|
|
type: 1,
|
|
options: [
|
|
{
|
|
"name": "account_number",
|
|
"description": "The account number to deactivate",
|
|
"type": 3,
|
|
"required": true,
|
|
"autocomplete": true
|
|
},
|
|
{
|
|
name: "voice",
|
|
description: "The voice to use for TTS",
|
|
type: 3,
|
|
required: true,
|
|
choices: ttsCommands
|
|
}
|
|
]
|
|
})
|
|
//Register commands
|
|
await (async () => {
|
|
try {
|
|
console.log(`${colors.cyan("[Discord]")} Registering Commands...`)
|
|
//Global
|
|
await rest.put(Routes.applicationCommands(client.user.id), { body: commands })
|
|
console.log(`${colors.cyan("[Discord]")} Successfully registered commands. Took ${colors.green((Date.now() - startTime) / 1000)} seconds.`);
|
|
} catch (error) {
|
|
console.error(error);
|
|
}
|
|
})();
|
|
app.listen(port, () => {
|
|
console.log(`${colors.cyan("[EXPRESS]")} Listening on ${port}`);
|
|
});
|
|
});
|
|
|
|
client.on("interactionCreate", async (interaction) => {
|
|
switch (interaction.type) {
|
|
case Discord.InteractionType.ApplicationCommand:
|
|
|
|
switch (interaction.commandName) {
|
|
case "register":
|
|
phone_number = interaction.options.getString("phone_number");
|
|
// Check that phone_number is either a 4 digit number starting with 1, a 7 digit number, a 10 digit number, or an 11 digit number starting with 1
|
|
if (!/^(1\d{3}|\d{7}|\d{10}|1\d{10})$/.test(phone_number)) {
|
|
interaction.reply({ ephemeral: true, content: "Invalid phone number. Please enter one of the following:\n- A 4 digit LiteNet extension.\n- A 7 digit TandmX number\n- An 10 digit US phone number.\n- An 11 digit US phone number" });
|
|
return;
|
|
}
|
|
// check that the user doesnt have any unverified accounts already (check discord_id and verified)
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND verified = 0", interaction.user.id, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
interaction.reply({ ephemeral: true, content: "You already have an unverified account. Please verify it before creating a new one." });
|
|
} else {
|
|
accountNumber = generateAccountNumber();
|
|
verification_code = generatePhoneCode();
|
|
db.run("INSERT INTO accounts (id, discord_id, verification_code, phone) VALUES (?, ?, ?, ?)", accountNumber, interaction.user.id, verification_code, phone_number, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
interaction.reply({
|
|
content: `Account created. Our system will call you shortly with a verification code. Please enter that code into \`/verify\``,
|
|
ephemeral: true
|
|
}).then(() => {
|
|
setTimeout(() => {
|
|
sendVerificationCode(accountNumber);
|
|
}, 5000); // Wait 5 seconds before calling so user has time to read message
|
|
});
|
|
}
|
|
});
|
|
}
|
|
});
|
|
break;
|
|
case "verify":
|
|
verification_code = interaction.options.getString("verification_code");
|
|
db.get("SELECT * FROM accounts WHERE verification_code = ? AND verified = 0", verification_code, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.run("UPDATE accounts SET verified = 1 WHERE verification_code = ?", verification_code, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
interaction.reply({
|
|
content: `Account Verified! Your account number is \`${row.id}\`.\nFor help setting up the dialer, feel free to contact a member of staff!`,
|
|
ephemeral: true
|
|
})
|
|
}
|
|
});
|
|
} else {
|
|
interaction.reply({ ephemeral: true, content: "Invalid verification code." });
|
|
}
|
|
});
|
|
break;
|
|
case "resend":
|
|
// Find the account thats unverified owned by the user
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND verified = 0", interaction.user.id, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
sendVerificationCode(row.id);
|
|
interaction.reply({
|
|
content: `Verification code resent to ${row.phone}`,
|
|
ephemeral: true
|
|
});
|
|
} else {
|
|
interaction.reply({ ephemeral: true, content: "You don't have an unverified account." });
|
|
}
|
|
});
|
|
break;
|
|
case "list":
|
|
// list all active accounts owned by the user
|
|
db.all("SELECT * FROM accounts WHERE discord_id = ? AND verified = 1", interaction.user.id, (err, rows) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (rows) {
|
|
let accountList = "";
|
|
rows.forEach((row) => {
|
|
accountList += `\`${row.id}\` - \`${row.phone}\`\n`;
|
|
});
|
|
interaction.reply({
|
|
content: `Active accounts:\n${accountList}`,
|
|
ephemeral: true
|
|
});
|
|
} else {
|
|
interaction.reply({ ephemeral: true, content: "You don't have any active accounts." });
|
|
}
|
|
});
|
|
break;
|
|
case "deactivate": // Deactivate an account
|
|
// Check that account_number is owned by the user, if it is, delete the row
|
|
accountNumber = interaction.options.getString("account_number");
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ?", interaction.user.id, accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.run("DELETE FROM accounts WHERE id = ?", accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
db.run("DELETE FROM links WHERE linked_from = ? OR linked_to = ?", accountNumber, accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
interaction.reply({
|
|
content: "Account deactivated.",
|
|
ephemeral: true
|
|
});
|
|
}
|
|
});
|
|
}
|
|
});
|
|
} else {
|
|
interaction.reply({ ephemeral: true, content: "You don't own that account." });
|
|
}
|
|
});
|
|
break;
|
|
case "update": // If the account is owned by the user and verified, update the phone number, unverify it, and send verification to the new number. Do the same checks as register
|
|
accountNumber = interaction.options.getString("account_number");
|
|
phone_number = interaction.options.getString("phone_number");
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ? AND verified = 1", interaction.user.id, accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
if (!/^(1\d{3}|\d{7}|\d{10}|1\d{10})$/.test(phone_number)) {
|
|
interaction.reply({ ephemeral: true, content: "Invalid phone number. Please enter one of the following:\n- A 4 digit LiteNet extension.\n- A 7 digit TandmX number\n- An 10 digit US phone number.\n- An 11 digit US phone number" });
|
|
return;
|
|
}
|
|
verification_code = generatePhoneCode();
|
|
db.run("UPDATE accounts SET phone = ?, verified = 0, verification_code = ? WHERE id = ?", phone_number, verification_code, accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
sendVerificationCode(accountNumber);
|
|
interaction.reply({
|
|
content: `Account updated. Please verify your account by entering the verification code sent to ${phone_number}`,
|
|
ephemeral: true
|
|
});
|
|
}
|
|
});
|
|
} else {
|
|
interaction.reply({ content: "You don't own that account.", ephemeral: true });
|
|
}
|
|
});
|
|
break;
|
|
case "cancel": // Cancel an unverified account
|
|
// Check if the user has an unverified account, if they do, delete it
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND verified = 0", interaction.user.id, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.run("DELETE FROM accounts WHERE discord_id = ? AND verified = 0", interaction.user.id, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
interaction.reply({
|
|
content: "Account creation cancelled.",
|
|
ephemeral: true
|
|
});
|
|
}
|
|
});
|
|
} else {
|
|
interaction.reply({ content: "You don't have an unverified account.", ephemeral: true });
|
|
}
|
|
});
|
|
break;
|
|
case "link": // Link two account numbers together, only allow linking if both accounts are owned by the user and verified
|
|
// check that both account numbers from and to are owned by the user and verified
|
|
accountNumberFrom = interaction.options.getString("from");
|
|
accountNumberTo = interaction.options.getString("to");
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ? AND verified = 1", interaction.user.id, accountNumberFrom, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ? AND verified = 1", interaction.user.id, accountNumberTo, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
// check that the link doesnt already exist in `link`
|
|
db.get("SELECT * FROM links WHERE linked_from = ? AND linked_to = ?", accountNumberFrom, accountNumberTo, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
}
|
|
if (row) {
|
|
return interaction.reply({ content: "Those accounts are already linked.", ephemeral: true });
|
|
} else {
|
|
if (accountNumberFrom == accountNumberTo) {
|
|
return interaction.reply({ content: "You can't link an account to itself.", ephemeral: true });
|
|
}
|
|
db.run("INSERT INTO links (linked_from, linked_to, discord_id) VALUES (?, ?, ?)", accountNumberFrom, accountNumberTo, interaction.user.id, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
return interaction.reply({ content: "Accounts linked.", ephemeral: true });
|
|
}
|
|
});
|
|
}
|
|
});
|
|
|
|
} else {
|
|
return interaction.reply({ content: "You don't own that account.", ephemeral: true });
|
|
}
|
|
});
|
|
} else {
|
|
return interaction.reply({ content: "You don't own that account.", ephemeral: true });
|
|
}
|
|
});
|
|
break;
|
|
case "unlink": // Unlink two account numbers, only allow unlinking if both accounts are owned by the user
|
|
// check that from and to are owned by the user, and linked, if they are, delete the row
|
|
accountNumberFrom = interaction.options.getString("from");
|
|
accountNumberTo = interaction.options.getString("to");
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ?", interaction.user.id, accountNumberFrom, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.get("SELECT * FROM accounts WHERE discord_id = ? AND id = ?", interaction.user.id, accountNumberTo, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (row) {
|
|
db.run("DELETE FROM links WHERE linked_from = ? AND linked_to = ?", accountNumberFrom, accountNumberTo, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else {
|
|
return interaction.reply({ content: "Accounts unlinked.", ephemeral: true });
|
|
}
|
|
});
|
|
} else {
|
|
return interaction.reply({ content: "You don't own that account.", ephemeral: true });
|
|
}
|
|
});
|
|
} else {
|
|
return interaction.reply({ content: "You don't own that account.", ephemeral: true });
|
|
}
|
|
});
|
|
break;
|
|
case "links": // a list of linked accounts owned by the user
|
|
// get all linked accounts owned by the user
|
|
db.all("SELECT * FROM links WHERE discord_id = ?", interaction.user.id, (err, rows) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (rows) {
|
|
let linkList = "";
|
|
rows.forEach((row) => {
|
|
linkList += `\`${row.linked_from}\` ➡ \`${row.linked_to}\`\n`;
|
|
});
|
|
interaction.reply({
|
|
content: `Linked accounts:\n${linkList}`,
|
|
ephemeral: true
|
|
});
|
|
} else {
|
|
interaction.reply({ content: "You don't have any linked accounts.", ephemeral: true });
|
|
}
|
|
});
|
|
break;
|
|
}
|
|
break;
|
|
case Discord.InteractionType.ApplicationCommandAutocomplete:
|
|
switch (interaction.commandName) {
|
|
case "deactivate" || "voice":
|
|
// Get all active accounts owned by the user
|
|
db.all("SELECT * FROM accounts WHERE discord_id = ? AND verified = 1", interaction.user.id, (err, rows) => {
|
|
if (err) {
|
|
console.error(err);
|
|
} else if (rows) {
|
|
let accountList = [];
|
|
rows.forEach((row) => {
|
|
accountList.push({
|
|
name: `${row.id} - ${row.phone}`,
|
|
value: `${row.id}`
|
|
});
|
|
});
|
|
interaction.respond(accountList);
|
|
}
|
|
});
|
|
break;
|
|
}
|
|
break;
|
|
}
|
|
});
|
|
|
|
|
|
app.post("/api/v1/alert", (req, res) => { // Legacy alert endpoint
|
|
console.log(req.body);
|
|
|
|
// Check length of inputs, if any are over 500 characters, return 400
|
|
if (req.body.placeName.length > (process.env.MAX_LENGTH || 500) || req.body.systemName.length > (process.env.MAX_LENGTH || 500) || req.body.zoneName.length > (process.env.MAX_LENGTH || 500) || req.body.event.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long. From ${req.ip}`);
|
|
console.log(`${colors.red("[ERROR]")} PlaceName: ${req.body.placeName.length} SystemName: ${req.body.systemName.length} ZoneName: ${req.body.zoneName.length} EventName: ${req.body.event.length}`);
|
|
res.status(400).send("Input too long");
|
|
}
|
|
// send no content response
|
|
sendAlert(req.body.accountNumber, req.body.transaction, req.body.placeName, req.body.systemName, req.body.zoneNumber, req.body.zoneName, req.body.event).then(() => {
|
|
res.status(204).send();
|
|
}).catch((error) => {
|
|
res.status(500).send(error);
|
|
});
|
|
})
|
|
|
|
app.post("/api/v1/webhook/:brand/:accountNumber", (req, res) => {
|
|
// Check length of inputs, if any are over 500 characters, return 400
|
|
switch (req.params.brand) {
|
|
case "kca":
|
|
if (req.body.placeName.length > (process.env.MAX_LENGTH || 500) || req.body.systemName.length > (process.env.MAX_LENGTH || 500) || req.body.zoneName.length > (process.env.MAX_LENGTH || 500) || req.body.event.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long. From ${req.ip}`);
|
|
console.log(`${colors.red("[ERROR]")} PlaceName: ${req.body.placeName.length} SystemName: ${req.body.systemName.length} ZoneName: ${req.body.zoneName.length} EventName: ${req.body.event.length}`);
|
|
res.status(400).send("Input too long");
|
|
}
|
|
if (req.params.accountNumber == "DEMOTEST") {
|
|
// Generate the audio files, then post it to discord
|
|
sendDemo(req.params.accountNumber, req.body.transaction, req.body.placeName, req.body.systemName, req.body.zoneNumber, req.body.zoneName, req.body.event, req.body.placeId).then(() => {
|
|
res.status(204).send();
|
|
}).catch((error) => {
|
|
res.status(500).send(error);
|
|
});
|
|
} else {
|
|
|
|
// send alert to accountNumber
|
|
sendAlert(req.params.accountNumber, req.body.transaction, req.body.placeName, req.body.systemName, req.body.zoneNumber, req.body.zoneName, req.body.event).then((resp) => {
|
|
if(resp == "Cooldown") {
|
|
return res.status(429).send("Cooldown");
|
|
}
|
|
res.status(204).send();
|
|
}).catch((error) => {
|
|
res.status(500).send(error);
|
|
});
|
|
}
|
|
break;
|
|
default:
|
|
res.status(400).send("Brand not found");
|
|
break;
|
|
}
|
|
});
|
|
|
|
app.post("/api/v1/tts", (req, res) => {
|
|
// Check length of inputs, if any are over 500 characters, return 400
|
|
if (req.body.text.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long. From ${req.ip}`);
|
|
console.log(`${colors.red("[ERROR]")} Text: ${req.body.text.length}`);
|
|
res.status(400).send("Input too long");
|
|
}
|
|
console.log(req.body);
|
|
// send no content response
|
|
sendTTS(req.body.accountNumber, req.body.transaction, req.body.text).then(() => {
|
|
res.status(204).send();
|
|
}).catch((error) => {
|
|
res.status(500).send(error);
|
|
console.log(error.stack)
|
|
});
|
|
});
|
|
|
|
app.ws("/api/v1/websocket/:accountNumber", (ws, req) => {
|
|
var userData;
|
|
// Check if account number is valid and is verified
|
|
db.get("SELECT * FROM accounts WHERE id = ? AND verified = 1", req.params.accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
ws.send(JSON.stringify({status: "error", code: 500, message: "Internal Server Error", timestamp: new Date().toISOString()}));
|
|
ws.close();
|
|
return;
|
|
} else if (row) {
|
|
userData = row;
|
|
ws.send(JSON.stringify({status: "connected", code: 200, timestamp: new Date().toISOString()}));
|
|
} else {
|
|
ws.send(JSON.stringify({status: "error", code: 404, message: "Account not found or not verified", timestamp: new Date().toISOString()}));
|
|
ws.close();
|
|
return;
|
|
}
|
|
});
|
|
|
|
ws.on("message", (msg) => {
|
|
// Validate json
|
|
try {
|
|
msg = JSON.parse(msg);
|
|
} catch (error) {
|
|
console.error(error);
|
|
ws.send(JSON.stringify({status: "error", message: "Invalid JSON", timestamp: new Date().toISOString()}));
|
|
return;
|
|
}
|
|
switch(msg.action) {
|
|
case "close":
|
|
ws.send(JSON.stringify({response: "closed", timestamp: new Date().toISOString()}));
|
|
ws.close();
|
|
break;
|
|
case "ping":
|
|
ws.send(JSON.stringify({response: "pong", timestamp: new Date().toISOString()}));
|
|
break;
|
|
case "getStatus":
|
|
// Get the armState column from the account database
|
|
db.get("SELECT armState FROM accounts WHERE id = ?", req.params.accountNumber, (err, row) => {
|
|
if (err) {
|
|
console.error(err);
|
|
ws.send(JSON.stringify({action: msg.action, status: "error", code: 500, message: "Internal Server Error", timestamp: new Date().toISOString()}));
|
|
} else {
|
|
ws.send(JSON.stringify({action: msg.action, status: "success", code: 200, armState: row.armState, timestamp: new Date().toISOString()}));
|
|
}
|
|
});
|
|
break;
|
|
case "report":
|
|
console.log(msg)
|
|
// Check length of inputs, if any are over 500 characters, return 400
|
|
if (msg.data.placeName.length > (process.env.MAX_LENGTH || 500) || msg.data.systemName.length > (process.env.MAX_LENGTH || 500) || msg.data.zoneName.length > (process.env.MAX_LENGTH || 500) || msg.data.event.length > (process.env.MAX_LENGTH || 500)) {
|
|
console.log(`${colors.red("[ERROR]")} Input too long.`);
|
|
console.log(`${colors.red("[ERROR]")} PlaceName: ${msg.data.placeName.length} SystemName: ${msg.data.systemName.length} ZoneName: ${msg.data.zoneName.length} EventName: ${msg.data.event.length}`);
|
|
ws.send(JSON.stringify({ action: msg.action, status: "error", code: 400, message: "Input too long", timestamp: new Date().toISOString() }));
|
|
return;
|
|
}
|
|
|
|
// Check cooldown
|
|
if (new Date(userData.cooldown) > new Date()) {
|
|
console.log("Cooldown")
|
|
ws.send(JSON.stringify({ action: msg.action, status: "error", code: 429, message: "Cooldown", timestamp: new Date().toISOString() }));
|
|
return;
|
|
} else {
|
|
console.log("Not cooldown")
|
|
newCooldown = new Date();
|
|
newCooldown.setMinutes(newCooldown.getMinutes() + 5);
|
|
}
|
|
|
|
sendAlert(req.params.accountNumber, generateTransactionNumber(), msg.data.placeName, msg.data.systemName, msg.data.zoneNumber, msg.data.zoneName, msg.data.event).then(() => {
|
|
ws.send(JSON.stringify({ action: msg.action, status: "success", code: 200, timestamp: new Date().toISOString() }));
|
|
}).catch((error) => {
|
|
ws.send(JSON.stringify({ action: msg.action, status: "error", code: 500, message: error, timestamp: new Date().toISOString() }));
|
|
});
|
|
break;
|
|
case "updateState":
|
|
// Update the armState column in the account database
|
|
db.run("UPDATE accounts SET armState = ? WHERE id = ?", msg.armState, req.params.accountNumber, (err) => {
|
|
if (err) {
|
|
console.error(err);
|
|
ws.send(JSON.stringify({action: msg.action, status: "error", code: 500, message: "Internal Server Error", timestamp: new Date().toISOString()}));
|
|
} else {
|
|
ws.send(JSON.stringify({action: msg.action, status: "success", code: 200, timestamp: new Date().toISOString()}));
|
|
}
|
|
});
|
|
break;
|
|
|
|
}
|
|
});
|
|
});
|
|
|
|
startTime = new Date();
|
|
client.login(process.env.DISCORD_TOKEN); |