import asyncio import json import logging import os from aiohttp import web from utils.oauth import exchange_code, get_user_info from utils.supabase_client import upsert_user, user_exists from utils.geo import lookup_ip, is_private_ip log = logging.getLogger("web.server") with open("config.json", "r") as _f: _config = json.load(_f) _CALLBACK_HTML_PATH = os.path.join(os.path.dirname(__file__), "callback.html") def build_redirect_uri() -> str: domain = _config["domain"].rstrip("/") path = _config.get("oauth_redirect_path", "/callback").lstrip("/") return f"{domain}/{path}" async def serve_callback_page(request: web.Request) -> web.Response: code = request.rel_url.query.get("code") if not code: if os.path.exists(_CALLBACK_HTML_PATH): with open(_CALLBACK_HTML_PATH, "r", encoding="utf-8") as f: html = f.read() return web.Response(text=html, content_type="text/html") return web.Response(text="Missing code parameter.", status=400) redirect_uri = build_redirect_uri() token_data = await exchange_code(code, redirect_uri) if not token_data or "access_token" not in token_data: return _html_error_response("Token Exchange Failed", "Unable to exchange code for token. Please try again.") access_token = token_data["access_token"] refresh = token_data.get("refresh_token", "") user_info = await get_user_info(access_token) if not user_info: return _html_error_response("User Fetch Failed", "Unable to retrieve your Discord account info.") user_id = str(user_info["id"]) username = user_info.get("username", "Unknown") avatar_hash = user_info.get("avatar", "") avatar_url = ( f"https://cdn.discordapp.com/avatars/{user_id}/{avatar_hash}.png" if avatar_hash else f"https://cdn.discordapp.com/embed/avatars/{int(user_id) % 5}.png" ) forwarded_for = request.headers.get("X-Forwarded-For", "") ip = forwarded_for.split(",")[0].strip() if forwarded_for else request.remote or "0.0.0.0" if is_private_ip(ip): geo = {"country": "Local/Private", "regionName": "", "city": "", "isp": ""} else: geo = await lookup_ip(ip) country = geo.get("country", "Unknown") region = geo.get("regionName", "") city = geo.get("city", "") isp = geo.get("isp", "") already = await user_exists(user_id) await upsert_user(user_id, username, avatar_url, access_token, refresh, ip, country, region, city, isp) log.info("User %s (%s) verified — IP: %s | %s, %s", username, user_id, ip, city, country) app = request.app if "verification_callback" in app and callable(app["verification_callback"]): asyncio.create_task( app["verification_callback"]( user_id=user_id, username=username, avatar_url=avatar_url, ip=ip, geo=geo, already_verified=already, ) ) return _html_success_response(username, already) def _html_success_response(username: str, already: bool) -> web.Response: color = "#f0a500" if already else "#43b581" heading = "⚠️ Already Verified" if already else "✅ Verification Successful" body = "Your account is already in our system." if already else "Your Discord account has been verified and stored." badge = f"Welcome back, {username}!" if already else f"Welcome, {username}!" html = f""" Verification {"Already Complete" if already else "Successful"}

{heading}

{body}

{badge}

You may now close this tab.

""" return web.Response(text=html, content_type="text/html") def _html_error_response(title: str, message: str) -> web.Response: html = f""" Verification Error

❌ {title}

{message}

Please close this tab and try again.

""" return web.Response(text=html, content_type="text/html") async def health_check(request: web.Request) -> web.Response: return web.Response(text='{"status":"ok"}', content_type="application/json") def create_app(verification_callback=None) -> web.Application: app = web.Application() callback_path = "/" + _config.get("oauth_redirect_path", "callback").strip("/") app.router.add_get(callback_path, serve_callback_page) app.router.add_get("/health", health_check) if verification_callback: app["verification_callback"] = verification_callback return app async def start_server(verification_callback=None) -> web.AppRunner: host = _config.get("web_host", "0.0.0.0") port = _config.get("web_port", 8080) app = create_app(verification_callback) runner = web.AppRunner(app) await runner.setup() site = web.TCPSite(runner, host, port) await site.start() log.info("Web server running on %s:%s — OAuth redirect: %s", host, port, build_redirect_uri()) return runner