TheSunIsLeaking/recflare
3
0
Fork 0
mirror of https://github.com/djdevin/recflare.git synced 2026-10-28 00:18:58 -07:00
Code Issues Packages Projects Releases Wiki Activity

[www] fix role sync not grabbing all roles

Browse Source
This commit is contained in:
Devin Zuczek
2026-10-12 16:30:40 -04:00
parent a0345af765
commit dfe5071878
4 changed files with 99 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/www/src/discord.ts
+4 -2
View File
@@ -5,8 +5,10 @@ import type { Env } from './context'
/**
* Discord OAuth2, the identity check behind the website's benefits claim.
*
* A player proves they hold one of the qualifying roles in the community Discord, and
* the claim grants them Rec Room Plus (`account.hasPlus`). The proof is a real OAuth2
* A player links their Discord to their account: the claim records the roles they hold
* in the community Discord on the link (read in-game, e.g. by `auth`'s rollout gate), and
* if one of them is a qualifying role it also grants Rec Room Plus (`account.hasPlus`).
* The link happens whether or not a qualifying role is held. The proof is a real OAuth2
* AUTHORIZATION CODE exchange, not a token the browser hands us: the SPA sends only the
* short-lived `code` Discord redirected it back with, and this worker swaps that for an
* access token using the client SECRET, which — like the Turnstile secret next door —