Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
interactions.ts
Advanced tools
A full command framework for Discord interactions based on @discordjs/builders.
A lightweight but powerful framework for Discord's Interactions. Designed for scalability and simplicity.
An example bot using the framework is available here. Additional code snippets can be found below.
npm install interactions.ts
Interactions.TS is designed to work with any webserver, with it only taking the raw request body and the X-Signature-Ed25519
/X-Signature-Timestamp
headers for authorization. The headers are optional, and can be left out if you're handling authorization at an earlier stage.
For this example, we're using Fastify:
const server = fastify();
server.register(rawBody);
server.post("/", async (request, reply) => {
const signature = request.headers["x-signature-ed25519"];
const timestamp = request.headers["x-signature-timestamp"];
try {
const [onResponse, finished] = app.handleInteraction(
request.rawBody,
timestamp,
signature
);
onResponse.then((response) => {
if ("getHeaders" in response) {
res.headers(response.getHeaders()).code(200).send(response);
return;
}
res.code(200).send(response);
});
await finished;
} catch (err) {
console.error(err);
}
});
This will create a global /ping
command on your application. If one is already registered, it will be overwritten.
const app = new DiscordApplication({
clientId: process.env.CLIENT_ID,
token: process.env.TOKEN,
publicKey: process.env.PUBLIC_KEY,
});
await app.commands.register(
new SlashCommand(new SlashCommandBuilder("ping", "A simple ping command!"), async (context) => {
context.reply("Pong!");
})
);
Command groups, subcommand groups and subcommands are just a little more complex:
await app.register([
new CommandGroup(
new CommandGroupBuilder("config", "A simple config command.")
.addSubcommand(new SubcommandOption("get", "Get a config value."))
.addSubcommand(new SubcommandOption("set", "Set a config value.")),
{
get: {
handler: async (context) => {
const value = "x";
context.reply(new MessageBuilder().setContent(`Config value: ${value}!`));
}
},
set: {
handler: async (context) => {
context.reply(new MessageBuilder().setContent("Config value set!"));
}
}
}
)
]);
const guild = new CommandManager(app, guildId);
await guild.register(
new SlashCommand(new SlashCommandBuilder("pingping", "A guild-specific ping command!"), async (context) => {
context.reply("Pongpong");
})
);
Components must be registered in a similar fashion with a unique ID, creating a sort of "template" for your components. You can then create an instance using context.createGlobalComponent()
which will return a deeply cloned version of your component as a builder, allowing you to further modify it before using it in a response.
Registering a ping command again, this time with a button that reveals a word stored in its state:
app.commands.register(
new SlashCommand(
new SlashCommandBuilder("ping", "A simple ping command!"),
async (context) => {
context.reply(
new MessageBuilder("Press the button to see a surprise...").addComponents(
new ActionRowBuilder().addComponents(await context.createComponent("testButton", { word: "Surprise!" }))
)
);
},
[
new Button(
"example",
new ButtonBuilder(ButtonStyle.Primary, "Example Button"),
async (
ctx: ButtonContext<{
word: string;
}>
) => {
return ctx.reply(ctx.state.word);
}
)
]
)
);
Command interfaces present an additional components
property, allowing you to tie components to a command. This prefixes the component IDs with the command's name (<command>.<component>
), and can then only be retrieved within that command using context.createComponent()
.
You can also pass an arbitrary object when creating a component instance, allowing you to store state information inside the component's custom_id
property. (Later accessible in context.state
).
This state is stored in the custom_id
property by default, which will constrain the size of your data. To avoid this, an external cache such as Redis can be configured:
const redisClient = createClient();
await redisClient.connect();
const app = new DiscordApplication({
clientId: process.env.CLIENT_ID,
token: process.env.TOKEN,
publicKey: process.env.PUBLIC_KEY,
cache: {
get: (key) => redisClient.get(key),
set: (key, ttl, value) => redisClient.setEx(key, ttl, value)
}
});
FAQs
A full command framework for Discord interactions based on @discordjs/builders.
The npm package interactions.ts receives a total of 49 weekly downloads. As such, interactions.ts popularity was classified as not popular.
We found that interactions.ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.