rassets - npm Package Compare versions

Comparing version 1.1.3 to 1.2.0

package.json

 {
   "name": "rassets",
-  "version": "1.1.3",
+  "version": "1.2.0",
   "description": "A simple Typescript wrapper to upload assets.",
@@ -5,0 +5,0 @@ "main": "./lib/index.js",

README.md

@@ -27,5 +27,11 @@ # RAssets
 ## upload
-This function allows you to upload any asset (CURRENTLY BROKEN)
+This function allows you to upload any asset (working) using the "hidden" api endpoint - http://data.roblox.com/Data/Upload.ashx. If you specify an assetid that you own, you may even overwrite that asset
 ```ts
-const uploadAsset = await RAssets.upload(cookie, {content: testImage, name: "test", type: "png"}, {mime: "image/png", assetTypeId: "11"})
+const uploadAsset = await RAssets.upload(cookie, {content: testModel, name: "test", type: "rbxm"}, {
+    assetType: "Model",
+    name: "test",
+    description: "test",
+    ispublic: true,
+    allowcomments: true
+})
 ```

src/enum/AssetType.ts

@@ -47,2 +47,3 @@ export enum AssetType {
     Video = "62"
-}
+}
+

src/index.ts

@@ -5,2 +5,3 @@ // Dependencies
 import { IAssetUploadFile, IAssetUploadRequest } from "./interfaces/IAssetUploadRequest";
+import { IAssetUploadRequestHidden } from "./interfaces/IAssetUploadRequestHidden";
 import { IAudioRequest } from "./interfaces/IAudioRequest";
@@ -99,48 +100,30 @@ import { IAudioResponse } from "./interfaces/IAudioResponse";
 
-    // Upload an asset - broken have no idea how to fix this
-    export async function upload(cookie: string, file: IAssetUploadFile, data: IAssetUploadRequest){
-        // Get verification token
-        const RequestVerificationToken = await RAssets.getRequestVerificationToken(cookie)
+    // Upload an asset - using hidden api :flushed: (ACTUALLY WORKS)
+    export async function upload(cookie: string, file: IAssetUploadFile, data: IAssetUploadRequestHidden){
+        // Get CSRF
+        const xcsrf = await RAssets.getCSRF(cookie)
+        if (!xcsrf){
+            throw(new Error("Invalid cookie"))
+        }
 
-        // Form Data
-        const form = new formdata()
-        form.append("__RequestVerificationToken", RequestVerificationToken)
-        form.append("assetTypeId", data.assetTypeId)
-        form.append("isOggUploadEnabled", data.isOggUploadEnabled || "True")
-        form.append("groupId", data.groupId || "")
-        form.append("onVerificationPage", data.onVerificationPage || "False")
-        form.append("captchaEnabled", data.captchaEnabled || "False")
-        form.append("captchaToken", data.captchaToken || "")
-        form.append("captchaProvider", data.captchaProvider || "")
-        form.append("file", file.content, {
-            filename: `${file.name}.${file.type}`,
-            contentType: data.mime,
-        })
-        form.append("name", file.name)
-
-        // Body
-        const body = form.getBuffer().toString("base64")
-        
         // Send request
-        const response = await got.post("https://roblox.com/build/upload", {
-            followRedirect: false,
+        const response = await got.post("http://data.roblox.com/Data/Upload.ashx", {
             headers: {
-                Host: "www.roblox.com",
-                Cookie: `.ROBLOSECURITY=${cookie}; __RequestVerificationToken=${RequestVerificationToken};`,
-                "Content-Length": body.length.toString(),
-                "Content-Type": `multipart/form-data; boundary=${form.getBoundary()}`,
-                "Content-Transfer-Encoding": "base64"
+                "User-Agent": "Roblox/WinInet",
+                Cookie: `.ROBLOSECURITY=${cookie};`,
+                "x-csrf-token": xcsrf
             },
-            body: body
+            body: file.content,
+            searchParams: {
+                assetid: data.assetid || 0,
+                type: data.assetType,
+                name: data.name,
+                description: data.description,
+                ispublic: data.ispublic,
+                allowcomments: data.allowcomments
+            }
         })
 
-        // Getting the redirect URL + SoundId
-        const url = response.body.match(/<a href="(.+?)">here</) || ["Error", "Error"]
-        const soundId = response.body.match(/uploadedId=(.+?)">here</) || ["Error", "Error"]
-        
-        console.log(url[1])
-        console.log(soundId[1])
-
-        // Returning SoundId
-        return soundId[1]
+        //
+        return response.body
     }
@@ -147,0 +130,0 @@

test/index.ts

 // Dependencies
 import * as fs from "fs"
-import { AssetType } from "../src/enum/AssetType"
 import RAssets from "../src/index"
@@ -11,2 +10,3 @@
     const testImage = fs.readFileSync("./test/test.png")
+    const testModel = fs.readFileSync("./test/test.rbxm")
     const cookie = ""
@@ -24,9 +24,15 @@
     // Upload Asset
-    //const uploadAsset = await RAssets.upload(cookie, {content: testImage, name: "test", type: "png"}, {mime: "image/png", assetTypeId: AssetType.Image})
+    const uploadAsset = await RAssets.upload(cookie, {content: testModel, name: "test", type: "rbxm"}, {
+        assetType: "Model",
+        name: "test",
+        description: "test",
+        ispublic: true,
+        allowcomments: true
+    })
     
     // Test
-    const verifyAudio = await RAssets.verifyAudio(cookie, {file: testAudio.toString("base64"), paymentSource: "User"})
+    //const verifyAudio = await RAssets.verifyAudio(cookie, {file: testAudio.toString("base64"), paymentSource: "User"})
 
     //
-    console.log(verifyAudio)
+    console.log(uploadAsset)
 })()

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

114590

increased by17.83%

Number of package files

44

increased by4.76%

Lines of code

703

increased by0.43%

Number of lines in readme file

36

increased by20%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes