BotNext.py

import json
import os
import requests
from nacl.signing import VerifyKey
from nacl.exceptions import BadSignatureError

PUBLIC_KEY = os.getenv("DISCORD_PUBLIC_KEY")
API_URL = os.getenv("API_URL")

GUILD_ID = "1219845424169353276"
ROLE_ID = "1235047378327703562"
BOT_TOKEN = os.getenv("DISCORD_BOT_TOKEN")

DISCORD_API = "https://discord.com/api/v10"


def lambda_handler(event, context):
    headers = event.get("headers", {})
    raw_body = event.get("body", "")

    # 🔐 Validação obrigatória do Discord
    try:
        verify_discord_signature(headers, raw_body)
    except Exception:
        return {"statusCode": 401}

    body = json.loads(raw_body)

    # 🔁 Ping
    if body["type"] == 1:
        return json_response({"type": 1})

    # Slash command
    if body["type"] == 2 and body["data"]["name"] == "enviar_ra":
        ra = body["data"]["options"][0]["value"]
        user_id = body["member"]["user"]["id"]

        r = requests.get(f"{API_URL}{ra}", timeout=2)

        if r.status_code != 200:
            return interaction("❌ Erro ao validar o RA.")

        dados = r.json()

        if dados.get("active") and dados.get("confirmed"):
            add_role(user_id)
            return interaction("✅ RA verificado com sucesso!")
        else:
            return interaction("❌ RA não está ativo ou confirmado.")

    return {"statusCode": 400}


def verify_discord_signature(headers, body):
    signature = headers.get("x-signature-ed25519")
    timestamp = headers.get("x-signature-timestamp")

    if not signature or not timestamp:
        raise Exception("Missing signature")

    verify_key = VerifyKey(bytes.fromhex(PUBLIC_KEY))
    verify_key.verify(
        f"{timestamp}{body}".encode(),
        bytes.fromhex(signature)
    )


def add_role(user_id):
    url = f"{DISCORD_API}/guilds/{GUILD_ID}/members/{user_id}/roles/{ROLE_ID}"
    headers = {"Authorization": f"Bot {BOT_TOKEN}"}
    requests.put(url, headers=headers)


def json_response(body):
    return {
        "statusCode": 200,
        "headers": {"Content-Type": "application/json"},
        "body": json.dumps(body)
    }


def interaction(message):
    return json_response({
        "type": 4,
        "data": {
            "content": message,
            "flags": 64
        }
    })