v3/packages/api/src/routes/auth/bot.ts

import { Context } from '@roleypoly/api/src/utils/context';
import { seeOther } from '@roleypoly/api/src/utils/response';

const validGuildID = /^[0-9]+$/;

type URLParams = {
  clientID: string;
  permissions: number;
  guildID?: string;
  scopes: string[];
};

const buildURL = (params: URLParams) => {
  let url = `https://discord.com/api/oauth2/authorize?client_id=${
    params.clientID
  }&scope=${params.scopes.join('%20')}&permissions=${params.permissions}`;

  if (params.guildID) {
    url += `&guild_id=${params.guildID}&disable_guild_select=true`;
  }

  return url;
};

export const authBot = (request: Request, { config }: Context): Response => {
  let guildID = new URL(request.url).searchParams.get('guild') || '';

  if (guildID && !validGuildID.test(guildID)) {
    guildID = '';
  }

  return seeOther(
    buildURL({
      clientID: config.botClientID,
      permissions: 268435456, // Send messages + manage roles
      guildID,
      scopes: ['bot', 'applications.commands'],
    })
  );
};