Files
t5de-hub/apps/web/app/account/actions.ts
T
dhkatzandClaude Opus 5.5 c75a4c9afc
Pull request / title (pull_request) Successful in 1s
CI / test (pull_request) Successful in 58s
CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped
CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped
feat: age verification with an ID document (Didit), and closed registration
Age: a Didit provider behind the vendor-neutral age interface. A person
verifies once (ID document, passive liveness, face match) and all their
linked IMVU accounts count as adult. Webhooks are checked against Didit's
signatures; only "over 18" is kept. A later answer replaces an earlier one
(an approval taken back is revoked). Checks are limited: one unfinished
check per person, 3 in 30 days, none once verified, and a monthly cap
(DIDIT_MONTHLY_LIMIT, default 30: Didit's free plan is $10 of credit a
month and a check costs $0.30). The Account page gets an Age Verification
card.

Registration: open or closed, an admin's setting in the console
(default from REGISTRATION). Closed: new accounts can only sign in until
a moderator approves them (or declines, deleting the account); the
website shows them a waiting page and the API treats them as signed out.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-03 04:15:47 -08:00

74 lines
2.5 KiB
TypeScript

"use server";
import { revalidatePath } from "next/cache";
import { redirect } from "next/navigation";
import { api, unwrap } from "@/lib/api";
import { attempt, field, type ActionState } from "@/lib/actions";
const done = () => revalidatePath("/account");
/** Starts linking an IMVU account: the API makes a code to put in its tagline. */
export async function linkAccount(_: ActionState, form: FormData): Promise<ActionState> {
return attempt(async () => {
unwrap(await api.account.links.post({ username: field(form, "username") }));
done();
});
}
/** A pending link: check the tagline for the code, or cancel. */
export async function challengeAction(_: ActionState, form: FormData): Promise<ActionState> {
const imvu = field(form, "imvu");
return attempt(async () => {
if (field(form, "intent") === "cancel") {
unwrap(await api.account.challenges({ imvu }).delete());
} else {
unwrap(await api.account.links({ imvu }).check.post());
}
done();
});
}
/** A linked account: check its age status with IMVU again, or unlink it. */
export async function linkAction(_: ActionState, form: FormData): Promise<ActionState> {
const imvu = field(form, "imvu");
return attempt(async () => {
if (field(form, "intent") === "unlink") {
unwrap(await api.account.links({ imvu }).delete());
done();
return;
}
unwrap(await api.account.links({ imvu }).recheck.post());
done();
return "Checked with IMVU just now.";
});
}
export async function saveSettings(
imvu: number,
settings: { showBadge?: boolean; showPresence?: boolean; listRooms?: boolean },
): Promise<ActionState> {
return attempt(async () => {
unwrap(await api.account.links({ imvu }).patch(settings));
done();
});
}
export async function signOutComputers(_: ActionState, _form: FormData): Promise<ActionState> {
return attempt(async () => {
unwrap(await api.account["signout-computers"].post());
done();
return "Signed out everywhere.";
});
}
/** Starts an age check with a provider that checks the person, and sends them to its page. */
export async function startAgeCheck(_: ActionState, form: FormData): Promise<ActionState> {
let url: string | undefined;
const state = await attempt(async () => {
const started = unwrap(await api.age({ provider: field(form, "provider") }).start.post({ returnURL: "/account?age=back" }));
if (started.kind === "redirect") url = started.url;
done();
});
if (url) redirect(url);
return state;
}