micahlt/sv2

🔓 A next-generation alternative to ScratchVerifier

sv²

A next-generation alternative to ScratchVerifier. A public server is available at https://sv2-server.herokuapp.com/

API Reference

GET /api

This requests the status of the server.

Good response:

200 OK

Bad response:

500 Server Error

POST /api/verify

This requests a user's profile to be checked for the code.

Body:

{
  "user": "scratch_username"
}

Good response:

{
  "code": "3Q8Q8UqObPEQocs3UiVHXy2fp2QqcoQVtlu5seN3nb5BZauFTz"
}

Bad response:

406 Not Acceptable

POST /api/verify

Body:

{
  "user": "scratch_username"
}

Good response:

200 OK

Bad response:

403 Forbidden

sv2's Issues

Kinda broken.

I think this is kinda very flawed.
First, you can do this:

1. Login to site A
2. Site A gets code from site B
3. User posts code
4. Site A now has control over the account on site B

Use Scratch API to Fetch Comments

This uses an HTML scraper, which is a very bad idea, because then, if the site changes, then you have to read it, and it is generally just harder to maintain. I recommend that you use the Scratch API, so that way you can fetch the verification code from the comments in a more stable way.