Game Integration

const hasVerificationSecret = middleware(async ({ ctx, next }) => {
  const secretHeader = ctx.headers["x-verification-secret"];
  const providedSecret = Array.isArray(secretHeader) ? secretHeader[0] : secretHeader;
  
  if (!providedSecret || !isValidVerificationSecret(providedSecret)) {
    throw new TRPCError({
      code: "UNAUTHORIZED",
      message: "Invalid verification secret",
    });
  }
  
  return next();
});

function isValidVerificationSecret(providedSecret: string) {
  const expectedSecret = env.VERIFICATION_SECRET;
  if (providedSecret.length !== expectedSecret.length) return false;
  
  return crypto.timingSafeEqual(
    Buffer.from(providedSecret),
    Buffer.from(expectedSecret),
  );
}

local HttpService = game:GetService("HttpService")
local Players = game:GetService("Players")

-- Configuration (store securely, never expose to client)
local API_URL = "https://your-api-domain.com"  -- Your backend URL
local VERIFICATION_SECRET = "your_verification_secret_64_chars_minimum"  -- From backend .env
local VERIFICATION_ENDPOINT = API_URL .. "/trpc/auth.completeVerification"

-- Function to complete verification
local function completeVerification(player: Player, code: string)
	local success, result = pcall(function()
		local response = HttpService:RequestAsync({
			Url = VERIFICATION_ENDPOINT,
			Method = "POST",
			Headers = {
				["Content-Type"] = "application/json",
				["x-verification-secret"] = VERIFICATION_SECRET,
			},
			Body = HttpService:JSONEncode({
				code = code,
				robloxUserId = tostring(player.UserId),
			}),
		})
		
		return HttpService:JSONDecode(response.Body)
	end)
	
	if success and result and result.ok then
		print("Verification successful for", player.Name)
		return true
	else
		warn("Verification failed for", player.Name, ":", result)
		return false
	end
end

-- Example: Verify on join (if code stored in DataStore)
Players.PlayerAdded:Connect(function(player)
	-- In practice, get code from user via GUI or chat
	local code = getCodeFromPlayer(player)  -- Your implementation
	
	if code then
		completeVerification(player, code)
	end
end)

-- Example: Verify via RemoteEvent from client GUI
local verifyRemote = Instance.new("RemoteEvent")
verifyRemote.Name = "VerifyBloxChat"
verifyRemote.Parent = game:GetService("ReplicatedStorage")

verifyRemote.OnServerEvent:Connect(function(player, code)
	-- Validate code format
	if typeof(code) ~= "string" or #code < 6 or #code > 12 then
		warn("Invalid code format from", player.Name)
		return
	end
	
	local success = completeVerification(player, code)
	
	-- Optionally notify client of result
	verifyRemote:FireClient(player, success)
end)

local ReplicatedStorage = game:GetService("ReplicatedStorage")
local verifyRemote = ReplicatedStorage:WaitForChild("VerifyBloxChat")

local gui = script.Parent
local codeInput = gui:WaitForChild("CodeInput")  -- TextBox
local submitButton = gui:WaitForChild("SubmitButton")  -- TextButton
local statusLabel = gui:WaitForChild("StatusLabel")  -- TextLabel

submitButton.MouseButton1Click:Connect(function()
	local code = codeInput.Text:gsub("%s+", "")  -- Remove whitespace
	
	if #code < 6 then
		statusLabel.Text = "Code must be at least 6 characters"
		return
	end
	
	statusLabel.Text = "Verifying..."
	submitButton.Enabled = false
	
	-- Send to server
	verifyRemote:FireServer(code)
end)

-- Listen for result
verifyRemote.OnClientEvent:Connect(function(success)
	submitButton.Enabled = true
	
	if success then
		statusLabel.Text = "Verification successful! You can close Roblox now."
		statusLabel.TextColor3 = Color3.fromRGB(0, 255, 0)
	else
		statusLabel.Text = "Verification failed. Check your code and try again."
		statusLabel.TextColor3 = Color3.fromRGB(255, 0, 0)
	end
end)

local Players = game:GetService("Players")
local TextChatService = game:GetService("TextChatService")

Players.PlayerAdded:Connect(function(player)
	player.Chatted:Connect(function(message)
		-- Check for /verify command
		local code = message:match("^/verify%s+(%w+)$")
		
		if code then
			local success = completeVerification(player, code)
			
			if success then
				-- Send confirmation message to player
				local function sendMessage(text)
					local textChannel = TextChatService.TextChannels.RBXGeneral
					textChannel:DisplaySystemMessage(text)
				end
				
				sendMessage("BloxChat verification successful! You can close Roblox now.")
			else
				sendMessage("BloxChat verification failed. Check your code.")
			end
		end
	end)
end)