注册测试命令并处理签名回调

cat > request-body.json <<'JSON'
{
  "name": "ping",
  "description": "检查接口服务是否正常",
  "type": 1
}
JSON

# 执行后核对返回 JSON 的业务状态；HTTP 200 仍可能包含业务错误。
curl --silent --show-error --fail-with-body \
  --request POST \
  --url "https://discord.com/api/v10/applications/${DISCORD_APPLICATION_ID}/guilds/${DISCORD_GUILD_ID}/commands" \
  --header "Authorization: Bot ${DISCORD_BOT_TOKEN}" \
  --header "Content-Type: application/json" \
  --data-binary @request-body.json

import json
import os
import re
import urllib.request
import urllib.error

def expand(value):
    return re.sub(r"\$\{([A-Z][A-Z0-9_]*)\}",
                  lambda match: os.environ[match.group(1)], value)

url = expand("https://discord.com/api/v10/applications/${DISCORD_APPLICATION_ID}/guilds/${DISCORD_GUILD_ID}/commands")
headers = {
    "Authorization": expand("Bot ${DISCORD_BOT_TOKEN}"),
    "Content-Type": expand("application/json"),
}
body = {
    "name": "ping",
    "description": "检查接口服务是否正常",
    "type": 1,
}
data = json.dumps(body, ensure_ascii=False).encode("utf-8")
request = urllib.request.Request(url, data=data, headers=headers, method="POST")
try:
    with urllib.request.urlopen(request, timeout=30) as response:
        result = json.load(response)
except urllib.error.HTTPError as error:
    print(f"HTTP {error.code}: {error.read().decode('utf-8', errors='replace')}")
    raise SystemExit(1)
print(json.dumps(result, ensure_ascii=False, indent=2))

// Node.js 22+，保存为 request.mjs 后运行 node request.mjs
function expand(value) {
  return value.replace(/\$\{([A-Z][A-Z0-9_]*)\}/g, (_, name) => {
    if (!process.env[name]) throw new Error(`缺少环境变量 ${name}`);
    return process.env[name];
  });
}

const url = expand("https://discord.com/api/v10/applications/${DISCORD_APPLICATION_ID}/guilds/${DISCORD_GUILD_ID}/commands");
const headers = Object.fromEntries(
  Object.entries({
  "Authorization": "Bot ${DISCORD_BOT_TOKEN}",
  "Content-Type": "application/json"
}).map(([key, value]) => [key, expand(value)])
);
const body = {
  "name": "ping",
  "description": "检查接口服务是否正常",
  "type": 1
};
const response = await fetch(url, {
  method: "POST",
  headers,
  body: JSON.stringify(body),
  signal: AbortSignal.timeout(30000),
});
const text = await response.text();
if (!response.ok) throw new Error(`HTTP ${response.status}: ${text}`);
const result = JSON.parse(text);
console.log(JSON.stringify(result, null, 2));

// 保存为 interactions.mjs，Node.js 22 直接运行；由 HTTPS 反向代理转发到本机 3000。
import http from "node:http";
import { createPublicKey, verify } from "node:crypto";
const hex = process.env.DISCORD_PUBLIC_KEY;
if (!/^[0-9a-f]{64}$/i.test(hex ?? "")) throw new Error("DISCORD_PUBLIC_KEY 必须是后台的 64 位十六进制公钥");
const key = createPublicKey({ key: Buffer.from("302a300506032b6570032100" + hex, "hex"), format: "der", type: "spki" });
http.createServer(async (req, res) => {
  const reply = (status, body) => { res.writeHead(status, { "Content-Type": "application/json" }); res.end(JSON.stringify(body)); };
  if (req.method !== "POST" || req.url !== "/interactions") return reply(404, { error: "not_found" });
  try {
    const chunks = []; let size = 0;
    for await (const chunk of req) { size += chunk.length; if (size > 1048576) return reply(413, { error: "too_large" }); chunks.push(chunk); }
    const raw = Buffer.concat(chunks);
    const sig = req.headers["x-signature-ed25519"];
    const ts = req.headers["x-signature-timestamp"];
    if (typeof sig !== "string" || !/^[0-9a-f]{128}$/i.test(sig) || typeof ts !== "string" || !/^\d+$/.test(ts)) return reply(401, { error: "invalid_signature" });
    const signed = Buffer.concat([Buffer.from(ts), raw]);
    if (!verify(null, signed, key, Buffer.from(sig, "hex"))) return reply(401, { error: "invalid_signature" });
    // 独立的新鲜度窗口，降低重放风险。服务器需校准时钟。
    if (Math.abs(Date.now() / 1000 - Number(ts)) > 300) return reply(401, { error: "stale_request" });
    const event = JSON.parse(raw.toString("utf8"));
    if (event.type === 1) return reply(200, { type: 1 });
    if (event.type === 2 && event.data?.name === "ping") return reply(200, { type: 4, data: { content: "Pong，接口服务正常。", flags: 64, allowed_mentions: { parse: [] } } });
    return reply(400, { error: "unsupported_interaction" });
  } catch { return reply(400, { error: "invalid_request" }); }
}).listen(3000, "127.0.0.1", () => console.log("Interactions listening on 127.0.0.1:3000"));