From 0efdb5c35a452f81184fc64d72b9bdd4aede360d Mon Sep 17 00:00:00 2001
From: CyberL1 <cyber.hf18@gmail.com>
Date: Wed, 24 Jun 2026 23:46:23 +0200
Subject: [PATCH] feat: add voting route

---
 assets/openapi.json                           | Bin 976370 -> 978417 bytes
 assets/schemas.json                           | Bin 443372 -> 443786 bytes
 .../#channel_id/polls/#poll_id/answers/@me.ts |  72 ++++++++++++++++++
 src/schemas/api/messages/Polls.ts             |   4 +
 src/util/util/Constants.ts                    |   2 +
 5 files changed, 78 insertions(+)
 create mode 100644 src/api/routes/channels/#channel_id/polls/#poll_id/answers/@me.ts

diff --git a/assets/openapi.json b/assets/openapi.json
index a6ccabe49e51d9b5ba38547fdcfb43ad8839d489..5de9ed291754cd3945adce3600947a7e6af66ec2 100644
GIT binary patch
delta 221
zcmex#+WO;d>kUp?(+@Z>vv7wNrxrQp6_=+L6;Dt6!kj$ae<vI3bZ1LurRfJ=Ge%5b
zP{CXe5xeNiW-|Rw6bnbQmsY!%79$Wd0WmWWvj8zG5VHX>I}mdKF((jn0WtS>FD;&=
zU!wUrImP<b1wbl3Go@BP5p3u508K85>H7Y>*QN_pbG+ma07@gfXyP%Bxzi75a-Q2h
nfrn3sary)!ZcApM8Pgs2@w^5z8vpZdZeOj!yM46^pZh@o3@1@V

delta 72
zcmex(+xpXK>kUp?&9AlFUu!c0F%u9o12GE_vjQ<25VHd@2M}`tF&7YXZ-1@Lll7~8
NwGQw0)jE7`2LZ-bAOQdX

diff --git a/assets/schemas.json b/assets/schemas.json
index c1f47bce30fa69a85bc7bd946b2d2dd3009c1ee0..a6a73abfc082da2e2984230e6cb98894fea10c1b 100644
GIT binary patch
delta 79
zcmaFUF5T5Fz2Sf&Pe6W7PH1szkz-zQ`E+|GX5Z=S*RirqR&wo}d|*o$m@|E1Ept@!
b0mb$Mii|+a1jNih%mT!$+YczR=_~>O{>2{}

delta 38
ncmeC`mVVPNz2SgjbDVN}oH8R2GXXI(5VHU=>-IQhHl0NP5<Co-

diff --git a/src/api/routes/channels/#channel_id/polls/#poll_id/answers/@me.ts b/src/api/routes/channels/#channel_id/polls/#poll_id/answers/@me.ts
new file mode 100644
index 000000000..95660c308
--- /dev/null
+++ b/src/api/routes/channels/#channel_id/polls/#poll_id/answers/@me.ts
@@ -0,0 +1,72 @@
+/*
+  Spacebar: A FOSS re-implementation and extension of the Discord.com backend.
+  Copyright (C) 2026 Spacebar and Spacebar Contributors
+
+  This program is free software: you can redistribute it and/or modify
+  it under the terms of the GNU Affero General Public License as published
+  by the Free Software Foundation, either version 3 of the License, or
+  (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU Affero General Public License for more details.
+
+  You should have received a copy of the GNU Affero General Public License
+  along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+
+import { Request, Response, Router } from "express";
+import { route } from "@spacebar/api/util/handlers/route";
+import { PollAnswerCount, PollUserAnswersSchema } from "@spacebar/schemas";
+import { Message } from "#database";
+import { DiscordApiErrors, ErrorList, FieldError, makeObjectErrorContent } from "#util";
+
+const router: Router = Router({ mergeParams: true });
+
+router.put("/", route({ requestBody: "PollUserAnswersSchema", permission: "VIEW_CHANNEL" }), async (req: Request, res: Response) => {
+    const payload = req.body as PollUserAnswersSchema;
+    const { poll_id } = req.params as { [key: string]: string };
+
+    const message = await Message.findOne({ where: { id: poll_id } });
+
+    if (!message || !message.poll || !message.poll.results) {
+        throw DiscordApiErrors.UNKNOWN_MESSAGE;
+    }
+
+    if (new Date() > new Date(message.poll.expiry)) {
+        throw DiscordApiErrors.POLL_EXPIRED;
+    }
+
+    if (!message.poll.allow_multiselect && payload.answer_ids.length > 1) {
+        const errors: ErrorList = {};
+        errors["answer_ids"] = makeObjectErrorContent("CANNOT_ADD_MULTIPLE_POLL_ANSWERS", "Multiple votes are not allowed for this poll.");
+        throw new FieldError(50035, "Invalid form body", errors);
+    }
+
+    const allAnswerCounts = message.poll.results.answer_counts as unknown as (Omit<PollAnswerCount, "me_voted"> & { voters: string[] })[];
+
+    for (const answer_id of payload.answer_ids) {
+        let answerCount = allAnswerCounts.find((a) => a.id === answer_id);
+
+        if (!answerCount) {
+            allAnswerCounts.push({ id: answer_id, count: 0, voters: [] });
+            answerCount = allAnswerCounts.find((a) => a.id === answer_id)!;
+        }
+
+        if (!answerCount.voters.includes(req.user_id)) {
+            answerCount.voters.push(req.user_id);
+            answerCount.count = answerCount.voters.length;
+        }
+    }
+
+    for (const answerCount of allAnswerCounts.filter((a) => !payload.answer_ids.includes(a.id))) {
+        answerCount.voters = answerCount.voters.filter((voter) => voter != req.user_id);
+        answerCount.count = answerCount.voters.length;
+    }
+
+    await message.save();
+    res.send();
+});
+
+export default router;
diff --git a/src/schemas/api/messages/Polls.ts b/src/schemas/api/messages/Polls.ts
index bd6555613..d4ed3264e 100644
--- a/src/schemas/api/messages/Polls.ts
+++ b/src/schemas/api/messages/Polls.ts
@@ -46,3 +46,7 @@ export interface PollAnswerCount {
     count: number;
     me_voted: boolean;
 }
+
+export interface PollUserAnswersSchema {
+    answer_ids: string[];
+}
diff --git a/src/util/util/Constants.ts b/src/util/util/Constants.ts
index 5bfc1f721..4ffe9d125 100644
--- a/src/util/util/Constants.ts
+++ b/src/util/util/Constants.ts
@@ -659,6 +659,8 @@ export const DiscordApiErrors = {
     STICKER_ANIMATION_DURATION_MAXIMUM: new ApiError("Sticker animation duration exceeds maximum of {} seconds", 170007, undefined, ["5"]),
     AUTOMODERATOR_BLOCK: new ApiError("Message was blocked by automatic moderation", 200000),
     BULK_BAN_FAILED: new ApiError("Failed to ban users", 500000),
+    POLL_VOTING_BLOCKED: new ApiError("Poll voting blocked", 520000),
+    POLL_EXPIRED: new ApiError("Poll expired", 520001),
 
     //Other errors
     UNKNOWN_VOICE_STATE: new ApiError("Unknown Voice State", 10065, 404),