From 357b23d27600ba7a943db9d502f1a417605f0e1a Mon Sep 17 00:00:00 2001
From: eva <xyzeva@riseup.net>
Date: Fri, 13 Feb 2026 02:02:54 +0000
Subject: [PATCH] fix: we're so back (again) (again) (again)

instructions on how to use this has changed a bit, please re-read!
---
 package.json                            |   3 +
 pnpm-lock.yaml                          |   9 ++
 src/lib/components/QRCodeScanner.svelte | 107 ++++++++++++++++++++++++
 src/routes/+page.svelte                 |  86 +++++--------------
 4 files changed, 141 insertions(+), 64 deletions(-)
 create mode 100644 src/lib/components/QRCodeScanner.svelte

diff --git a/package.json b/package.json
index 1bd3120..40ea906 100644
--- a/package.json
+++ b/package.json
@@ -36,5 +36,8 @@
 		"typescript-eslint": "^8.54.0",
 		"vite": "^7.3.1",
 		"wrangler": "^4.63.0"
+	},
+	"dependencies": {
+		"jsqr": "^1.4.0"
 	}
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a4afa98..d717971 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,6 +7,10 @@ settings:
 importers:
 
   .:
+    dependencies:
+      jsqr:
+        specifier: ^1.4.0
+        version: 1.4.0
     devDependencies:
       '@eslint/compat':
         specifier: ^2.0.2
@@ -1150,6 +1154,9 @@ packages:
   json-stable-stringify-without-jsonify@1.0.1:
     resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
 
+  jsqr@1.4.0:
+    resolution: {integrity: sha512-dxLob7q65Xg2DvstYkRpkYtmKm2sPJ9oFhrhmudT1dZvNFFTlroai3AWSpLey/w5vMcLBXRgOJsbXpdN9HzU/A==}
+
   keyv@4.5.4:
     resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
 
@@ -2578,6 +2585,8 @@ snapshots:
 
   json-stable-stringify-without-jsonify@1.0.1: {}
 
+  jsqr@1.4.0: {}
+
   keyv@4.5.4:
     dependencies:
       json-buffer: 3.0.1
diff --git a/src/lib/components/QRCodeScanner.svelte b/src/lib/components/QRCodeScanner.svelte
new file mode 100644
index 0000000..bb62b97
--- /dev/null
+++ b/src/lib/components/QRCodeScanner.svelte
@@ -0,0 +1,107 @@
+<script lang="ts">
+	import jsQR from 'jsqr';
+
+	let qrCodeUrl = $state<string | null>(null);
+	let qrCodeError = $state<string | null>(null);
+	let qrCodeSuccess = $state(false);
+
+	let dragOver = $state(false);
+
+	async function decodeImage(file: File) {
+		qrCodeError = null;
+		try {
+			const bitmap = await createImageBitmap(file);
+			const canvas = new OffscreenCanvas(bitmap.width, bitmap.height);
+			const ctx = canvas.getContext('2d')!;
+			ctx.drawImage(bitmap, 0, 0);
+			const imageData = ctx.getImageData(0, 0, bitmap.width, bitmap.height);
+			const result = jsQR(imageData.data, imageData.width, imageData.height);
+			if (result) {
+				qrCodeUrl = result.data;
+			} else {
+				qrCodeError = 'no qr code found in image';
+			}
+		} catch {
+			qrCodeError = 'could not read image';
+		}
+	}
+</script>
+
+<div class="mt-4 flex gap-2">
+	<input
+		class="min-w-0 flex-1 border-2 border-white/50 p-2 {dragOver ? 'border-dashed' : ''}"
+		bind:value={qrCodeUrl}
+		placeholder="https://... (or drop a qr code image)"
+		ondrop={(e) => {
+			e.preventDefault();
+			dragOver = false;
+			const file = e.dataTransfer?.files[0];
+			if (file) decodeImage(file);
+		}}
+		ondragover={(e) => {
+			e.preventDefault();
+			dragOver = true;
+		}}
+		ondragleave={() => {
+			dragOver = false;
+		}}
+	/>
+	<label class="w-16 border-2 border-white/50 p-2 text-center hover:cursor-pointer">
+		scan
+		<input
+			type="file"
+			accept="image/*"
+			class="hidden"
+			onchange={(e) => {
+				const file = e.currentTarget.files?.[0];
+				if (file) decodeImage(file);
+				e.currentTarget.value = '';
+			}}
+		/>
+	</label>
+	<button
+		class="w-24 border-2 border-white/50 p-2 hover:cursor-pointer"
+		onclick={(e) => {
+			e.preventDefault();
+			qrCodeError = null;
+			qrCodeSuccess = false;
+
+			if (!qrCodeUrl) {
+				qrCodeError = "you didn't enter a qr code url";
+				return;
+			}
+
+			fetch('/api/verify', {
+				method: 'POST',
+				headers: {
+					'Content-Type': 'application/json'
+				},
+				body: JSON.stringify({
+					type: 'qr_link',
+					identifier: qrCodeUrl
+				})
+			})
+				.then(async (r) => {
+					if (!r.ok) {
+						qrCodeError = await r.text().catch(() => 'unexpected error');
+						return;
+					}
+
+					qrCodeSuccess = true;
+				})
+				.catch((e) => {
+					console.error('error sending verify request', e);
+					qrCodeError = 'unexpected error, please check your browser console.';
+				});
+		}}>verify</button
+	>
+</div>
+{#if qrCodeSuccess}
+	<p class="mt-4 text-green-500">
+		your account has successfully been verified. go back to the site tab to continue
+	</p>
+{:else if qrCodeError}
+	<p class="mt-4 text-red-500">
+		{qrCodeError}
+	</p>
+{/if}
diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
index 075d0fd..7e838ce 100644
--- a/src/routes/+page.svelte
+++ b/src/routes/+page.svelte
@@ -1,9 +1,7 @@
 <script lang="ts">
-	let qrCodeUrl = $state<string | null>(null);
-	let qrCodeError = $state<string | null>(null);
-	let qrCodeSuccess = $state(false);
+	import QRCodeScanner from '$lib/components/QRCodeScanner.svelte';
 
-	const IS_PATCHED = true;
+	const IS_PATCHED = false;
 </script>
 
 <div class="mx-auto w-screen max-w-6xl items-center p-5 pb-16">
@@ -21,6 +19,17 @@
 
 	{#if !IS_PATCHED}
 		<h2 class="mt-8 text-2xl font-bold">how to verify on discord</h2>
+		<div class="mt-4 flex flex-col bg-red-500/50 p-5">
+			<h1 class="text-2xl font-extrabold">important: please re-read</h1>
+			<p>
+				we recently had to remove the fully automatic k-id verification for discord because of fixes
+				by k-id.
+				<br />
+				<br />
+				please re-read the discord section, as you will now have to scan a qr code it gives you. (the
+				qr code scanner is below the code snippet)
+			</p>
+		</div>
 		<p class="mt-4 text-left">
 			it <span class="font-bold">doesn't matter</span> if you are in the UK or similar region that
 			currently has access to this, this will verify your account for the future global rollout in
@@ -72,83 +81,32 @@ const api = findObjectFromKey(
   "patch",
 );
 
-// send a api request to discord /age-verification/verify and then redirect the page to our website
+// send a api request to discord /age-verification/verify and then redirect the page to k-id's website
 const request = await api.post(&lcub;
   url: "/age-verification/verify",
   body: &lcub; method: 3 &rcub;,
 &rcub;);
 const verificationUrl = request.body.verification_webview_url;
-window.location.href = `https://age-verifier.kibty.town/webview?url=$&lcub;encodeURIComponent(verificationUrl)&rcub;`;</pre>
+window.location.href = verificationUrl;</pre>
 		<p class="text-center text-white/50">
 			(feel free to read the code, we made it readable and we have nothing to hide)
 		</p>
 		<p class="mt-4 text-left">
-			it should navigate to a link <span class="text-white/70"
-				>(or give you a link to navigate to)</span
-			>, from there, you can just wait until the page says success
+			it should navigate to a k-id, verification page, from there hit the face scan option and
+			upload/scan/type the qr code it gives you below and press <span class="font-extrabold"
+				>verify</span
+			>
 		</p>
-		<p class="mt-2 text-left">congrats! your discord account is now age verified.</p>
+		<QRCodeScanner />
 
 		<h2 class="mt-4 text-2xl font-bold">
 			how to verify on other platforms (twitch, kick, snapchat, ...others)
 		</h2>
 		<p>
 			navigate to the age verification page and choose selfie, from there, get the url of the qr
-			code and put it in this input box, and press verify
+			code and put it in this input box, and press <span class="font-extrabold">verify</span>
 		</p>
-
-		<div class="mt-4 flex gap-4">
-			<input
-				class="w-full border-2 border-white/50 p-2"
-				bind:value={qrCodeUrl}
-				placeholder="https://..."
-			/>
-			<button
-				class="w-24 border-2 border-white/50 p-2 hover:cursor-pointer"
-				onclick={(e) => {
-					e.preventDefault();
-					qrCodeError = null;
-					qrCodeSuccess = false;
-
-					if (!qrCodeUrl) {
-						qrCodeError = "you didn't enter a qr code url";
-						return;
-					}
-
-					fetch('/api/verify', {
-						method: 'POST',
-						headers: {
-							'Content-Type': 'application/json'
-						},
-						body: JSON.stringify({
-							type: 'qr_link',
-							identifier: qrCodeUrl
-						})
-					})
-						.then(async (r) => {
-							if (!r.ok) {
-								qrCodeError = await r.text().catch(() => 'unexpected error');
-								return;
-							}
-
-							qrCodeSuccess = true;
-						})
-						.catch((e) => {
-							console.error('error sending verify request', e);
-							qrCodeError = 'unexpected error, please check your browser console.';
-						});
-				}}>verify</button
-			>
-		</div>
-		{#if qrCodeSuccess}
-			<p class="mt-4 text-green-500">
-				your account has successfully been verified. go back to the site tab to continue
-			</p>
-		{:else if qrCodeError}
-			<p class="mt-4 text-red-500">
-				{qrCodeError}
-			</p>
-		{/if}
+		<QRCodeScanner />
 	{:else}
 		<p class="mt-8 text-red-500">
 			the age verifier is currently patched, we are working on a fix and will update this page when