jsnns/delete-all-messages.js

## delete-all-messages.js
/*
 * Discord: Don't copy stuff into this box
 * Me: dOn'T COpy sTuFf iNtO tHIs bOx
 */
clearMessages = function (guild_id, author_id, authToken, deleted = new Set()) {
    const searchURL = `https://discordapp.com/api/v6/guilds/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true`
    const headers = { Authorization: authToken }
    let clock = 0
    interval = 500
    function delay(duration) {
        return new Promise((resolve, reject) => {
            setTimeout(resolve, duration)
        })
    }
    function loadMessages() {
        return fetch(searchURL, { headers })
    }
    function tryDeleteMessage(message) {
        // RAce coNDItiOn
        if (message.author.id == author_id && !deleted.has(message.id)) { // skip already deleted messages
            console.log(`Deleting message ${message.id} from ${message.author.username} (${message.content}...)`)
            return fetch(`https://discordapp.com/api/v6/channels/${message.channel_id}/messages/${message.id}`, { headers, method: 'DELETE' })
        }
    }
    let messagesStore = []

    loadMessages()
        .then(resp => resp.json())
        .then(messages => {
            messages = messages.messages
            if (messages === undefined || messages === null || messages.length == 0) {
                console.log(`Couldn't load messages. Check guild id, author id, and auth token.`)
                return
            }
            messages = messages.filter(m => m) // clean undefined
            messages = [].concat.apply([], messages); // flatten
            messages = messages.filter(m => m) // clean undefined
            if (messages.length === 0) {
                console.log(`Couldn't load messages. Check guild id, author id, and auth token.`)
                return
            }

            //filter by author
            messages = messages.filter(m => m.author.id == author_id)
            // unique by id
            messages = messages.filter((e, i) => messages.findIndex(a => a.id === e.id) === i);

            beforeId = messages[messages.length-1].id
            messagesStore = messagesStore.concat(messages)
            return Promise.all(messagesStore.map(message => {
                return delay(clock += interval)
                    .then(() => tryDeleteMessage(message))
                    .then(resp => {
                        if (resp) {
                            if (resp.status == 429) {
                                interval += 10
                                console.log(`Too fast; bumping interval to ${interval}`)
                            } else if (resp.status === 204) {
                                deleted.add(message.id) // mark deleted
                                return resp.text()
                            }
                        }
                    })
            }))
        })
        .then(function() {
            if (messagesStore.length !== 0) {
                clearMessages(guild_id, author_id, authToken, deleted)
            } else {
                console.log(`We have loaded all messages in this chat.`)
            }
        })
}
var authToken = "____________your_auth_token_here_______________"
if (authToken == "____________your_auth_token_here_______________") {
    // bypass token security measures (?)
    window.alert("Getting token. When confirm window showed up, please click 'Cancel' in Chrome / 'Stay on Page' in Firefox.");
    window.onbeforeunload = function () {
        return false;
    }
    window.location.reload();

    // yoink
    var localToken = document.body.appendChild(document.createElement(`iframe`)).contentWindow.localStorage.token
    if (localToken === undefined) {
        console.log(`Getting the auth token from localStorage isn't supported on your client. Use Firefox or grab it from a network request's headers.`)
        console.log(`To do that go to the Network tab of your inspector and copy the Authorization header of a request. There are detailed instructions in the README.`)
        authToken = ""
    } else {
        authToken = JSON.parse(localToken)
    }
}
if (authToken.length !== 0) {
    clearMessages('____________guild_id_here_______________', '____________author_id_here______________', authToken)
}

## how-to.md

      
    Raw
  

              how-to.md
            
          
    Delete all messages in a Discord channel

This works best in Firefox, I haven't tested it in Chrome. On the desktop client, it may have trouble getting the Auth token from LocalStorage so you need to grab it from a request's headers and replace the parameter "authToken" on the last line with it. There's instructions on how to do that below.
Preqrequisites:

computer
general knowledge of your browser's inspector/developer tools
possibly even a brain

1. Grab guild and author ids

The script uses the internal id values Discord refers to the selected server and user by. The easy way to do this is to enable Developer Mode in your Discord settings, after which you can simply right click the server's icon and your name and click "Copy ID". Otherwise, you can grab the server's id from the URL, and you can get your own id using the network tab of your browser's inspector.
2. Get your authorization token (now automated)

This is now automated thanks to @cntVertex, despite Discord "hiding" the token from localStorage and the DOM.
If it isn't able to automatically grab it then you need to get it from a network request.
Follow these easy steps:

Open the inspector (Ctrl-Shift-I)
Open the Network tab of your inspector
Open any request to Discord's servers
Look for the "Authorization" request header. Copy that into the line var authToken = "____________your_auth_token_here_______________". For example it might look like var authToken = "mfa.a9ushg92ru9gh9ufhsgjuidfhsgiojfhgjishefrgih3er9u3rg_asdfu9ghauisdfhguiahsdguiahsdigua"

3. Get the script

Copy-paste the script into the javascript console, and replace ____________guild_id_here_______________ and ____________author_id_here______________ with the respective ids copied in Step 1. If you're on Chrome or Desktop Client enter your auth token as well (see above).
4. Launch

Strike the Return key on your keyboard...come on, this is not rocket science man.
FAQ


How do I use this to delete DMs?
Replace searchURL with https://discordapp.com/api/v6/channels/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true. For example, replace this line:

const searchURL = `https://discordapp.com/api/v6/guilds/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true`
with
const searchURL = `https://discordapp.com/api/v6/channels/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true`
The guild_id however isn't the ID of the person who you are DMing. It is actually the ID of the channel of the DM which is a subtle but important distinction. I'm not aware of any easy way to grab this other than to just look at the network inspector under the developer tools.

How to only delete messages containing some text "abcd"?

Add &content=whatever into the searchURL. For example, https://discordapp.com/api/v6/channels/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true&content=badword to delete only messages containing "badword".

(By @ivmirx) If you want to delete messages before a specific date, do the following:


Open any server to make the search field visible.
Open the "Network" tab in the inspector and clean it from old requests with the trash can icon.
Click in Discord's search field to show the dropdown, then click the "before" option.
Select the date in the calendar.
In the "Network" tab look for the request that contains ?max_id=....
Click on it and copy the max_id=... part from the URL on the right.
Append it to the script's request in the Line 6 by using &.

So now you should have something like:
https://discordapp.com/api/v6/guilds/${guild_id}/messages/search?author_id=${author_id}&include_nsfw=true&max_id=540727993958400000
(this example is for 2019-02-01).