messenger-bot 0.1.7 → 0.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2dae409cac62b02db760b3c3b2161e265c1f2317
-  data.tar.gz: 82cf4b2c1eab2d920f28e28688f05530fdf320e2
+  metadata.gz: 7c68cee7d69c9b8cbcc6c1ada67602ba1908f29c
+  data.tar.gz: ba9fdeaba6c1a33a2a37b841e87c230d5fb72abb
 SHA512:
-  metadata.gz: 101c19b84ef3defe666a130bccc4a1740c97c9c2e3fc35fd326aadff8b6fba1db4eb3e4fe009e5abdb9a8d7ea89c2bc675f4f86be6929dad7d0d8bce07196222
-  data.tar.gz: f9a9850ba37409f32197b63447065fb03bbebb455b2099ff88d15d4cb3f3079dde04e295a33522133d20a49fda41197ea675bcb4252299392da47eef28887378
+  metadata.gz: a6301bdc17ada3b7bb41541a9b4e5566092d6da3f59513b5feb5b6ace375a54e25ee56db145e9b6e5de5001f68d0a67a1366b6d2ec63409246268cfa70543564
+  data.tar.gz: 97c9f5cff2496a5a41c0b1afd7972f0f51e67efe976c6f23fb12b3d0321ad080a951ea52a23aedbc79d259ef87448f30834bd0faced6b6975b728ddd4b776311

data/README.md

@@ -10,42 +10,49 @@ Requires Rails >= 4
 
 Bundler in your Gemfile.
 
-    gem 'messenger-bot'
+```ruby
+gem 'messenger-bot'
+```
 
 ##Quickstart
 
-    #config/initializers/messenger_bot.rb
-    
-    Messenger::Bot.config do |config|
-      config.access_token = <ACCESS_TOKEN>
-      config.validation_token = <VERIFY_TOKEN>
-    end
-    
-    #config/routes.rb
-    
-    mount Messenger::Bot::Space => "/webhook"
-    
+```ruby
+#config/initializers/messenger_bot.rb
+
+Messenger::Bot.config do |config|
+  config.access_token = <ACCESS_TOKEN>
+  config.validation_token = <VERIFY_TOKEN>
+  config.secret_token = <SECRET_TOKEN>
+end
+
+#config/routes.rb
+
+mount Messenger::Bot::Space => "/webhook"
+```
     
+   
 ##Example
 
 [Example](https://github.com/jun85664396/messenger-bot-rails/blob/master/example/messenger_bot_controller.rb)
 
-    # app/controllers/messenger_bot_controller.rb
-    
-      class MessengerBotController < ActionController::Base
-        def message(event, sender)
-          # profile = sender.get_profile
-          sender.reply({ text: "Reply: #{event['message']['text']}" })
-        end
-      
-        def delivery(event, sender)
-          #BlahBlah
-        end
-      
-        def postback(event, sender)
-          #BlahBlah
-        end
-      end
+```ruby
+# app/controllers/messenger_bot_controller.rb
+
+class MessengerBotController < ActionController::Base
+  def message(event, sender)
+    # profile = sender.get_profile
+    sender.reply({ text: "Reply: #{event['message']['text']}" })
+  end
+  
+  def delivery(event, sender)
+    #BlahBlah
+  end
+  
+  def postback(event, sender)
+    #BlahBlah
+  end
+end
+```
 
 ##Usage
 

data/lib/messenger/bot/config.rb

@@ -4,6 +4,8 @@ module Messenger
       class << self
         attr_accessor :access_token
 
+        attr_accessor :secret_token
+
         attr_accessor :validation_token
       end
     end

data/lib/messenger/bot/station.rb

@@ -1,6 +1,8 @@
 module Messenger
   module Bot
     class Space::StationController < ::MessengerBotController
+      before_action :authenticate, only: [:receive]
+
       def validation
         if params["hub.verify_token"] === Messenger::Bot::Config.validation_token
           return render json: params["hub.challenge"]
@@ -23,6 +25,12 @@ module Messenger
         end 
         render body: "ok"
       end
+
+      def authenticate
+        return true if Messenger::Bot::Config.secret_token.nil?
+        signature = "sha1=" + OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha1'), Messenger::Bot::Config.secret_token, request.body.read)
+        return render(body: "Error, Signatures didn't match", status: 500) unless Rack::Utils.secure_compare(signature, request.env['HTTP_X_HUB_SIGNATURE'])
+      end
     end
   end
 end

data/lib/messenger/bot/version.rb

@@ -1,5 +1,5 @@
 module Messenger
   module Bot
-    VERSION = "0.1.7"
+    VERSION = "0.1.8"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: messenger-bot
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.8
 platform: ruby
 authors:
 - JunSangPil
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-04-19 00:00:00.000000000 Z
+date: 2016-04-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler