@celestial-community/baileys 0.0.1-security → 1.0.0

package/lib/Socket/privacy.js

@@ -0,0 +1,229 @@
+'use strict'
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.makePrivacySocket = void 0
+
+const { executeWMexQuery } = require('./mex')
+
+const PRIVACY_MEX_IDS = {
+    GET_SETTINGS: '32774292262215380',
+    SET_SETTING: '26887749497493184',
+    UPDATE_CONTACT_LIST: '26375158178762800',
+    GET_CONTACT_LIST: '25700444246275824',
+    UPDATE_TEXT_STATUS: '25863197129975892',
+    GET_TEXT_STATUS_LIST: '25741205615468936',
+    UPDATE_USER_STATUS: '7452341274886724',
+    FETCH_USER_PICTURE: '24983561624604410',
+    PROFILE_PICTURE_MUTATION: '24714239711610700',
+    ACCOUNT_LOGIN: '27298465499757130',
+    ACCOUNT_LOGOUT: '26863447609979190',
+    MULTI_ACCOUNT_REVOKE: '25846242091639660',
+    ADD_MULTI_ACCOUNT_LINK: '25502812266025190',
+    ADD_TRUSTED_DEVICE: '24522952587403290',
+    GET_TRUSTED_DEVICES: '25123358920671964',
+    UNTRUST_TRUSTED_DEVICE: '26574930682133620',
+    DELETE_TRUSTED_DEVICE: '33867503889559536',
+    MOBILE_CONFIG_FETCH: '25676911271914596',
+    NOTIFY_PUSH_NAME: '25900490552974544',
+    CONTACT_INTEGRITY: '25924358997169496',
+    BIZ_INTEGRITY: '25975613018777536',
+    LINKED_PROFILES_SET: '25013968611531010',
+    LINKED_PROFILES_REMOVE: '24537675509265524',
+    LINKED_PROFILES_UPDATE: '24876967165297616',
+    MIGRATE_BLOCKLIST_LID: '25028600226770430',
+    QR_CODE_SCAN: '26287165600869744'
+}
+
+const makePrivacySocket = (sock) => {
+    const { query, generateMessageTag } = sock
+    const mexQuery = (variables, queryId, dataPath) =>
+        executeWMexQuery(variables, queryId, dataPath, query, generateMessageTag)
+
+    const getPrivacySettings = (jid, features = null) => {
+        const users = [{ jid, ...(features ? { privacy_features: features } : {}) }]
+        return mexQuery({ users }, PRIVACY_MEX_IDS.GET_SETTINGS, 'xwa2_fetch_wa_users')
+    }
+    const setPrivacySetting = (feature, setting) =>
+        mexQuery({ feature, setting }, PRIVACY_MEX_IDS.SET_SETTING, 'xwa2_privacy_feature_update')
+    const updatePrivacyContactList = (feature, setting, jids) =>
+        mexQuery(
+            { feature, setting, contacts: jids.map((jid) => ({ jid })) },
+            PRIVACY_MEX_IDS.UPDATE_CONTACT_LIST,
+            'xwa2_privacy_contact_list_update'
+        )
+    const getPrivacyContactList = (feature, setting) =>
+        mexQuery(
+            { feature, setting },
+            PRIVACY_MEX_IDS.GET_CONTACT_LIST,
+            'xwa2_privacy_contact_list'
+        )
+    const updateTextStatus = (text, emoji = null) => {
+        const input = { text }
+        if (emoji) input.emoji = { content: emoji }
+        return mexQuery(
+            { text_status_input: input },
+            PRIVACY_MEX_IDS.UPDATE_TEXT_STATUS,
+            'xwa2_text_status_update'
+        )
+    }
+    const getTextStatusList = (jids, lastUpdateTime = null) => {
+        const input = jids.map((jid) => ({ jid, last_update_time: lastUpdateTime }))
+        return mexQuery({ input }, PRIVACY_MEX_IDS.GET_TEXT_STATUS_LIST, 'xwa2_text_status_list')
+    }
+    const updateUserStatus = (status) =>
+        mexQuery({ status }, PRIVACY_MEX_IDS.UPDATE_USER_STATUS, 'xwa2_update_user_status')
+    const fetchUserPictureInfo = (jid) =>
+        mexQuery({ jid }, PRIVACY_MEX_IDS.FETCH_USER_PICTURE, 'xwa2_fetch_user_picture_info')
+    const setProfilePictureMex = (imageBase64, type = 'image') =>
+        mexQuery(
+            { input: { image: imageBase64, type } },
+            PRIVACY_MEX_IDS.PROFILE_PICTURE_MUTATION,
+            'xwa2_profile_picture_mutation'
+        )
+    const accountLogin = (phoneNumber) =>
+        mexQuery(
+            { input: { phone_number: phoneNumber } },
+            PRIVACY_MEX_IDS.ACCOUNT_LOGIN,
+            'xwa2_account_login'
+        )
+    const accountLogout = (phoneNumber, enabledBiometric = false) =>
+        mexQuery(
+            { input: { phone_number: phoneNumber, enabled_biometric: enabledBiometric } },
+            PRIVACY_MEX_IDS.ACCOUNT_LOGOUT,
+            'xwa2_account_logout'
+        )
+    const addMultiAccountLink = (phoneNumber) =>
+        mexQuery(
+            { input: { phone_number: phoneNumber } },
+            PRIVACY_MEX_IDS.ADD_MULTI_ACCOUNT_LINK,
+            'xwa2_add_multi_account_link'
+        )
+    const addTrustedDevice = (deviceId, deviceName) =>
+        mexQuery(
+            { device_id: deviceId, device_name: deviceName },
+            PRIVACY_MEX_IDS.ADD_TRUSTED_DEVICE,
+            'xwa2_add_trusted_device'
+        )
+    const getTrustedDevices = () =>
+        mexQuery({}, PRIVACY_MEX_IDS.GET_TRUSTED_DEVICES, 'xwa2_get_trusted_devices')
+    const untrustTrustedDevice = (deviceId, reason = 'USER_INITIATED') =>
+        mexQuery(
+            { device_id: deviceId, reason },
+            PRIVACY_MEX_IDS.UNTRUST_TRUSTED_DEVICE,
+            'xwa2_untrust_trusted_device'
+        )
+    const deleteTrustedDevice = (deviceId) =>
+        mexQuery(
+            { device_id: deviceId },
+            PRIVACY_MEX_IDS.DELETE_TRUSTED_DEVICE,
+            'xwa2_delete_trusted_device'
+        )
+    const revokeMultiAccount = (accountJid) =>
+        mexQuery(
+            { account_jid: accountJid },
+            PRIVACY_MEX_IDS.MULTI_ACCOUNT_REVOKE,
+            'xwa2_multi_account_revoke'
+        )
+    const fetchMobileConfig = (apiVersion = 0, epRefreshId = 0, flags = '') =>
+        mexQuery(
+            { api_version: apiVersion, ep_refresh_id: epRefreshId, flags },
+            PRIVACY_MEX_IDS.MOBILE_CONFIG_FETCH,
+            'xwa2_mobile_config_fetch'
+        )
+    const notifyPushName = (groupJid, participants) =>
+        mexQuery(
+            {
+                input: {
+                    group_jid: groupJid,
+                    participants: participants.map(({ jid, pushName }) => ({
+                        jid,
+                        push_name: pushName
+                    }))
+                }
+            },
+            PRIVACY_MEX_IDS.NOTIFY_PUSH_NAME,
+            'xwa2_notify_push_name'
+        )
+    const contactIntegrityQuery = (jids, useCase = 'START_CHAT_CONTEXT') =>
+        mexQuery(
+            { users: jids.map((jid) => ({ jid })), use_case: useCase },
+            PRIVACY_MEX_IDS.CONTACT_INTEGRITY,
+            'xwa2_fetch_wa_users'
+        )
+    const bizIntegrityQuery = (jids) =>
+        mexQuery(
+            { users: jids.map((jid) => ({ jid })) },
+            PRIVACY_MEX_IDS.BIZ_INTEGRITY,
+            'xwa2_fetch_wa_users'
+        )
+    const linkedProfilesSet = (profiles) => {
+        const mapped = profiles.map((p) => {
+            const entry = { type: p.type }
+            if (p.vid) entry.vid = p.vid
+            else if (p.username) entry.username = p.username
+            return entry
+        })
+        return mexQuery(
+            { profiles: mapped },
+            PRIVACY_MEX_IDS.LINKED_PROFILES_SET,
+            'xwa2_linked_profiles_set'
+        )
+    }
+    const linkedProfilesRemove = (types) =>
+        mexQuery(
+            { profiles: types.map((type) => ({ type })) },
+            PRIVACY_MEX_IDS.LINKED_PROFILES_REMOVE,
+            'xwa2_linked_profiles_remove'
+        )
+    const linkedProfilesUpdate = (profiles) =>
+        mexQuery(
+            {
+                profiles: profiles.map(({ type, showOnProfile }) => ({
+                    type,
+                    show_on_profile: showOnProfile
+                }))
+            },
+            PRIVACY_MEX_IDS.LINKED_PROFILES_UPDATE,
+            'xwa2_linked_profiles_update'
+        )
+    const migrateBlocklistLid = (jids, dhash = '', dirtyAck = true) =>
+        mexQuery(
+            { input: { blocklist: jids.map((jid) => ({ jid })), dhash, dirty_ack: dirtyAck } },
+            PRIVACY_MEX_IDS.MIGRATE_BLOCKLIST_LID,
+            'xwa2_migrate_blocklist_lid'
+        )
+    const qrCodeScan = (qrData) =>
+        mexQuery({ qr_data: qrData }, PRIVACY_MEX_IDS.QR_CODE_SCAN, 'xwa2_qr_code_scan')
+
+    return {
+        ...sock,
+        getPrivacySettings,
+        setPrivacySetting,
+        updatePrivacyContactList,
+        getPrivacyContactList,
+        updateTextStatus,
+        getTextStatusList,
+        updateUserStatus,
+        fetchUserPictureInfo,
+        setProfilePictureMex,
+        accountLogin,
+        accountLogout,
+        addMultiAccountLink,
+        addTrustedDevice,
+        getTrustedDevices,
+        untrustTrustedDevice,
+        deleteTrustedDevice,
+        revokeMultiAccount,
+        fetchMobileConfig,
+        notifyPushName,
+        contactIntegrityQuery,
+        bizIntegrityQuery,
+        linkedProfilesSet,
+        linkedProfilesRemove,
+        linkedProfilesUpdate,
+        migrateBlocklistLid,
+        qrCodeScan,
+        PRIVACY_MEX_IDS
+    }
+}
+
+module.exports = { makePrivacySocket, PRIVACY_MEX_IDS }

package/lib/Socket/registration.js

@@ -0,0 +1,190 @@
+'use strict'
+var __importDefault =
+    (this && this.__importDefault) ||
+    function (mod) {
+        return mod && mod.__esModule ? mod : { default: mod }
+    }
+Object.defineProperty(exports, '__esModule', { value: true })
+exports.mobileRegisterFetch =
+    exports.mobileRegisterEncrypt =
+    exports.mobileRegister =
+    exports.mobileRegisterExists =
+    exports.mobileRegisterCode =
+    exports.registrationParams =
+    exports.makeRegistrationSocket =
+        void 0
+/* eslint-disable camelcase */
+const axios_1 = __importDefault(require('axios'))
+const Defaults_1 = require('../Defaults')
+const crypto_1 = require('../Utils/crypto')
+const WABinary_1 = require('../WABinary')
+const business_1 = require('./business')
+const community_1 = require('./community')
+const username_1 = require('./username')
+function urlencode(str) {
+    return str.replace(/-/g, '%2d').replace(/_/g, '%5f').replace(/~/g, '%7e')
+}
+const validRegistrationOptions = (config) =>
+    (config === null || config === void 0 ? void 0 : config.phoneNumberCountryCode) &&
+    config.phoneNumberNationalNumber &&
+    config.phoneNumberMobileCountryCode
+const makeRegistrationSocket = (config) => {
+    const sock = (0, username_1.makeUsernameSocket)(config)
+    const register = async (code) => {
+        if (!validRegistrationOptions(config.auth.creds.registration)) {
+            throw new Error('please specify the registration options')
+        }
+        const result = await mobileRegister(
+            { ...sock.authState.creds, ...sock.authState.creds.registration, code },
+            config.options
+        )
+        sock.authState.creds.me = {
+            id: (0, WABinary_1.jidEncode)(result.login, 's.whatsapp.net'),
+            name: '~'
+        }
+        sock.authState.creds.registered = true
+        sock.ev.emit('creds.update', sock.authState.creds)
+        return result
+    }
+    const requestRegistrationCode = async (registrationOptions) => {
+        registrationOptions = registrationOptions || config.auth.creds.registration
+        if (!validRegistrationOptions(registrationOptions)) {
+            throw new Error('Invalid registration options')
+        }
+        sock.authState.creds.registration = registrationOptions
+        sock.ev.emit('creds.update', sock.authState.creds)
+        return mobileRegisterCode({ ...config.auth.creds, ...registrationOptions }, config.options)
+    }
+    return {
+        ...sock,
+        register,
+        requestRegistrationCode
+    }
+}
+exports.makeRegistrationSocket = makeRegistrationSocket
+function convertBufferToUrlHex(buffer) {
+    var id = ''
+    buffer.forEach((x) => {
+        // encode random identity_id buffer as percentage url encoding
+        id += `%${x.toString(16).padStart(2, '0').toLowerCase()}`
+    })
+    return id
+}
+function registrationParams(params) {
+    const e_regid = Buffer.alloc(4)
+    e_regid.writeInt32BE(params.registrationId)
+    const e_skey_id = Buffer.alloc(3)
+    e_skey_id.writeInt16BE(params.signedPreKey.keyId)
+    params.phoneNumberCountryCode = params.phoneNumberCountryCode.replace('+', '').trim()
+    params.phoneNumberNationalNumber = params.phoneNumberNationalNumber
+        .replace(/[/-\s)(]/g, '')
+        .trim()
+    return {
+        cc: params.phoneNumberCountryCode,
+        in: params.phoneNumberNationalNumber,
+        Rc: '0',
+        lg: 'en',
+        lc: 'GB',
+        mistyped: '6',
+        authkey: Buffer.from(params.noiseKey.public).toString('base64url'),
+        e_regid: e_regid.toString('base64url'),
+        e_keytype: 'BQ',
+        e_ident: Buffer.from(params.signedIdentityKey.public).toString('base64url'),
+        // e_skey_id: e_skey_id.toString('base64url'),
+        e_skey_id: 'AAAA',
+        e_skey_val: Buffer.from(params.signedPreKey.keyPair.public).toString('base64url'),
+        e_skey_sig: Buffer.from(params.signedPreKey.signature).toString('base64url'),
+        fdid: params.phoneId,
+        network_ratio_type: '1',
+        expid: params.deviceId,
+        simnum: '1',
+        hasinrc: '1',
+        pid: Math.floor(Math.random() * 1000).toString(),
+        id: convertBufferToUrlHex(params.identityId),
+        backup_token: convertBufferToUrlHex(params.backupToken),
+        token: (0, crypto_1.md5)(
+            Buffer.concat([Defaults_1.MOBILE_TOKEN, Buffer.from(params.phoneNumberNationalNumber)])
+        ).toString('hex'),
+        fraud_checkpoint_code: params.captcha
+    }
+}
+exports.registrationParams = registrationParams
+/**
+ * Requests a registration code for the given phone number.
+ */
+function mobileRegisterCode(params, fetchOptions) {
+    return mobileRegisterFetch('/code', {
+        params: {
+            ...registrationParams(params),
+            mcc: `${params.phoneNumberMobileCountryCode}`.padStart(3, '0'),
+            mnc: `${params.phoneNumberMobileNetworkCode || '001'}`.padStart(3, '0'),
+            sim_mcc: '000',
+            sim_mnc: '000',
+            method: (params === null || params === void 0 ? void 0 : params.method) || 'sms',
+            reason: '',
+            hasav: '1'
+        },
+        ...fetchOptions
+    })
+}
+exports.mobileRegisterCode = mobileRegisterCode
+function mobileRegisterExists(params, fetchOptions) {
+    return mobileRegisterFetch('/exist', {
+        params: registrationParams(params),
+        ...fetchOptions
+    })
+}
+exports.mobileRegisterExists = mobileRegisterExists
+/**
+ * Registers the phone number on whatsapp with the received OTP code.
+ */
+async function mobileRegister(params, fetchOptions) {
+    //const result = await mobileRegisterFetch(`/reg_onboard_abprop?cc=${params.phoneNumberCountryCode}&in=${params.phoneNumberNationalNumber}&rc=0`)
+    return mobileRegisterFetch('/register', {
+        params: { ...registrationParams(params), code: params.code.replace('-', '') },
+        ...fetchOptions
+    })
+}
+exports.mobileRegister = mobileRegister
+/**
+ * Encrypts the given string as AEAD aes-256-gcm with the public whatsapp key and a random keypair.
+ */
+function mobileRegisterEncrypt(data) {
+    const keypair = crypto_1.Curve.generateKeyPair()
+    const key = crypto_1.Curve.sharedKey(keypair.private, Defaults_1.REGISTRATION_PUBLIC_KEY)
+    const buffer = (0, crypto_1.aesEncryptGCM)(
+        Buffer.from(data),
+        new Uint8Array(key),
+        Buffer.alloc(12),
+        Buffer.alloc(0)
+    )
+    return Buffer.concat([Buffer.from(keypair.public), buffer]).toString('base64url')
+}
+exports.mobileRegisterEncrypt = mobileRegisterEncrypt
+async function mobileRegisterFetch(path, opts = {}) {
+    let url = `${Defaults_1.MOBILE_REGISTRATION_ENDPOINT}${path}`
+    if (opts.params) {
+        const parameter = []
+        for (const param in opts.params) {
+            if (opts.params[param] !== null && opts.params[param] !== undefined) {
+                parameter.push(param + '=' + urlencode(opts.params[param]))
+            }
+        }
+        url += `?${parameter.join('&')}`
+        delete opts.params
+    }
+    if (!opts.headers) {
+        opts.headers = {}
+    }
+    opts.headers['User-Agent'] = Defaults_1.MOBILE_USERAGENT
+    const response = await (0, axios_1.default)(url, opts)
+    var json = response.data
+    if (response.status > 300 || json.reason) {
+        throw json
+    }
+    if (json.status && !['ok', 'sent'].includes(json.status)) {
+        throw json
+    }
+    return json
+}
+exports.mobileRegisterFetch = mobileRegisterFetch