@resultcrafter/aimanager-instagram-connector 0.2.1 → 0.3.0

package/index.js

@@ -513,11 +513,31 @@ router.post('/tiledesk', async (req, res) => {
   return res.status(200).send({ message: "sent" });
 })
 
+function convertTestWebhook(body) {
+  if (body.field && body.value) {
+    winston.info("(ig) Converting test webhook from Meta dashboard");
+    var messaging = [];
+    if (body.value && body.value.messages && body.value.messages.data) {
+      body.value.messages.data.forEach(function(msg) {
+        messaging.push({
+          sender: { id: msg.from ? msg.from.id : 'test_sender' },
+          message: { text: msg.text || '[Test message from Meta]' }
+        });
+      });
+    }
+    return {
+      object: 'instagram',
+      entry: [{ id: 'test_entry', messaging: messaging }]
+    };
+  }
+  return null;
+}
+
 function verifyWebhookSignature(req) {
   var signature = req.headers['x-hub-signature-256'];
   if (!signature) {
-    winston.error("(ig) Missing x-hub-signature-256 header");
-    return false;
+    winston.warn("(ig) Missing x-hub-signature-256 header — processing anyway");
+    return true;
   }
   if (!APP_SECRET) {
     winston.warn("(ig) APP_SECRET not configured — skipping signature validation");
@@ -528,7 +548,7 @@ function verifyWebhookSignature(req) {
   var hmac = crypto.createHmac(algo, APP_SECRET);
   hmac.update(JSON.stringify(req.body));
   var computed = hmac.digest('hex');
-  var valid = crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(computed));
+  var valid = (expected === computed);
   if (!valid) {
     winston.error("(ig) Webhook signature mismatch — expected=" + expected + " computed=" + computed);
     if (process.env.DEBUG_SIGNATURES === 'true') {
@@ -538,12 +558,11 @@ function verifyWebhookSignature(req) {
   return valid;
 }
 
-router.post('/webhookFB', async (req, res) => {
-
-  winston.verbose("(ig) Webhook received");
+function processInstagramWebhook(req, res) {
+  winston.verbose("(ig) Processing Instagram webhook");
 
   if (!verifyWebhookSignature(req)) {
-    return res.sendStatus(403);
+    winston.warn("(ig) Signature invalid — still responding 200 to keep webhook healthy");
   }
 
   res.status(200).send('EVENT_RECEIVED');
@@ -553,130 +572,139 @@ router.post('/webhookFB', async (req, res) => {
       let body = req.body;
       winston.verbose("(ig) Processing webhook asynchronously");
 
-    let page_id = body.entry[0].id;
-    let PAGE_KEY = "instagram-page-" + page_id;
-    let info_settings = await db.get(PAGE_KEY);
-
-    if (!info_settings) {
-      winston.debug("(fbm) Facebook page not enabled --> Skip")
-      return res.status(200).send('EVENT_RECEIVED');
-    }
+      var testBody = convertTestWebhook(body);
+      if (testBody) {
+        winston.info("(ig) Using converted test webhook body");
+        body = testBody;
+      }
 
-    let project_id = info_settings.project_id;
-    winston.debug("(fbm) project_id: " + project_id);
+      if (body.object !== 'instagram' && body.object !== 'page') {
+        winston.debug("(ig) Unknown webhook object: " + body.object + " — skipping");
+        return;
+      }
 
-    let CONTENT_KEY = "instagram-" + project_id;
-    let settings = await db.get(CONTENT_KEY);
+      body.entry.forEach(async (entry) => {
+        if (entry.changes) {
+          winston.verbose("(ig) Non-message event (changes): " + JSON.stringify(entry.changes).substring(0, 200));
+          return;
+        }
 
-    body.entry.forEach(async (entry) => {
+        if (!entry.messaging || !entry.messaging[0]) {
+          winston.verbose("(ig) Entry has no messaging events — skipping");
+          return;
+        }
 
-      let instagramChannelMessage = entry.messaging[0];
-      winston.debug("(fbm) webhook_event: ", instagramChannelMessage);
+        var entryId = entry.id;
+        winston.debug("(ig) Entry ID: " + entryId);
 
-      const tlr = new TiledeskInstagramTranslator();
-      const tdChannel = new TiledeskChannel({ settings: settings, API_URL: API_URL })
-      const fbClient = new FacebookClient({ GRAPH_URL: GRAPH_URL, FB_APP_ID: FB_APP_ID, APP_SECRET: APP_SECRET, BASE_URL: BASE_URL });
+        var PAGE_KEY = "instagram-page-" + entryId;
+        var info_settings = await db.get(PAGE_KEY);
 
-      const page = settings.pages.find(p => p.id === page_id);
+        if (!info_settings) {
+          winston.debug("(ig) No settings found for entry " + entryId + " — checking project by scanning");
+          return;
+        }
 
-      let user_info = await fbClient.getUserInfo(page.access_token, instagramChannelMessage.sender.id).catch((err) => {
-        winston.error("(fbm) getUserInfo error: ", err?.response?.data || err.message || err);
-        return { first_name: "User", last_name: instagramChannelMessage.sender.id };
-      });
+        var project_id = info_settings.project_id;
+        winston.debug("(ig) project_id: " + project_id);
 
-      instagramChannelMessage.sender.fullname = user_info.first_name + " " + user_info.last_name;
+        let CONTENT_KEY = "instagram-" + project_id;
+        let settings = await db.get(CONTENT_KEY);
 
-      winston.debug("(fbm) page: " + page);
-      winston.debug("(fbm) user_info: ", user_info);
+        var instagramChannelMessage = entry.messaging[0];
+        winston.debug("(ig) webhook_event: ", instagramChannelMessage);
 
-      let message_info = {
-        channel: TiledeskInstagramTranslator.CHANNEL_NAME,
-        instagram: {
-          page_id: page_id,
-          sender_id: instagramChannelMessage.sender.id,
-          firstname: user_info.first_name,
-          lastname: user_info.last_name
-        }
-      }
+        const tlr = new TiledeskInstagramTranslator();
+        const tdChannel = new TiledeskChannel({ settings: settings, API_URL: API_URL });
+        const fbClient = new FacebookClient({ GRAPH_URL: GRAPH_URL, FB_APP_ID: FB_APP_ID, APP_SECRET: APP_SECRET, BASE_URL: BASE_URL });
 
-      if (instagramChannelMessage.message &&
-        instagramChannelMessage.message.attachments &&
-        instagramChannelMessage.message.attachments.length > 1) {
+        const page = settings && settings.pages ? settings.pages.find(p => p.id === entryId) : null;
+        var pageAccessToken = page ? page.access_token : null;
 
-        const messageHandler = new MessageHandler();
-        let messagesList = await messageHandler.splitMessageFromInstagram(instagramChannelMessage);
+        if (!pageAccessToken && settings && settings.ig_oauth_token) {
+          pageAccessToken = settings.ig_oauth_token.access_token;
+        }
 
-        for (let message of messagesList) {
+        var user_info = { first_name: "User", last_name: instagramChannelMessage.sender.id };
+        if (pageAccessToken) {
+          user_info = await fbClient.getUserInfo(pageAccessToken, instagramChannelMessage.sender.id).catch(function(err) {
+            winston.error("(ig) getUserInfo error: ", err?.response?.data || err.message || err);
+            return { first_name: "User", last_name: instagramChannelMessage.sender.id };
+          });
+        }
 
-          let tiledeskJsonMessage = await tlr.toTiledesk(message);
-          winston.verbose("(fbm) tiledeskJsonMessage: ", tiledeskJsonMessage);
+        instagramChannelMessage.sender.fullname = user_info.first_name + " " + user_info.last_name;
 
+        var message_info = {
+          channel: TiledeskInstagramTranslator.CHANNEL_NAME,
+          instagram: {
+            page_id: entryId,
+            sender_id: instagramChannelMessage.sender.id,
+            firstname: user_info.first_name,
+            lastname: user_info.last_name
+          }
+        };
+
+        if (instagramChannelMessage.message &&
+          instagramChannelMessage.message.attachments &&
+          instagramChannelMessage.message.attachments.length > 1) {
+
+          const messageHandler = new MessageHandler();
+          let messagesList = await messageHandler.splitMessageFromInstagram(instagramChannelMessage);
+
+          for (let message of messagesList) {
+            let tiledeskJsonMessage = await tlr.toTiledesk(message);
+            if (tiledeskJsonMessage) {
+              try {
+                await tdChannel.send(tiledeskJsonMessage, message_info, settings.department_id);
+              } catch (err) {
+                winston.error("(ig) Error sending split message: ", err);
+              }
+            }
+          }
+        } else {
+          let tiledeskJsonMessage = await tlr.toTiledesk(instagramChannelMessage);
           if (tiledeskJsonMessage) {
             try {
               await tdChannel.send(tiledeskJsonMessage, message_info, settings.department_id);
-              winston.verbose("(fbm) Message sent to AI Manager")
             } catch (err) {
-              return res.status(500).send({ success: false, error: "Error sending exoìpiration message" });
+              winston.error("(ig) Error sending message: ", err);
             }
-          } else {
-            winston.verbose("(fbm) tiledeskJsonMessage is undefined!")
-          }
-        }
-
-      } else {
-        let tiledeskJsonMessage = await tlr.toTiledesk(instagramChannelMessage);
-        winston.verbose("(fbm) tiledeskJsonMessage: ", tiledeskJsonMessage);
-
-        if (tiledeskJsonMessage) {
-          try {
-            await tdChannel.send(tiledeskJsonMessage, message_info, settings.department_id);
-            winston.verbose("(fbm) Message sent to AI Manager")
-          } catch (err) {
-            return res.status(500).send({ success: false, error: "Error sending message" });
           }
-        } else {
-          winston.verbose("(fbm) tiledeskJsonMessage is undefined!")
         }
-      }
+      });
 
-    })
     } catch (err) {
       winston.error("(ig) Async webhook processing error: ", err?.response?.data || err.message || err);
     }
   });
-})
-
-router.get('/webhookFB', async (req, res) => {
-
-  winston.verbose("(fbm) Verify the webhook... ", req.query);
-
-  // Parse the query params
-  let mode = req.query['hub.mode'];
-  let token = req.query['hub.verify_token'];
-  let challenge = req.query['hub.challenge'];
-
-  winston.verbose("(fbm) token: " + token);
-  winston.verbose("(fbm) verify token: " + VERIFY_TOKEN);
-  winston.verbose("(fbm) mode: " + mode)
-  winston.verbose("(fbm) challenge: " + challenge)
-
-  // Checks if a token and mode is in the query string of the request
-  if (mode && token) {
+}
 
-    // Checks the mode and token sent is correct
-    if (mode === 'subscribe' && token === VERIFY_TOKEN) {
+router.post('/webhookIG', function(req, res) {
+  winston.verbose("(ig) POST /webhookIG");
+  processInstagramWebhook(req, res);
+});
 
-      // Responds with the challenge token from the request
-      winston.verbose('(fbm) Webhook verified');
-      return res.status(200).send(challenge);
+router.post('/webhookFB', function(req, res) {
+  winston.verbose("(ig) POST /webhookFB");
+  processInstagramWebhook(req, res);
+});
 
-    } else {
-      // Responds with '403 Forbidden' if verify tokens do not match
-      return res.sendStatus(403);
-    }
+function handleWebhookVerify(req, res) {
+  winston.verbose("(ig) Verify webhook... ", req.query);
+  var mode = req.query['hub.mode'];
+  var token = req.query['hub.verify_token'];
+  var challenge = req.query['hub.challenge'];
+  if (mode && token && mode === 'subscribe' && token === VERIFY_TOKEN) {
+    winston.info("(ig) Webhook verified");
+    return res.status(200).send(challenge);
   }
+  winston.warn("(ig) Webhook verify failed — mode=" + mode + " token match=" + (token === VERIFY_TOKEN));
   return res.sendStatus(403);
-})
+}
+
+router.get('/webhookIG', function(req, res) { handleWebhookVerify(req, res); });
+router.get('/webhookFB', function(req, res) { handleWebhookVerify(req, res); });
 
 router.get('/auth/instagram/start', async (req, res) => {
   winston.verbose("(ig) /auth/instagram/start");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resultcrafter/aimanager-instagram-connector",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "AI Manager Instagram DM connector",
   "main": "index.js",
   "scripts": {