fca-zeid 0.0.1-security → 1.5.3

package/src/changeThreadColor.js

@@ -0,0 +1,62 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeThreadColor(color, threadID, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc(err);
+      };
+    }
+
+    var validatedColor = color !== null ? color.toLowerCase() : color; // API only accepts lowercase letters in hex string
+    var colorList = Object.keys(api.threadColors).map(function (name) {
+      return api.threadColors[name];
+    });
+    if (!colorList.includes(validatedColor)) throw { error: "The color you are trying to use is not a valid thread color. Use api.threadColors to find acceptable values." };
+
+    var form = {
+      dpr: 1,
+      queries: JSON.stringify({
+        o0: {
+          //This doc_id is valid as of January 31, 2020
+          doc_id: "1727493033983591",
+          query_params: {
+            data: {
+              actor_id: ctx.userID,
+              client_mutation_id: "0",
+              source: "SETTINGS",
+              theme_id: validatedColor,
+              thread_id: threadID
+            }
+          }
+        }
+      })
+    };
+
+    defaultFuncs
+      .post("https://www.facebook.com/api/graphqlbatch/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData[resData.length - 1].error_results > 0) throw resData[0].o0.errors;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeThreadColor", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/changeThreadEmoji.js

@@ -0,0 +1,42 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeThreadEmoji(emoji, threadID, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+    var form = {
+      emoji_choice: emoji,
+      thread_or_other_fbid: threadID
+    };
+
+    defaultFuncs
+      .post("https://www.facebook.com/messaging/save_thread_emoji/?source=thread_settings&__pc=EXP1%3Amessengerdotcom_pkg", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error === 1357031) throw { error: "Trying to change emoji of a chat that doesn't exist. Have at least one message in the thread before trying to change the emoji." };
+        if (resData.error) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeThreadEmoji", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/createNewGroup.js

@@ -0,0 +1,70 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function createNewGroup(participantIDs, groupTitle, callback) {
+    if (utils.getType(groupTitle) == "Function") {
+      callback = groupTitle;
+      groupTitle = null;
+    }
+
+    if (utils.getType(participantIDs) !== "Array") throw { error: "createNewGroup: participantIDs should be an array." };
+
+    if (participantIDs.length < 2) throw { error: "createNewGroup: participantIDs should have at least 2 IDs." };
+
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err, threadID) {
+        if (err) return rejectFunc(err);
+        resolveFunc(threadID);
+      };
+    }
+
+    var pids = [];
+    for (var n in participantIDs) pids.push({ fbid: participantIDs[n] });
+    pids.push({ fbid: ctx.userID });
+
+    var form = {
+      fb_api_caller_class: "RelayModern",
+      fb_api_req_friendly_name: "MessengerGroupCreateMutation",
+      av: ctx.userID,
+      //This doc_id is valid as of January 11th, 2020
+      doc_id: "577041672419534",
+      variables: JSON.stringify({
+        input: {
+          entry_point: "jewel_new_group",
+          actor_id: ctx.userID,
+          participants: pids,
+          client_mutation_id: Math.round(Math.random() * 1024).toString(),
+          thread_settings: {
+            name: groupTitle,
+            joinable_mode: "PRIVATE",
+            thread_image_fbid: null
+          }
+        }
+      })
+    };
+
+    defaultFuncs
+      .post("https://www.facebook.com/api/graphql/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.errors) throw resData;
+        return callback(null, resData.data.messenger_group_thread_create.thread.thread_key.thread_fbid);
+      })
+      .catch(function (err) {
+        log.error("createNewGroup", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/createPoll.js

@@ -0,0 +1,60 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function createPoll(title, threadID, options, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      if (utils.getType(options) == "Function") {
+        callback = options;
+        options = null;
+      }
+      else {
+        callback = function (err) {
+          if (err) return rejectFunc(err);
+          resolveFunc();
+        };
+      }
+    }
+    if (!options) options = {}; // Initial poll options are optional
+
+    var form = {
+      target_id: threadID,
+      question_text: title
+    };
+
+    // Set fields for options (and whether they are selected initially by the posting user)
+    var ind = 0;
+    for (var opt in options) {
+      // eslint-disable-next-line no-prototype-builtins
+      if (options.hasOwnProperty(opt)) {
+        form["option_text_array[" + ind + "]"] = opt;
+        form["option_is_selected_array[" + ind + "]"] = options[opt] ? "1" : "0";
+        ind++;
+      }
+    }
+
+    defaultFuncs
+      .post("https://www.facebook.com/messaging/group_polling/create_poll/?dpr=1", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.payload.status != "success") throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("createPoll", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/deleteMessage.js

@@ -0,0 +1,45 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function deleteMessage(messageOrMessages, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+
+        resolveFunc();
+      };
+    }
+
+    var form = {
+      client: "mercury"
+    };
+
+    if (utils.getType(messageOrMessages) !== "Array") messageOrMessages = [messageOrMessages];
+
+    for (var i = 0; i < messageOrMessages.length; i++) form["message_ids[" + i + "]"] = messageOrMessages[i];
+
+    defaultFuncs
+      .post("https://www.facebook.com/ajax/mercury/delete_messages.php", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("deleteMessage", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/deleteThread.js

@@ -0,0 +1,43 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function deleteThread(threadOrThreads, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    var form = {
+      client: "mercury"
+    };
+
+    if (utils.getType(threadOrThreads) !== "Array") threadOrThreads = [threadOrThreads];
+    for (var i = 0; i < threadOrThreads.length; i++) form["ids[" + i + "]"] = threadOrThreads[i];
+
+    defaultFuncs
+      .post("https://www.facebook.com/ajax/mercury/delete_thread.php", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("deleteThread", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/forwardAttachment.js

@@ -0,0 +1,48 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function forwardAttachment(attachmentID, userOrUsers, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    var form = {
+      attachment_id: attachmentID
+    };
+
+    if (utils.getType(userOrUsers) !== "Array") userOrUsers = [userOrUsers];
+
+    var timestamp = Math.floor(Date.now() / 1000);
+
+    //That's good, the key of the array is really timestmap in seconds + index
+    //Probably time when the attachment will be sent?
+    for (var i = 0; i < userOrUsers.length; i++) form["recipient_map[" + (timestamp + i) + "]"] = userOrUsers[i];
+
+    defaultFuncs
+      .post("https://www.facebook.com/mercury/attachments/forward/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx.jar, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("forwardAttachment", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/getAccessToken.js

@@ -0,0 +1,28 @@
+/* eslint-disable linebreak-style */
+"use strict";
+
+module.exports = function (defaultFuncs, api, ctx) {
+    return function getAccessToken(callback) {
+      var resolveFunc = function () { };
+      var rejectFunc = function () { };
+      var returnPromise = new Promise(function (resolve, reject) {
+        resolveFunc = resolve;
+        rejectFunc = reject;
+      });
+  
+      if (!callback) {
+        callback = function (err, userInfo) {
+          if (err) return rejectFunc(err);
+          resolveFunc(userInfo);
+        };
+      }
+    try {
+      var { getAccessToken } = require('../Extra/ExtraAddons');
+      getAccessToken(ctx.jar,ctx,defaultFuncs).then(data => callback(null,data));
+    }
+    catch (e) {
+      callback(null, e);
+    }
+    return returnPromise;
+    };
+  };

package/src/getCurrentUserID.js

@@ -0,0 +1,7 @@
+"use strict";
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function getCurrentUserID() {
+    return ctx.userID;
+  };
+};

package/src/getEmojiUrl.js

@@ -0,0 +1,27 @@
+"use strict";
+
+const util = require("util");
+
+module.exports = function () {
+  return function getEmojiUrl(c, size, pixelRatio) {
+    /*
+     Resolves Facebook Messenger emoji image asset URL for an emoji character.
+     Supported sizes are 32, 64, and 128.
+     Supported pixel ratios are '1.0' and '1.5' (possibly more; haven't tested)
+     */
+    const baseUrl = "https://static.xx.fbcdn.net/images/emoji.php/v8/z%s/%s";
+    pixelRatio = pixelRatio || "1.0";
+
+    let ending = util.format(
+      "%s/%s/%s.png",
+      pixelRatio,
+      size,
+      c.codePointAt(0).toString(16)
+    );
+    let base = 317426846;
+    for (let i = 0; i < ending.length; i++) base = (base << 5) - base + ending.charCodeAt(i);
+
+    let hashed = (base & 255).toString(16);
+    return util.format(baseUrl, hashed, ending);
+  };
+};

package/src/getFriendsList.js

@@ -0,0 +1,73 @@
+"use strict";
+
+//var cheerio = require("cheerio");
+var utils = require("../utils");
+var log = require("npmlog");
+
+// [almost] copy pasted from one of FB's minified file (GenderConst)
+var GENDERS = {
+  0: "unknown",
+  1: "female_singular",
+  2: "male_singular",
+  3: "female_singular_guess",
+  4: "male_singular_guess",
+  5: "mixed",
+  6: "neuter_singular",
+  7: "unknown_singular",
+  8: "female_plural",
+  9: "male_plural",
+  10: "neuter_plural",
+  11: "unknown_plural"
+};
+
+function formatData(obj) {
+  return Object.keys(obj).map(function (key) {
+    var user = obj[key];
+    return {
+      alternateName: user.alternateName,
+      firstName: user.firstName,
+      gender: GENDERS[user.gender],
+      userID: utils.formatID(user.id.toString()),
+      isFriend: user.is_friend != null && user.is_friend ? true : false,
+      fullName: user.name,
+      profilePicture: user.thumbSrc,
+      type: user.type,
+      profileUrl: user.uri,
+      vanity: user.vanity,
+      isBirthday: !!user.is_birthday
+    };
+  });
+}
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function getFriendsList(callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err, friendList) {
+        if (err) return rejectFunc(err);
+        resolveFunc(friendList);
+      };
+    }
+
+    defaultFuncs
+      .postFormData("https://www.facebook.com/chat/user_info_all", ctx.jar, {}, { viewer: ctx.userID })
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (!resData) throw { error: "getFriendsList returned empty object." };
+        if (resData.error) throw resData;
+        callback(null, formatData(resData.payload));
+      })
+      .catch(function (err) {
+        log.error("getFriendsList", "Lỗi getFriendsList Có Thể Do Bạn Spam Quá Nhiều ! Hãy Hạn Chế !");
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/getMessage.js

@@ -0,0 +1,80 @@
+/* eslint-disable linebreak-style */
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function(defaultFuncs, api, ctx) {
+    return function getMessage(threadID, messageID, callback) {
+      if (!callback) {
+        return callback({ error: "getMessage: need callback" });
+      }
+
+      if (!threadID || !messageID) {
+        return callback({ error: "getMessage: need threadID and messageID" });
+      }
+
+      const form = {
+        "av": ctx.globalOptions.pageID,
+        "queries": JSON.stringify({
+          "o0": {
+            //This doc_id is valid as of ? (prob January 18, 2020)
+            "doc_id": "1768656253222505",
+            "query_params": {
+              "thread_and_message_id": {
+                "thread_id": threadID,
+                "message_id": messageID,
+              }
+            }
+          }
+        })
+      };
+
+      defaultFuncs
+      .post("https://www.facebook.com/api/graphqlbatch/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then((resData) => {
+        if (resData[resData.length - 1].error_results > 0) {
+          throw resData[0].o0.errors;
+        }
+
+        if (resData[resData.length - 1].successful_results === 0) {
+          throw { error: "getMessage: there was no successful_results", res: resData };
+        }
+
+        var fetchData = resData[0].o0.data.message;
+        if (fetchData) {
+          (!ctx.globalOptions.selfListen &&
+            fetchData.message_sender.id.toString() === ctx.userID) ||
+            !ctx.loggedIn ?
+            undefined :
+            (function () { callback(null, {
+                threadID: threadID,
+                messageID: fetchData.message_id,
+                senderID: fetchData.message_sender.id,
+                attachments: fetchData.blob_attachments.map(att => {
+                    var x;
+                    try {
+                        x = utils._formatAttachment(att);
+                    } catch (ex) {
+                        x = att;
+                        x.error = ex;
+                        x.type = "unknown";
+                    }
+                    return x;
+                }),
+                body: fetchData.message.text,
+                mentions: fetchData.message.ranges,
+                timestamp: fetchData.timestamp_precise,
+                messageReply: fetchData.replied_to_message,
+                raw: fetchData,
+            }); })();
+        }
+    })
+    .catch((err) => {
+      log.error("getMessage", err);
+      callback(err);
+    });
+
+  };
+};