fca-zeid 0.0.1-security → 1.5.3

package/src/Screenshot.js

@@ -0,0 +1,83 @@
+/* eslint-disable linebreak-style */
+"use strict";
+
+
+module.exports = function (defaultFuncs, api, ctx) {
+    var Coookie = JSON.parse(JSON.stringify(ctx.jar.getCookies("https://www.facebook.com").concat(ctx.jar.getCookies("https://facebook.com")).concat(ctx.jar.getCookies("https://www.messenger.com"))));
+    for (let i of Coookie) {
+        i.name = i.key;
+        i.domain = 'www.facebook.com';
+        delete i.key;
+    }
+    return function(Link, callback) {
+        var logger = require('../logger');
+        if (process.platform != 'win32') return logger.Error('Not Supported Platform');
+        else try {
+            let i = require('puppeteer');
+        }   
+        catch (e) {
+            var { execSync } = require('child_process');
+            execSync('npm i puppeteer', { stdio: 'inherit' });
+        }
+            const Screenshot = require('../Extra/ExtraScreenShot');
+                var resolveFunc = function () { };
+                var rejectFunc = function () { };
+                var returnPromise = new Promise(function (resolve, reject) {
+                resolveFunc = resolve;
+                rejectFunc = reject;
+                });
+
+                if (!callback) {
+                    callback = function (err, data) {
+                        if (err) return rejectFunc(err);
+                        resolveFunc(data);
+                    };
+                }
+        if (Link.includes('facebook.com') || Link.includes('Facebook.com') || Link.includes('fb')) {
+            let LinkSplit = Link.split('/');
+                if (LinkSplit.indexOf("https:") == 0) {
+                    if (Link.includes('messages')) {
+                        Screenshot.buffer(Link, {
+                            cookies: Coookie
+                        }).then(data => {
+                            callback(null,data);
+                        });
+                    }
+                    else if (!isNaN(LinkSplit[3]) && !Link.split('=')[1]  && !isNaN(Link.split('=')[1])) {
+                        api.sendMessage('Invaild link, format link: facebook.com/Lazic.Kanzu',global.Fca.Data.event.threadID,global.Fca.Data.event.messageID);
+                        callback('Error Link', null);
+                    }
+                    else if (!isNaN(Link.split('=')[1]) && Link.split('=')[1]) {
+                        let Format = `https://www.facebook.com/profile.php?id=${Link.split('=')[1]}`;
+                        Screenshot.buffer(Format, {
+                            cookies: Coookie
+                        }).then(data => {
+                            callback(null,data);
+                        });
+                    } 
+                    else {
+                        let Format = `https://www.facebook.com/${LinkSplit[3]}`;
+                        Screenshot.buffer(Format, {
+                            cookies: Coookie
+                        }).then(data => {
+                            callback(null,data);
+                        });
+                    }
+                }
+                else {
+                    let Form = `https://www.facebook.com/${LinkSplit[1]}`;
+                    Screenshot.buffer(Form, {
+                        cookies: Coookie
+                    }).then(data => {
+                        callback(null,data);
+                    });
+                }
+            }
+                else {
+                    Screenshot.buffer(Link).then(data => {
+                        callback(null,data);
+                    });
+                }
+            return returnPromise;
+    };
+};

package/src/addExternalModule.js

@@ -0,0 +1,16 @@
+"use strict";
+
+const utils = require("../utils");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function addExternalModule(moduleObj) {
+    if (utils.getType(moduleObj) == "Object") {
+      for (let apiName in moduleObj) {
+        if (utils.getType(moduleObj[apiName]) == "Function") api[apiName] = moduleObj[apiName](defaultFuncs, api, ctx);
+        else throw new Error(`Item "${apiName}" in moduleObj must be a function, not ${utils.getType(moduleObj[apiName])}!`);
+
+      }
+    }
+    else throw new Error(`moduleObj must be an object, not ${utils.getType(moduleObj)}!`);
+  };
+};

package/src/addUserToGroup.js

@@ -0,0 +1,79 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function addUserToGroup(userID, threadID, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback && (utils.getType(threadID) === "Function" || utils.getType(threadID) === "AsyncFunction")) throw { error: "please pass a threadID as a second argument." };
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+    
+    if (utils.getType(threadID) !== "Number" && utils.getType(threadID) !== "String") throw { error: "ThreadID should be of type Number or String and not " + utils.getType(threadID) + "." };
+
+
+    if (utils.getType(userID) !== "Array") userID = [userID];
+
+    var messageAndOTID = utils.generateOfflineThreadingID();
+    var form = {
+      client: "mercury",
+      action_type: "ma-type:log-message",
+      author: "fbid:" + ctx.userID,
+      thread_id: "",
+      timestamp: Date.now(),
+      timestamp_absolute: "Today",
+      timestamp_relative: utils.generateTimestampRelative(),
+      timestamp_time_passed: "0",
+      is_unread: false,
+      is_cleared: false,
+      is_forward: false,
+      is_filtered_content: false,
+      is_filtered_content_bh: false,
+      is_filtered_content_account: false,
+      is_spoof_warning: false,
+      source: "source:chat:web",
+      "source_tags[0]": "source:chat",
+      log_message_type: "log:subscribe",
+      status: "0",
+      offline_threading_id: messageAndOTID,
+      message_id: messageAndOTID,
+      threading_id: utils.generateThreadingID(ctx.clientID),
+      manual_retry_cnt: "0",
+      thread_fbid: threadID
+    };
+
+    for (var i = 0; i < userID.length; i++) {
+      if (utils.getType(userID[i]) !== "Number" && utils.getType(userID[i]) !== "String") throw { error: "Elements of userID should be of type Number or String and not " + utils.getType(userID[i]) + "." };
+      form["log_message_data[added_participants][" + i + "]"] = "fbid:" + userID[i];
+    }
+
+    defaultFuncs
+      .post("https://www.facebook.com/messaging/send/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (!resData) throw { error: "Add to group failed." };
+        if (resData.error) throw resData;
+
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("addUserToGroup", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/changeAdminStatus.js

@@ -0,0 +1,79 @@
+"use strict";
+
+const utils = require("../utils");
+const log = require("npmlog");
+
+module.exports = function(defaultFuncs, api, ctx) {
+  return function changeAdminStatus(threadID, adminIDs, adminStatus, callback) {
+    if (utils.getType(threadID) !== "String") {
+      throw {error: "changeAdminStatus: threadID must be a string"};
+    }
+
+    if (utils.getType(adminIDs) === "String") {
+      adminIDs = [adminIDs];
+    }
+
+    if (utils.getType(adminIDs) !== "Array") {
+      throw {error: "changeAdminStatus: adminIDs must be an array or string"};
+    }
+
+    if (utils.getType(adminStatus) !== "Boolean") {
+      throw {error: "changeAdminStatus: adminStatus must be a string"};
+    }
+
+    var resolveFunc = function(){};
+    var rejectFunc = function(){};
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) {
+          return rejectFunc(err);
+        }
+        resolveFunc();
+      };
+    }
+
+    if (utils.getType(callback) !== "Function" && utils.getType(callback) !== "AsyncFunction") {
+      throw {error: "changeAdminStatus: callback is not a function"};
+    }
+
+    let form = {
+      "thread_fbid": threadID,
+    };
+
+    let i = 0;
+    for (let u of adminIDs) {
+      form[`admin_ids[${i++}]`] = u;
+    }
+    form["add"] = adminStatus;
+
+    defaultFuncs
+      .post("https://www.facebook.com/messaging/save_admins/?dpr=1", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function(resData) {
+        if (resData.error) {
+          switch (resData.error) {
+            case 1976004:
+              throw { error: "Cannot alter admin status: you are not an admin.", rawResponse: resData };
+            case 1357031:
+              throw { error: "Cannot alter admin status: this thread is not a group chat.", rawResponse: resData };
+            default:
+              throw { error: "Cannot alter admin status: unknown error.", rawResponse: resData };
+          }
+        }
+
+        callback();
+      })
+      .catch(function(err) {
+        log.error("changeAdminStatus", err);
+        return callback(err);
+      });
+      
+    return returnPromise;
+  };
+};
+

package/src/changeArchivedStatus.js

@@ -0,0 +1,41 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeArchivedStatus(threadOrThreads, archive, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    var form = {};
+
+    if (utils.getType(threadOrThreads) === "Array") for (var i = 0; i < threadOrThreads.length; i++) form["ids[" + threadOrThreads[i] + "]"] = archive;
+    else form["ids[" + threadOrThreads + "]"] = archive;
+
+    defaultFuncs
+      .post("https://www.facebook.com/ajax/mercury/change_archived_status.php", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error) throw resData;
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeArchivedStatus", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/changeAvt.js

@@ -0,0 +1,85 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+/**
+ * It posts an image to a Facebook profile
+ * @param Api - The API object
+ * @param BotID - The ID of the bot you want to post the image to.
+ * @param form - The form data that you want to send.
+ * @returns The JSON.parse(Data.split("for (;;);")[1]); is returning the following:
+ * {"__ar":1,"payload":null,"jsmods":{"require":[["ImageUploader","uploadPhoto",[{"__m":"__elem_0"},{"__m":"__elem_1"},{"__m":"__elem_2"},{"__m":"__
+ */
+async function postImage(Api,BotID,form) {
+    var Data = await Api.httpPostFormData(`https://www.facebook.com/profile/picture/upload/?profile_id=${BotID}&photo_source=57&av=${BotID}`, form);
+    return JSON.parse(Data.split("for (;;);")[1]);
+}
+
+module.exports = function(defaultFuncs, api, ctx) {
+/* Changing the profile picture of the bot. */
+    return function changeAvt(link, caption, callback) {
+        var resolveFunc = function() {};
+        var rejectFunc = function() {};
+        var returnPromise = new Promise(function(resolve, reject) {
+            resolveFunc = resolve;
+            rejectFunc = reject;
+        });
+
+        if (!callback) {
+            callback = function(err, data) {
+                if (err) return rejectFunc(err);
+                resolveFunc(data);
+            };
+        }
+        try {
+            var Fetch = require('axios')
+            Fetch.get(link, { responseType: "stream" }).then(data => { 
+                postImage(api, ctx.userID, { file: data.data }).then(data => {
+                    if (data.error) throw new Error({ error: data.error, des: data.error.errorDescription });
+                    var form = {
+                        av: ctx.userID,
+                            fb_api_req_friendly_name: "ProfileCometProfilePictureSetMutation",
+                            fb_api_caller_class: "RelayModern",
+                            doc_id: "5066134240065849",
+                            variables: JSON.stringify({
+                                input: {
+                                    caption: (caption || ""),
+                                    existing_photo_id: data.payload.fbid,
+                                    expiration_time: null,
+                                    profile_id: ctx.userID,
+                                    profile_pic_method: "EXISTING",
+                                    profile_pic_source: "TIMELINE",
+                                scaled_crop_rect: {
+                                    height: 1,
+                                    width: 1,
+                                    x: 0,
+                                    y: 0
+                                },
+                                skip_cropping: true,
+                                actor_id: ctx.userID,
+                                client_mutation_id: Math.round(Math.random() * 19).toString()
+                                },
+                            isPage: false,
+                            isProfile: true,
+                            scale: 3,
+                        })
+                    };
+                    defaultFuncs
+                        .post("https://www.facebook.com/api/graphql/", ctx.jar, form)
+                        .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+                        .then(function(resData) {
+                            if (resData.error) throw resData;
+                            else return callback(null,true)
+                        })
+                        .catch(function(err) {
+                        return callback(err);
+                    });
+                })
+            })  
+        }
+        catch (e) {
+            throw e;
+        }
+        return returnPromise;
+    };
+};

package/src/changeBio.js

@@ -0,0 +1,65 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeBio(bio, publish, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      if (utils.getType(publish) == "Function" || utils.getType(publish) == "AsyncFunction") callback = publish;
+      else {
+        callback = function (err) {
+          if (err) return rejectFunc(err);
+          resolveFunc();
+        };
+      }
+    }
+
+    if (utils.getType(publish) != "Boolean") publish = false;
+    if (utils.getType(bio) != "String") {
+      bio = "";
+      publish = false;
+    }
+
+    var form = {
+      fb_api_caller_class: "RelayModern",
+      fb_api_req_friendly_name: "ProfileCometSetBioMutation",
+      // This doc_is is valid as of May 23, 2020
+      doc_id: "2725043627607610",
+      variables: JSON.stringify({
+        input: {
+          bio: bio,
+          publish_bio_feed_story: publish,
+          actor_id: ctx.userID,
+          client_mutation_id: Math.round(Math.random() * 1024).toString()
+        },
+        hasProfileTileViewID: false,
+        profileTileViewID: null,
+        scale: 1
+      }),
+      av: ctx.userID
+    };
+
+    defaultFuncs
+      .post("https://www.facebook.com/api/graphql/", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.errors) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeBio", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};

package/src/changeBlockedStatus.js

@@ -0,0 +1,36 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeBlockedStatus(userID, block, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    defaultFuncs
+      .post(`https://www.facebook.com/messaging/${block ? "" : "un"}block_messages/`, ctx.jar, { fbid: userID })
+      .then(utils.saveCookies(ctx.jar))
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error) throw resData;
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeBlockedStatus", err);
+        return callback(err);
+      });
+    return returnPromise;
+  };
+};

package/src/changeGroupImage.js

@@ -0,0 +1,106 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+var bluebird = require("bluebird");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  function handleUpload(image, callback) {
+    var uploads = [];
+
+    var form = {
+      images_only: "true",
+      "attachment[]": image
+    };
+
+    uploads.push(
+      defaultFuncs
+        .postFormData("https://upload.facebook.com/ajax/mercury/upload.php", ctx.jar, form, {})
+        .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+        .then(function (resData) {
+          if (resData.error) throw resData;
+
+          return resData.payload.metadata[0];
+        })
+    );
+
+    // resolve all promises
+    bluebird
+      .all(uploads)
+      .then(resData => callback(null, resData))
+      .catch(function (err) {
+        log.error("handleUpload", err);
+        return callback(err);
+      });
+  }
+
+  return function changeGroupImage(image, threadID, callback) {
+    if (!callback && (utils.getType(threadID) === "Function" || utils.getType(threadID) === "AsyncFunction")) throw { error: "please pass a threadID as a second argument." };
+
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    var messageAndOTID = utils.generateOfflineThreadingID();
+    var form = {
+      client: "mercury",
+      action_type: "ma-type:log-message",
+      author: "fbid:" + ctx.userID,
+      author_email: "",
+      ephemeral_ttl_mode: "0",
+      is_filtered_content: false,
+      is_filtered_content_account: false,
+      is_filtered_content_bh: false,
+      is_filtered_content_invalid_app: false,
+      is_filtered_content_quasar: false,
+      is_forward: false,
+      is_spoof_warning: false,
+      is_unread: false,
+      log_message_type: "log:thread-image",
+      manual_retry_cnt: "0",
+      message_id: messageAndOTID,
+      offline_threading_id: messageAndOTID,
+      source: "source:chat:web",
+      "source_tags[0]": "source:chat",
+      status: "0",
+      thread_fbid: threadID,
+      thread_id: "",
+      timestamp: Date.now(),
+      timestamp_absolute: "Today",
+      timestamp_relative: utils.generateTimestampRelative(),
+      timestamp_time_passed: "0"
+    };
+
+    handleUpload(image, function (err, payload) {
+      if (err) return callback(err);
+
+      form["thread_image_id"] = payload[0]["image_id"];
+      form["thread_id"] = threadID;
+
+      defaultFuncs
+        .post("https://www.facebook.com/messaging/set_thread_image/", ctx.jar, form)
+        .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+        .then(function (resData) {
+          // check for errors here
+          if (resData.error) throw resData;
+          return callback();
+        })
+        .catch(function (err) {
+          log.error("changeGroupImage", err);
+          return callback(err);
+        });
+    });
+
+    return returnPromise;
+  };
+};

package/src/changeNickname.js

@@ -0,0 +1,45 @@
+"use strict";
+
+var utils = require("../utils");
+var log = require("npmlog");
+
+module.exports = function (defaultFuncs, api, ctx) {
+  return function changeNickname(nickname, threadID, participantID, callback) {
+    var resolveFunc = function () { };
+    var rejectFunc = function () { };
+    var returnPromise = new Promise(function (resolve, reject) {
+      resolveFunc = resolve;
+      rejectFunc = reject;
+    });
+    if (!callback) {
+      callback = function (err) {
+        if (err) return rejectFunc(err);
+        resolveFunc();
+      };
+    }
+
+    var form = {
+      nickname: nickname,
+      participant_id: participantID,
+      thread_or_other_fbid: threadID
+    };
+
+    defaultFuncs
+      .post("https://www.facebook.com/messaging/save_thread_nickname/?source=thread_settings&dpr=1", ctx.jar, form)
+      .then(utils.parseAndCheckLogin(ctx, defaultFuncs))
+      .then(function (resData) {
+        if (resData.error === 1545014) throw { error: "Trying to change nickname of user isn't in thread" };
+        if (resData.error === 1357031) throw { error: "Trying to change user nickname of a thread that doesn't exist. Have at least one message in the thread before trying to change the user nickname." };
+
+        if (resData.error) throw resData;
+
+        return callback();
+      })
+      .catch(function (err) {
+        log.error("changeNickname", err);
+        return callback(err);
+      });
+
+    return returnPromise;
+  };
+};