Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
botbuilder-location
Advanced tools
An open-source location picker control for Microsoft Bot Framework powered by Bing's Maps REST services. This control makes the process of collecting and validating the user's desired location in a conversation easy and reliable.
The following examples demonstrate how to use the Bing location control to collect and validate the user's location with your Microsoft Bot Framework bot in Node.js.
To start using the control, you need to obtain a Bing Maps API subscription key. You can sign up to get a free key with up to 10,000 transactions per month in Azure Portal.
Install the botbuilder-location module using npm.
npm install --save botbuilder-location
Add the botbuilder-location library to your bot.
var locationDialog = require('botbuilder-location');
bot.library(locationDialog.createLibrary("BING_MAPS_API_KEY"));
The example initiates the location control with default parameters, which returns a custom prompt message asking the user to provide an address.
locationDialog.getLocation(session,
{ prompt: "Where should I ship your order? Type or say an address." });
FB Messenger supports a location picker GUI dialog to let the user select an address. If you prefer to use FB Messenger's native dialog, pass the useNativeControl: true
option.
var options = {
prompt: "Where should I ship your order? Type or say an address.",
useNativeControl: true
};
locationDialog.getLocation(session, options);
FB Messenger by default returns only the lat/long coordinates for any address selected via the location picker GUI dialog. You can additionally use the reverseGeocode: true
option to have Bing reverse geocode the returned coordinates and automatically fill in the remaining address fields.
var options = {
prompt: "Where should I ship your order? Type or say an address.",
useNativeControl: true,
reverseGeocode: true
};
locationDialog.getLocation(session, options);
Note: Reverse geocoding is an inherently imprecise operation. For that reason, when the reverse geocode option is selected, the location control will collect only the locality
, region
, country
and postalCode
fields and ask the user to provide the desired street address manually.
You can specify required location fields that need to be collected by the control. If the user does not provide values for one or more required fields, the control will prompt him to fill them in. You can specify required fields by passing them in the requiredFields
parameter. The example specifies the street address and postal (zip) code as required.
var options = {
prompt: "Where should I ship your order? Type or say an address.",
requiredFields:
locationDialog.LocationRequiredFields.streetAddress |
locationDialog.LocationRequiredFields.postalCode
}
locationDialog.getLocation(session, options);
The following example shows how you can leverage the location object returned by the location control in your bot code.
locationDialog.create(bot);
bot.library(locationDialog.createLibrary(process.env.BING_MAPS_API_KEY));
bot.dialog("/", [
function (session) {
locationDialog.getLocation(session, {
prompt: "Where should I ship your order? Type or say an address.",
requiredFields:
locationDialog.LocationRequiredFields.streetAddress |
locationDialog.LocationRequiredFields.locality |
locationDialog.LocationRequiredFields.region |
locationDialog.LocationRequiredFields.postalCode |
locationDialog.LocationRequiredFields.country
});
},
function (session, results) {
if (results.response) {
var place = results.response;
session.send(place.streetAddress + ", " + place.locality + ", " + place.region + ", " + place.country + " (" + place.postalCode + ")");
}
else {
session.send("OK, I won't be shipping it");
}
}
]);
The following options are supported today by the location control.
export interface ILocationPromptOptions {
prompt: string;
requiredFields?: requiredFieldsDialog.LocationRequiredFields;
useNativeControl?: boolean,
reverseGeocode?: boolean
}
prompt
The prompt shown to the user when the location control is initiated.
requiredFields
Required location fields to be collected by the control. Available options include: streetAddress, locality, region, postalCode, country
useNativeControl
Boolean to indicate if the control will use FB Messenger's location picker GUI dialog. It does not have any effect on other messaging channels.
reverseGeocode
Boolean to indicate if the control will try to reverse geocode the lat/long coordinates returned by FB Messenger's location picker GUI dialog. It does not have any effect on other messaging channels.
You can find a sample bot that uses the Bing location control in the Sample directory. Please note that you need to obtain a Bing Maps API subscription key from Azure Portal to run the sample.
Read these resources for more information about the Microsoft Bot Framework, Bot Builder SDK and Bing Maps REST Services:
FAQs
An open-source location picker control for Microsoft Bot Framework powered by Bing's Maps REST services. This control makes the process of collecting and validating the user's desired location in a conversation easy and reliable.
The npm package botbuilder-location receives a total of 1 weekly downloads. As such, botbuilder-location popularity was classified as not popular.
We found that botbuilder-location demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.