Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
whatsapp-api-js
Advanced tools
A TypeScript server agnostic Whatsapp's Official API framework.
First, you need a Facebook app with the Whatsapp API activated. You can create your first app following this steps. Get the API token, either a temporal or a permanent one.
In your server you can install the module using npm:
npm install whatsapp-api-js
Now you can write code like this:
import { WhatsAppAPI } from "whatsapp-api-js";
import { Text, Image, Document } from "whatsapp-api-js/messages";
import * as Contacts from "whatsapp-api-js/messages/contacts";
// Kind reminder to not hardcode your token and secret
const TOKEN = "YOUR_TOKEN";
const APP_SECRET = "YOUR_SECRET";
const Whatsapp = new WhatsAppAPI({ token: TOKEN, appSecret: APP_SECRET });
// Assuming post is called on a POST request to your server
async function post(e) {
// The handlers work with any framework, as long as you pass the correct data
// You can also use one of the middlewares provided in the package, keep reading
return await Whatsapp.post(
JSON.parse(e.data),
e.data,
e.headers["x-hub-signature-256"]
);
}
Whatsapp.on.message = async ({ phoneID, from, message, name, reply }) => {
console.log(
`User ${name} (${from}) sent to bot ${phoneID} ${JSON.stringify(
message
)}`
);
let promise;
if (message.type === "text") {
promise = reply(
new Text(`*${name}* said:\n\n${message.text.body}`),
true
);
}
if (message.type === "image") {
promise = reply(
new Image(message.image.id, true, `Nice photo, ${name}`)
);
}
if (message.type === "document") {
promise = reply(
new Document(message.document.id, true, undefined, "Our document")
);
}
if (message.type === "contacts") {
promise = reply(
new Contacts.Contacts(
[
new Contacts.Name(name, "First name", "Last name"),
new Contacts.Phone(phone),
new Contacts.Birthday("2022", "04", "25")
],
[
new Contacts.Name("John", "First name", "Last name"),
new Contacts.Organization("Company", "Department", "Title"),
new Contacts.Url("https://www.google.com", "WORK")
]
)
);
}
console.log(
(await promise) ??
"There are more types of messages, such as locations, templates, interactive, reactions and all the other media types."
);
Whatsapp.markAsRead(phoneID, message.id);
return 200;
};
Whatsapp.on.sent = ({ phoneID, to, message }) => {
console.log(`Bot ${phoneID} sent to user ${to} ${message}`);
};
To receive the post requests on message, you must setup the webhook at your Facebook app.
Back in the dashboard, click on WhatsApp > Settings, and setup the webhook URL. While setting it up, you will be asked for a Verify Token. This can be any string you want.
The package also has a GET wizard for the webhook authentication:
import { WhatsAppAPI } from "whatsapp-api-js";
const TOKEN = "YOUR_TOKEN";
const APP_SECRET = "YOUR_SECRET";
const VERIFY_TOKEN = "YOUR_VERIFY_TOKEN";
const Whatsapp = new WhatsAppAPI({
token: TOKEN,
appSecret: APP_SECRET,
webhookVerifyToken: VERIFY_TOKEN
});
// Assuming get is called on a GET request to your server
// You can also use one of the middlewares provided in the package, keep reading
function get(e) {
return Whatsapp.get(e.query);
}
Once you are done, click the administrate button, and subscribe to the messages event.
And that's it! Now you have a functioning Whatsapp Bot connected to your server. For more information on the setup process for specific runtimes and frameworks, check out the Environments.md file.
There are a few examples that cover how to create each type of message, and how to use the basic methods of the library.
Check them out in the examples folder.
The library is fully typed. Most types are available by importing /types
or /emitters
:
import { GetParams, PostData } from "whatsapp-api-js/types";
import { OnMessage, OnSent, OnStatus } from "whatsapp-api-js/emitters";
To know what changed between updates, check out the releases on Github.
The latest release documentation is available in whatsappapijs.web.app, and previous versions are available in secreto31126.github.io/whatsapp-api-js.
Diego Carrillo 💵 | Omar 🐛 💵 | Rahul Lanjewar 💻 📖 🤔 |
If you have some free time and really want to improve the library or fix dumb bugs, feel free to read CONTRIBUTING.md file.
You can get a full list of breaking changes in the BREAKING.md file.
Install the latest beta release with npm install whatsapp-api-js@beta
.
As any beta, it is 110% likely to break. I also use this tag to test npm releases.
Use it at your own risk.
FAQs
A TypeScript server agnostic Whatsapp's Official API framework
The npm package whatsapp-api-js receives a total of 0 weekly downloads. As such, whatsapp-api-js popularity was classified as not popular.
We found that whatsapp-api-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.