
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
wingbot-botservice
Advanced tools
const { Router, Bot } = require('wingbot');
const { BotService } = require('wingbot-botservice');
const bot = new Bot();
const processor = new Processor(bot);
const bs = new BotService(processor, {
appId: '123',
appSecret: '456'
});
// the route
module.exports.bot = async (req, res) => {
const { body, headers } = req;
await bs.verifyRequest(body, headers);
await bs.processEvent(body);
};
const directLine = new DirectLine();
directLine.postActivity({
type:'event',
name:'postBack',
from:{ id: botserviceUserId },
value:{ action: 'action-path', data: {/* optional */} }
});
BotService connector for wingbot.ai
function
Patch, which solves problem with BotFramework. Always, when conversationId is changed, middleware looks for matching quick replies from first text request. When there are some, it redirects user
BotService connector for wingbot.ai
Kind: global class
Promise.<Array.<{message:Object, pageId:string}>>
Promise
Param | Type | Default | Description |
---|---|---|---|
processor | Processor | wingbot Processor instance | |
options | Object | ||
options.appId | string | botservice client id | |
options.appSecret | string | botservice client secret | |
[options.grantType] | string | boservice authentication grant_type | |
[options.scope] | string | boservice authentication scope | |
[options.uri] | string | boservice authentication uri | |
[options.welcomeAction] | string | null | "'start'" | conversation start emits postback |
[options.requestLib] | function | request library replacement for testing | |
[options.overPublic] | string | override public key for testing | |
[senderLogger] | console | optional console like chat logger |
Promise.<Array.<{message:Object, pageId:string}>>
Process Facebook request
Kind: instance method of BotService
Returns: Promise.<Array.<{message:Object, pageId:string}>>
- - unprocessed events
Param | Type | Description |
---|---|---|
body | bs.Activity | event body |
Promise
Verify Facebook webhook event
Kind: instance method of BotService
Throws:
Error
when authorization token is invalid or missingParam | Type | Description |
---|---|---|
body | Object | parsed request body |
headers | Object | request headers |
function
Patch, which solves problem with BotFramework. Always, when conversationId is changed, middleware looks for matching quick replies from first text request. When there are some, it redirects user
Kind: global function
Returns: function
- - the middleware
Param | Type | Default | Description |
---|---|---|---|
bot | Router | chatbot itself | |
[startAction] | string | "start" | start action to fetch quick replies |
Example
const { Router } = require('wingbot');
const { botServiceQuickReplyPatch } = require('wingbot-botservice');
const bot = new Router();
// attach as first
const patch = botServiceQuickReplyPatch(bot, 'start');
bot.use(patch);
bot.use('start', (req, res) => {
res.text('Hello', {
goto: 'Go to'
});
});
FAQs
Microsoft BotService connector for wingbot.ai
The npm package wingbot-botservice receives a total of 1 weekly downloads. As such, wingbot-botservice popularity was classified as not popular.
We found that wingbot-botservice demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.