Packages

messenger_bot

1.1.0
1.3.0 1.2.0 retired 1.1.0 retired 1.0.0 retired 1.0.0-rc.8 retired 1.0.0-rc.7 retired 1.0.0-rc.6 retired 1.0.0-rc.5 retired 1.0.0-rc.4 retired 1.0.0-rc.3 retired 1.0.0-rc.2 retired 1.0.0-rc.1 retired 1.0.0-beta9 retired 1.0.0-beta8 retired 1.0.0-beta7 retired 1.0.0-beta6 retired 1.0.0-beta5 retired 1.0.0-beta4 retired 1.0.0-beta3 retired 1.0.0-beta2 retired 1.0.0-beta10 retired 1.0.0-beta1 retired 0.9.2 retired 0.9.1 retired 0.9.0 retired 0.8.2 retired 0.8.1 retired 0.8.0 retired 0.7.3 retired 0.7.2 retired 0.7.1 retired 0.7.0 retired 0.6.0 retired 0.5.2 retired 0.5.1 retired 0.5.0 retired 0.4.0 retired 0.3.0 retired 0.2.1 retired 0.2.0 retired 0.1.0 retired

Unofficial Facebook Messenger Platform chatbot client and webhook handler

Retired package: Deprecated
HexDocs

Current section

Files

Jump to
Readme
41 Versions
5 Dependencies
Dependants
Files
Activity
messenger_bot lib messenger_bot web plugs app_authentication.ex
Raw

lib/messenger_bot/web/plugs/app_authentication.ex 

defmodule MessengerBot.Web.Plug.AppAuthentication do

  @moduledoc false



  ############################################################################

  # Plug implementation to verify the sha1 signature with request body       #

  ############################################################################



  alias MessengerBot.Util.Encryption

  alias MessengerBot.Web.Renderer

  alias Plug.Conn



  @behaviour Plug



  @doc false

  def init(opts) do

    opts

  end



  @doc false

  def call(%{method: "POST"} = conn, _opts) do

    %{app: app, body: body} = Map.take(conn.private, [:app, :body])



    case fetch_signature(conn) do

      ["sha1=" <> signature] ->

        case Encryption.validate_sha1(app.secret, body, signature) do

          :ok -> conn

          {:error, error} -> Renderer.send_error(conn, {:unauthorized, error})

        end



      _ ->

        Renderer.send_error(conn, {:unauthorized, %{signature: "required"}})

    end

  end



  def call(conn, _) do

    conn

  end



  defp fetch_signature(conn) do

    Conn.get_req_header(conn, "x-hub-signature")

  end

end