whatsapp-api-js

import { WhatsappAPI } from 'whatsapp-api-js'; import http from 'http'; import { createHmac } from 'crypto'; // Environment variables (replace with your actual values) const PHONE_NUMBER_ID = process.env.WHATSAPP_PHONE_NUMBER_ID ?? ''; const ACCESS_TOKEN = process.env.WHATSAPP_ACCESS_TOKEN ?? ''; const VERIFY_TOKEN = process.env.WHATSAPP_VERIFY_TOKEN ?? 'my-webhook-secret'; const APP_SECRET = process.env.WHATSAPP_APP_SECRET ?? ''; // For signature verification if (!PHONE_NUMBER_ID || !ACCESS_TOKEN || !VERIFY_TOKEN || !APP_SECRET) { console.error('Missing required environment variables. Please set WHATSAPP_PHONE_NUMBER_ID, WHATSAPP_ACCESS_TOKEN, WHATSAPP_VERIFY_TOKEN, and WHATSAPP_APP_SECRET.'); process.exit(1); } const whatsapp = new WhatsappAPI(PHONE_NUMBER_ID, ACCESS_TOKEN); async function sendWelcomeMessage(to: string) { try { const message = await whatsapp.sendMessage({ to, type: 'text', text: { body: 'Hello from whatsapp-api-js! How can I help you today?' }, }); console.log('Message sent successfully:', message); } catch (error) { console.error('Error sending message:', error); } } const server = http.createServer(async (req, res) => { if (req.method === 'GET' && req.url?.startsWith('/webhook')) { const query = new URLSearchParams(req.url.split('?')[1]); const mode = query.get('hub.mode'); const token = query.get('hub.verify_token'); const challenge = query.get('hub.challenge'); if (mode === 'subscribe' && token === VERIFY_TOKEN) { console.log('Webhook verified!'); res.writeHead(200, { 'Content-Type': 'text/plain' }); res.end(challenge); } else { res.writeHead(403); res.end('Forbidden'); } } else if (req.method === 'POST' && req.url === '/webhook') { let body = ''; req.on('data', chunk => { body += chunk.toString(); }); req.on('end', async () => { const signature = req.headers['x-hub-signature'] as string; const [algorithm, hash] = signature?.split('=') ?? []; if (!signature || !algorithm || !hash || algorithm !== 'sha1') { console.error('Missing or invalid X-Hub-Signature header'); res.writeHead(400); res.end('Missing X-Hub-Signature header'); return; } const expectedHash = createHmac('sha1', APP_SECRET) .update(body) .digest('hex'); if (hash !== expectedHash) { console.error('Webhook signature verification failed!'); res.writeHead(403); res.end('Signature verification failed'); return; } console.log('Webhook signature verified successfully.'); try { const webhookPayload = JSON.parse(body); console.log('Received webhook event:', JSON.stringify(webhookPayload, null, 2)); if (webhookPayload.object === 'whatsapp_business_account' && webhookPayload.entry) { for (const entry of webhookPayload.entry) { for (const change of entry.changes) { if (change.field === 'messages') { const messages = change.value.messages; for (const message of messages || []) { if (message.type === 'text') { console.log(`Received text message from ${message.from}: ${message.text?.body}`); await whatsapp.sendMessage({ to: message.from, type: 'text', text: { body: `You said: "${message.text?.body}".` }, }); } } } } } } res.writeHead(200); res.end('Event received'); } catch (e) { console.error('Error processing webhook:', e); res.writeHead(500); res.end('Error processing event'); } }); } else { res.writeHead(404); res.end('Not Found'); } }); const PORT = process.env.PORT || 3000; server.listen(PORT, () => { console.log(`Server listening on port ${PORT}`); console.log('Webhook endpoint: http://localhost:3000/webhook'); console.log('Make sure to set your WhatsApp Business Account API variables.'); // To send a test message, uncomment the line below and replace with a recipient phone number. // sendWelcomeMessage('YOUR_TEST_PHONE_NUMBER'); });