app.js

/*
 * Copyright 2016-present, Facebook, Inc.
 * All rights reserved.
 *
 * This source code is licensed under the license found in the
 * LICENSE file in the root directory of this source tree.
 *
 */

/* jshint node: true, devel: true */
'use strict';

const 
  bodyParser = require('body-parser'),
  config = require('config'),
  crypto = require('crypto'),
  express = require('express'),
  https = require('https'), 
  fs = require('fs'),     
  request = require('request');

var app = express();
app.set('port', process.env.PORT || 5000);
app.set('view engine', 'ejs');
app.use(bodyParser.json({ verify: verifyRequestSignature }));
app.use(express.static('public'));

var mysql = require('mysql');
var connection = mysql.createConnection({
  host: config.get('mysqlHost'),
  user: config.get('mysqlUser'),
  password: config.get('mysqlPass'),
  database: config.get('mysqlDb')
});
/*
 * Be sure to setup your config values before running this code. You can 
 * set them using environment variables or modifying the config file in /config.
 *
 */

const httpsOptions = {
  key: fs.readFileSync('/etc/letsencrypt/live/dpt.emath.tw/privkey.pem'),
  cert: fs.readFileSync('/etc/letsencrypt/live/dpt.emath.tw/cert.pem'),
  ca: fs.readFileSync('/etc/letsencrypt/live/dpt.emath.tw/chain.pem')
};

// App Secret can be retrieved from the App Dashboard
const APP_SECRET = (process.env.MESSENGER_APP_SECRET) ? 
  process.env.MESSENGER_APP_SECRET :
  config.get('appSecret');

// Arbitrary value used to validate a webhook
const VALIDATION_TOKEN = (process.env.MESSENGER_VALIDATION_TOKEN) ?
  (process.env.MESSENGER_VALIDATION_TOKEN) :
  config.get('validationToken');

// Generate a page access token for your page from the App Dashboard
const PAGE_ACCESS_TOKEN = (process.env.MESSENGER_PAGE_ACCESS_TOKEN) ?
  (process.env.MESSENGER_PAGE_ACCESS_TOKEN) :
  config.get('pageAccessToken');

// URL where the app is running (include protocol). Used to point to scripts and 
// assets located at this address. 
const SERVER_URL = (process.env.SERVER_URL) ?
  (process.env.SERVER_URL) :
  config.get('serverURL');

if (!(APP_SECRET && VALIDATION_TOKEN && PAGE_ACCESS_TOKEN && SERVER_URL)) {
  console.error("Missing config values");
  process.exit(1);
}

/*
 * Use your own validation token. Check that the token used in the Webhook 
 * setup is the same token used here.
 *
 */
app.get('/webhook', function(req, res) {
  if (req.query['hub.mode'] === 'subscribe' &&
      req.query['hub.verify_token'] === VALIDATION_TOKEN) {
    console.log("Validating webhook");
    res.status(200).send(req.query['hub.challenge']);
  } else {
    console.error("Failed validation. Make sure the validation tokens match.");
    res.sendStatus(403);          
  }  
});


/*
 * All callbacks for Messenger are POST-ed. They will be sent to the same
 * webhook. Be sure to subscribe your app to your page to receive callbacks
 * for your page. 
 * https://developers.facebook.com/docs/messenger-platform/product-overview/setup#subscribe_app
 *
 */
app.post('/webhook', function (req, res) {
  var data = req.body;

  // Make sure this is a page subscription
  if (data.object == 'page') {
    // Iterate over each entry
    // There may be multiple if batched
    data.entry.forEach(function(pageEntry) {
      var pageID = pageEntry.id;
      var timeOfEvent = pageEntry.time;

      // Iterate over each messaging event
      pageEntry.messaging.forEach(function(messagingEvent) {
        if (messagingEvent.optin) {
          receivedAuthentication(messagingEvent);
        } else if (messagingEvent.message) {
          receivedMessage(messagingEvent);
        } else if (messagingEvent.delivery) {
          receivedDeliveryConfirmation(messagingEvent);
        } else if (messagingEvent.postback) {
          receivedPostback(messagingEvent);
        } else if (messagingEvent.read) {
          receivedMessageRead(messagingEvent);
        } else if (messagingEvent.account_linking) {
          receivedAccountLink(messagingEvent);
        } else {
          console.log("Webhook received unknown messagingEvent: ", messagingEvent);
        }
      });
    });

    // Assume all went well.
    //
    // You must send back a 200, within 20 seconds, to let us know you've 
    // successfully received the callback. Otherwise, the request will time out.
    res.sendStatus(200);
  }
});

/*
 * This path is used for account linking. The account linking call-to-action
 * (sendAccountLinking) is pointed to this URL. 
 * 
 */
app.get('/authorize', function(req, res) {
  var accountLinkingToken = req.query.account_linking_token;
  var redirectURI = req.query.redirect_uri;

  // Authorization Code should be generated per user by the developer. This will 
  // be passed to the Account Linking callback.
  var authCode = "1234567890";

  // Redirect users to this URI on successful login
  var redirectURISuccess = redirectURI + "&authorization_code=" + authCode;

  res.render('authorize', {
    accountLinkingToken: accountLinkingToken,
    redirectURI: redirectURI,
    redirectURISuccess: redirectURISuccess
  });
});

/*
 * Verify that the callback came from Facebook. Using the App Secret from 
 * the App Dashboard, we can verify the signature that is sent with each 
 * callback in the x-hub-signature field, located in the header.
 *
 * https://developers.facebook.com/docs/graph-api/webhooks#setup
 *
 */
function verifyRequestSignature(req, res, buf) {
  var signature = req.headers["x-hub-signature"];

  if (!signature) {
    // For testing, let's log an error. In production, you should throw an 
    // error.
    console.error("Couldn't validate the signature.");
  } else {
    var elements = signature.split('=');
    var method = elements[0];
    var signatureHash = elements[1];

    var expectedHash = crypto.createHmac('sha1', APP_SECRET)
                        .update(buf)
                        .digest('hex');

    if (signatureHash != expectedHash) {
      throw new Error("Couldn't validate the request signature.");
    }
  }
}

/*
 * Authorization Event
 *
 * The value for 'optin.ref' is defined in the entry point. For the "Send to 
 * Messenger" plugin, it is the 'data-ref' field. Read more at 
 * https://developers.facebook.com/docs/messenger-platform/webhook-reference/authentication
 *
 */
function receivedAuthentication(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;
  var timeOfAuth = event.timestamp;

  // The 'ref' field is set in the 'Send to Messenger' plugin, in the 'data-ref'
  // The developer can set this to an arbitrary value to associate the 
  // authentication callback with the 'Send to Messenger' click event. This is
  // a way to do account linking when the user clicks the 'Send to Messenger' 
  // plugin.
  var passThroughParam = event.optin.ref;

  console.log("Received authentication for user %d and page %d with pass " +
    "through param '%s' at %d", senderID, recipientID, passThroughParam, 
    timeOfAuth);
  var data = JSON.parse(Buffer.from(passThroughParam, 'base64').toString());
  console.log(data);
  console.log("missionid:"+data.id+", moodleid:"+data.moodleid);

  // When an authentication is received, we'll send a message back to the sender
  // to let them know it was successful.
  if (data.link=='true') {
    sendAccountLinking(senderID);
  }else{
    askQuestion(senderID, data.id);    
  }
  // sendTextMessage(senderID, "missionid:" + data.id + ", moodleid:" + data.moodleid);
}

/*
 * Message Event
 *
 * This event is called when a message is sent to your page. The 'message' 
 * object format can vary depending on the kind of message that was received.
 * Read more at https://developers.facebook.com/docs/messenger-platform/webhook-reference/message-received
 *
 * For this example, we're going to echo any text that we get. If we get some 
 * special keywords ('button', 'generic', 'receipt'), then we'll send back
 * examples of those bubbles to illustrate the special message bubbles we've 
 * created. If we receive a message with an attachment (image, video, audio), 
 * then we'll simply confirm that we've received the attachment.
 * 
 */
function receivedMessage(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;
  var timeOfMessage = event.timestamp;
  var message = event.message;

  console.log("Received message for user %d and page %d at %d with message:", 
    senderID, recipientID, timeOfMessage);
  console.log(JSON.stringify(message));

  var isEcho = message.is_echo;
  var messageId = message.mid;
  var appId = message.app_id;
  var metadata = message.metadata;

  // You may get a text or attachment but not both
  var messageText = message.text;
  var messageAttachments = message.attachments;
  var quickReply = message.quick_reply;

  if (isEcho) {
    // Just logging message echoes to console
    console.log("Received echo for message %s and app %d with metadata %s", 
      messageId, appId, metadata);
    return;
  } else if (quickReply) {
    var quickReplyPayload = quickReply.payload;
    console.log("Quick reply for message %s with payload %s",
      messageId, quickReplyPayload);
    switch (quickReplyPayload) {
      // case 'DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_FINISH':
      //   sendTextMessage(senderID, "好啦看到了看到了");
        
      //   break;
      // case 'DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_RESERVE':
      //   sendTextMessage(senderID, "自己去網路上預約啦");
      //   break;

      case 'DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_ASK':
        sendTextMessage(senderID, "你有什麼問題？");
        break;
		
	    case 'DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_PREVIEW':
        sendTextMessage(senderID, "是不會自己預習喔？");
        break;
		
      default:
        sendTextMessage(senderID, "Quick reply tapped");
      
        break;
    }

    return;
  }

  if (messageText) {

    // If we receive a text message, check to see if it matches any special
    // keywords and send back the corresponding example. Otherwise, just echo
    // the text we received.
    switch (messageText) {
      case 'help':
        sendTextMessage(senderID, "機器人關鍵字：\n助教安安\n安安助教\n87\n當(ㄉㄤˋ)\n助教救我\n幹\n邊緣\n陪\n無聊\n肥宅");
        break;
      case '肥宅':
        sendTextMessage(senderID, "你才肥宅，你全家都肥宅!");
        break;
      case '嘿柴犬':
        sendVideoMessage(senderID, 'gandog.mov')
        break;
      case '嗨昱勳':
        callGraphAPI(senderID, function (err, res) {
          sendTextMessage(senderID, "嗨"+res.first_name);
        });
        break;
      case '李昱勳':
        sendTextMessage(senderID, "我是個87");
        break;
      case '李柏寬':
        sendTextMessage(senderID, "安安我超宅");
        break;
      case '預約九十通關':
        sendTextMessage(senderID, "祝你不會過");
        break;
      case '助教安安':
        sendTextMessage(senderID, "安安你好，有事嗎？");
        break;
      case '安安助教':
        sendTextMessage(senderID, "安安你好，有事嗎？");
        break;
      case '助教':
        sendTextMessage(senderID, "安好!有事嗎？");
        break;
      case '兇':
        sendTextMessage(senderID, "怕.jpg");
	      sendTextMessage(senderID, "你真他媽幹話王ㄝ!?");	    
        break;	    
      case 'login':
        sendAccountLinking(senderID);
        break;
	 
		
      default:
        if (messageText.search("87")>=0){
          var myArray=['夠了喔','你這個87','你才87','你說誰87？'];
          var rand = myArray[Math.floor(Math.random() * myArray.length)];
          sendTextMessage(senderID, rand);          
        } else if (messageText.search("為什麼") >= 0 && (messageText.search("？") >= 0 || messageText.indexOf("?") >= 0)){
          var text = messageText.replace('為什麼', '').replace('?', '').replace('？', '').replace('呢', '').replace('嗎', '');
          var test = 'http://lmgtfy.com/?q=' + encodeURI(text);
          sendTextMessage(senderID, test);  
        } else if (messageText.search("當") >= 0 && 
                  (messageText.search("計概") >= 0 || messageText.search("線代") >= 0 || messageText.search("普物") >= 0) ){
          var myArray = ['好課值得一修再修', '幫QQ','拍拍'];
          var rand = myArray[Math.floor(Math.random() * myArray.length)];
          sendTextMessage(senderID, rand);   
        } else if (messageText.search("助教") >= 0 && messageText.search("救我") >=0 ){
          sendTextMessage(senderID, '不要。');   
        } else if (messageText.search("幹") >= 0 || messageText.search("靠") >= 0 || messageText.search("乾") >= 0 || messageText.search("shit") >= 0){
          var myArray = ['已截圖', '不要罵髒話', '一定要這樣嗎', 'QAQ'];
          var rand = myArray[Math.floor(Math.random() * myArray.length)];
          sendTextMessage(senderID, rand); 
        } else if (messageText.search("邊緣") >= 0) {
          var myArray = ['夠了喔', '大魯蛇4ni', '邊緣人你好', '你說誰邊緣？'];
          var rand = myArray[Math.floor(Math.random() * myArray.length)];
          sendTextMessage(senderID, rand);
        } else if (messageText.search("幾分") >= 0 && 
                  (messageText.search("計概") >= 0 || messageText.search("線代") >= 0 || messageText.search("普物") >= 0) ){
          var myArray = ['87', '59','不告訴你'];
          var rand = myArray[Math.floor(Math.random() * myArray.length)];
          sendTextMessage(senderID, rand);   
		    } else if (messageText.search("陪") >= 0){
          sendReadReceipt(senderID);
        } else if (messageText.search("無聊") >= 0){
          sendTypingOn(senderID);
        } else if (messageText.search("オラ") >=0 ){
          var count = (messageText.match(/オラ/g)||[]).length;
          var test = '無駄';
          sendTextMessage(senderID, test.repeat(count));
        }
      break;
         
    }
  }
}


/*
 * Delivery Confirmation Event
 *
 * This event is sent to confirm the delivery of a message. Read more about 
 * these fields at https://developers.facebook.com/docs/messenger-platform/webhook-reference/message-delivered
 *
 */
function receivedDeliveryConfirmation(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;
  var delivery = event.delivery;
  var messageIDs = delivery.mids;
  var watermark = delivery.watermark;
  var sequenceNumber = delivery.seq;

  if (messageIDs) {
    messageIDs.forEach(function(messageID) {
      console.log("Received delivery confirmation for message ID: %s", 
        messageID);
    });
  }

  console.log("All message before %d were delivered.", watermark);
}


/*
 * Postback Event
 *
 * This event is called when a postback is tapped on a Structured Message. 
 * https://developers.facebook.com/docs/messenger-platform/webhook-reference/postback-received
 * 
 */
function receivedPostback(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;
  var timeOfPostback = event.timestamp;

  // The 'payload' param is a developer-defined field which is set in a postback 
  // button for Structured Messages. 
  var payload = event.postback.payload;

  console.log("Received postback for user %d and page %d with payload '%s' " + 
    "at %d", senderID, recipientID, payload, timeOfPostback);

  // When a postback is called, we'll send a message back to the sender to 
  // let them know it was successful
  sendTextMessage(senderID, "Postback called");
}

/*
 * Message Read Event
 *
 * This event is called when a previously-sent message has been read.
 * https://developers.facebook.com/docs/messenger-platform/webhook-reference/message-read
 * 
 */
function receivedMessageRead(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;

  // All messages before watermark (a timestamp) or sequence have been seen.
  var watermark = event.read.watermark;
  var sequenceNumber = event.read.seq;

  console.log("Received message read event for watermark %d and sequence " +
    "number %d", watermark, sequenceNumber);
}

/*
 * Account Link Event
 *
 * This event is called when the Link Account or UnLink Account action has been
 * tapped.
 * https://developers.facebook.com/docs/messenger-platform/webhook-reference/account-linking
 * 
 */
function receivedAccountLink(event) {
  var senderID = event.sender.id;
  var recipientID = event.recipient.id;

  var status = event.account_linking.status;
  var authCode = event.account_linking.authorization_code;
  var data = JSON.parse(Buffer.from(authCode, 'base64').toString());
  console.log("auth:" + data.auth + ", moodleid:" + data.moodleid);
  connection.query('UPDATE `users` SET `psid` = ?  where moodleid = ?', [senderID, data.moodleid], function (error, results, fields) {
    if (error) throw error;
    sendTextMessage(senderID, "歡迎登入大平台～"); 
  });
  console.log("Received account link event with for user %d with status %s " +
    "and auth code %s ", senderID, status, authCode);
}


/*
 * Send a text message using the Send API.
 *
 */
function sendTextMessage(recipientId, messageText) {
  var messageData = {
    recipient: {
      id: recipientId
    },
    message: {
      text: messageText,
      metadata: "DEVELOPER_DEFINED_METADATA"
    }
  };

  callSendAPI(messageData);
}

function sendVideoMessage(recipientId,filename) {
  var messageData = {
    recipient: {
      id: recipientId
    },
    message: {
      attachment: {
        type: "video",
        payload: {
          url: SERVER_URL + "/assets/" + filename
        }
      }
    }
  };

  callSendAPI(messageData);
}

function askQuestion(recipientId,missionid) {
  var messageData = {
    recipient: {
      id: recipientId
    },
    message: {
      quick_replies: [
        // {
        //   "content_type": "text",
        //   "title": "我完成了",
        //   "payload": "DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_FINISH"
        // },
        // {
        //   "content_type": "text",
        //   "title": "我要預約",
        //   "payload": "DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_RESERVE"
        // },
        {
          "content_type": "text",
          "title": "我要發問",
          "payload": "DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_ASK"
        },
		    {
          "content_type": "text",
          "title": "我要複習",
          "payload": "DEVELOPER_DEFINED_PAYLOAD_FOR_PICKING_PREVIEW"
        }
      ]
    }
  };
  
  if(missionid=="moodle"){
      messageData.message.text = "請問你需要什麼幫助嗎？";
      callSendAPI(messageData);   
  }else{
    connection.query('SELECT * FROM mission where id= ?', [missionid], function (error, results, fields) {
      if (error) throw error;
      console.log('The solution is: ', results[0].name);
      var title = results[0].name;
      messageData.message.text = "請問你在「" + title + "」關卡\n需要什麼幫助嗎？";
      callSendAPI(messageData);    
    });
  }


}


/*
 * Send a read receipt to indicate the message has been read
 *
 */
function sendReadReceipt(recipientId) {
  console.log("Sending a read receipt to mark message as seen");

  var messageData = {
    recipient: {
      id: recipientId
    },
    sender_action: "mark_seen"
  };

  callSendAPI(messageData);
}

/*
 * Turn typing indicator on
 *
 */
function sendTypingOn(recipientId) {
  console.log("Turning typing indicator on");

  var messageData = {
    recipient: {
      id: recipientId
    },
    sender_action: "typing_on"
  };

  callSendAPI(messageData);
}

/*
 * Turn typing indicator off
 *
 */
function sendTypingOff(recipientId) {
  console.log("Turning typing indicator off");

  var messageData = {
    recipient: {
      id: recipientId
    },
    sender_action: "typing_off"
  };

  callSendAPI(messageData);
}

/*
 * Send a message with the account linking call-to-action
 *
 */
function sendAccountLinking(recipientId) {
  var messageData = {
    recipient: {
      id: recipientId
    },
    message: {
      attachment: {
        type: "template",
        payload: {
          template_type: "button",
          text: "Welcome. Link your account.",
          buttons:[{
            type: "account_link",
            url: "http://dpt.emath.tw/index.php/welcome/index"
          }]
        }
      }
    }
  };  

  callSendAPI(messageData);
}

/*
 * Call the Send API. The message data goes in the body. If successful, we'll 
 * get the message id in a response 
 *
 */
function callSendAPI(messageData) {
  request({
    uri: 'https://graph.facebook.com/v2.6/me/messages',
    qs: { access_token: PAGE_ACCESS_TOKEN },
    method: 'POST',
    json: messageData

  }, function (error, response, body) {
    if (!error && response.statusCode == 200) {
      var recipientId = body.recipient_id;
      var messageId = body.message_id;

      if (messageId) {
        console.log("Successfully sent message with id %s to recipient %s", 
          messageId, recipientId);
      } else {
      console.log("Successfully called Send API for recipient %s", 
        recipientId);
      }
    } else {
      console.error("Failed calling Send API", response.statusCode, response.statusMessage, body.error);
    }
  });  
}

function callGraphAPI(recipientId,callback) {
  request({
    uri: 'https://graph.facebook.com/v2.6/' + recipientId,
    qs: { access_token: PAGE_ACCESS_TOKEN, fields:'first_name,last_name'},
    method: 'GET'

  }, function (error, response, body) {
    if (!error && response.statusCode == 200) {
      body = JSON.parse(body);      
      var firstname = body.first_name;
      var lastname = body.last_name;
      if (lastname) {
        console.log("Successfully sent message with id %s to recipient %s",
          lastname, recipientId);
      } else {
        console.log("Successfully called Send API for recipient %s",
          recipientId);
      }
      return callback(null, body);
    } else {
      console.error("Failed calling Send API", response.statusCode, response.statusMessage, body.error);
    }
  });
}

// Start server
// Webhooks must be available via SSL with a certificate signed by a valid 
// certificate authority.
https.createServer(httpsOptions, app).listen(app.get('port'), function () {
  console.log('Node app is running on port', app.get('port'));
});

module.exports = app;