เริ่มต้นใช้งาน

BOT_TOKEN=hb_xxxxxxxxxxxxxxxx
WEBHOOK_SECRET=xxxxxxxxxxxxxxxxxxxxxxxx

// npm install express
import crypto from "node:crypto";
import express from "express";

const app = express();
app.use(express.raw({ type: "application/json" }));

function verified(req) {
  const expected = "sha256=" + crypto
    .createHmac("sha256", process.env.WEBHOOK_SECRET)
    .update(req.body).digest("hex");
  const got = req.get("X-Helos-Bot-Signature") || "";
  return got.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(got), Buffer.from(expected));
}

app.post("/webhook", async (req, res) => {
  if (!verified(req)) return res.sendStatus(401);
  res.sendStatus(200); // ตอบ 2xx ก่อน แล้วค่อยทำงาน

  const { event } = JSON.parse(req.body);
  if (event.type !== "message.create" || !event.reply_token) return;

  await fetch("https://bots.gugarhices.com/v1/messages/reply", {
    method: "POST",
    headers: {
      "Authorization": "Bearer " + process.env.BOT_TOKEN,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      replyToken: event.reply_token,
      messages: [{ type: "text", text: "ได้รับแล้ว: " + event.content }],
    }),
  });
});

app.listen(3000);

curl -X POST "https://bots.gugarhices.com/v1/bots/@me/webhook" \
  -H "Authorization: Bearer $BOT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://your-server.example.com/webhook" }'