398c734b93
Webhook lifecycle: GET hub.challenge handshake (constant-time verify-token compare); POST verifies X-Hub-Signature-256 over the RAW body before any parse, Zod-parses the envelope, persists inbound rows (partial-unique wamid = dedupe against Meta's up-to-7-day redelivery), acks 200 fast and defers media processing via the after() idiom. Rejected and rate-limited content always acks 200 and lands as skipped/error rows, never a retryable status. Linking: the settings panel (Installningar -> WhatsApp) mints AC- one-time codes (sha256 stored, 10 min TTL, single use, ambiguity-free alphabet); the webhook consumes the code, binds phone to user (HMAC-peppered hash + AES-256- GCM at rest) and confirms with M3. Keyword commands stopp/start/hjalp; unknown senders get one throttled M1 greeting (1/h, 3/day) behind the sender-quota RPC, with no media download and no content persistence. Intake worker: atomic claim on the message row (the durable job record), company resolution (default -> sole membership -> M6 fallback, no item), per-company inbox quota (ack-and-drop, M17 once per 10 min per sender), MIME allowlist, 10 MB stream-checked media download, exact sha256 duplicate check, then the shared uploadAndExtract funnel (source 'whatsapp', channel_context caption, whatsapp_message_id) and the M4 ack with extracted merchant/total/date. Failures wrap to 'error' + error_message + one M18. uploadAndExtract widened: source 'whatsapp', optional channelMeta + actorId; email/upload paths behaviorally unchanged. Deferred to PR4: burst debounce + combined ack (M5), in-chat company choice (M6 buttons + 8h pin), clarifying questions M7-M10, interpret-answer LLM call, sweep cron, retention cron. Co-authored-by: Jakob Wennberg <jakob.wennberg@gmail.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
65 lines
1.9 KiB
TypeScript
65 lines
1.9 KiB
TypeScript
import { describe, it, expect, beforeEach, afterEach } from 'vitest'
|
|
import {
|
|
normalizePhone,
|
|
hashPhone,
|
|
encryptPhone,
|
|
decryptPhone,
|
|
maskPhone,
|
|
} from '@/extensions/general/whatsapp-inbox/lib/phone-crypto'
|
|
|
|
const HEX_KEY = 'a'.repeat(64)
|
|
|
|
describe('phone-crypto', () => {
|
|
const originalEnv = { ...process.env }
|
|
|
|
beforeEach(() => {
|
|
process.env.WHATSAPP_PHONE_HASH_KEY = 'test-pepper'
|
|
process.env.WHATSAPP_PHONE_ENCRYPTION_KEY = HEX_KEY
|
|
})
|
|
|
|
afterEach(() => {
|
|
process.env = { ...originalEnv }
|
|
})
|
|
|
|
it('normalizes to digits only', () => {
|
|
expect(normalizePhone('+46 70-123 45 67')).toBe('46701234567')
|
|
expect(normalizePhone('46701234567')).toBe('46701234567')
|
|
})
|
|
|
|
it('hashes deterministically and collides across formatting variants', () => {
|
|
const a = hashPhone('46701234567')
|
|
expect(a).toMatch(/^[0-9a-f]{64}$/)
|
|
expect(hashPhone('+46 70 123 45 67')).toBe(a)
|
|
expect(hashPhone('46701234568')).not.toBe(a)
|
|
})
|
|
|
|
it('changes the hash when the pepper changes', () => {
|
|
const a = hashPhone('46701234567')
|
|
process.env.WHATSAPP_PHONE_HASH_KEY = 'other-pepper'
|
|
expect(hashPhone('46701234567')).not.toBe(a)
|
|
})
|
|
|
|
it('throws without the hash key', () => {
|
|
delete process.env.WHATSAPP_PHONE_HASH_KEY
|
|
expect(() => hashPhone('46701234567')).toThrow(/WHATSAPP_PHONE_HASH_KEY/)
|
|
})
|
|
|
|
it('encrypts and decrypts roundtrip', () => {
|
|
const stored = encryptPhone('+46 70 123 45 67')
|
|
expect(stored).toMatch(/^[0-9a-f]+$/)
|
|
expect(decryptPhone(stored)).toBe('46701234567')
|
|
})
|
|
|
|
it('produces a fresh iv per encryption', () => {
|
|
expect(encryptPhone('46701234567')).not.toBe(encryptPhone('46701234567'))
|
|
})
|
|
|
|
it('masks in the +46 70 *** ** 67 shape', () => {
|
|
expect(maskPhone('46701234567')).toBe('+46 70 *** ** 67')
|
|
})
|
|
|
|
it('fully masks too-short values', () => {
|
|
expect(maskPhone('12345')).toBe('+** *** ** **')
|
|
})
|
|
})
|