Bring the domain whitelisting to Facebook Botkit

facebook_bot.js

@@ -150,6 +150,11 @@ controller.api.thread_settings.menu([
       "url":"https://github.com/howdyai/botkit/blob/master/readme-facebook.md"
     },
 ]);
+controller.api.messenger_profile.domain_whitelist('https://localhost');
+controller.api.messenger_profile.domain_whitelist(['https://127.0.0.1', 'https://0.0.0.0']);
+controller.api.messenger_profile.delete_domain_whitelist('https://localhost');
+controller.api.messenger_profile.delete_domain_whitelist(['https://127.0.0.1', 'https://0.0.0.0']);
+
 
 controller.hears(['quick'], 'message_received', function(bot, message) {
 

lib/Facebook.js

@@ -458,6 +458,18 @@ function Facebookbot(configuration) {
                 };
                 facebook_botkit.api.thread_settings.deleteAPI(message);
             },
+            domain_whitelist: function(payload) {
+                var message = {
+                    "whitelisted_domains": Array.isArray(payload) ? payload : [payload]
+                };
+                facebook_botkit.api.thread_settings.postAPI(message);
+            },
+            delete_domain_whitelist: function(payload) {
+                facebook_botkit.api.thread_settings.deleteAPI('whitelisted_domains');
+            },
+            get_domain_whitelist: function(cb) {
+                facebook_botkit.api.thread_settings.getAPI('whitelisted_domains', cb);
+            },
             postAPI: function(message) {
                 request.post('https://graph.facebook.com/v2.6/me/thread_settings?access_token=' + configuration.access_token,
                     {form: message},

readme-facebook.md

@@ -330,6 +330,20 @@ Create a [persistent menu](https://developers.facebook.com/docs/messenger-platfo
 
 Clear the persistent menu setting
 
+#### controller.api.messenger_profile.domain_whitelist()
+| Argument | Description
+|---  |---
+| payload | A single or a list of domains to add to the whitelist, All domains must be valid and use https. Up to 10 domains allowed.
+
+#### controller.api.messenger_profile.delete_delete_domain_whitelist()
+| Argument | Description
+|---  |---
+| payload | A single or a list of domains to remove from whitelist, All domains must be valid and use https. Up to 10 domains allowed.
+
+#### controller.api.messenger_profile.get_domain_whitelist()
+
+Get a list of the whitelisted domains.
+
 #### Using the Thread Settings API
 
 ```js
@@ -352,6 +366,13 @@ controller.api.thread_settings.menu([
       "url":"https://github.com/howdyai/botkit/blob/master/readme-facebook.md"
     },
 ]);
+controller.api.messenger_api.domain_whitelist('https://localhost');
+controller.api.messenger_api.domain_whitelist(['https://127.0.0.1', 'https://0.0.0.0']);
+controller.api.messenger_api.delete_domain_whitelist('https://localhost');
+controller.api.messenger_api.delete_domain_whitelist(['https://127.0.0.1', 'https://0.0.0.0']);
+controller.api.messenger_api.get_domain_whitelist(function (err, data)  {
+    console.log('****** Whitelisted domains :', data);
+});
 
 controller.hears(['hello'],'facebook_postback', function(bot, message) {
     //...