"Finalize robust Meta WhatsApp webhook verification"

Dockerfile

@@ -5,8 +5,8 @@ USER user
 ENV PATH="/home/user/.local/bin:$PATH"
 
 WORKDIR /app
-
 COPY --chown=user . .
+
 RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"] 

app.py

@@ -1,71 +1,33 @@
 from fastapi import FastAPI, Request
+from fastapi.responses import JSONResponse
 import os
-import json
-import httpx
 
 app = FastAPI()
 
-VERIFY_TOKEN = os.getenv("VERIFY_TOKEN", "dev")
-WHATSAPP_TOKEN = os.getenv("WHATSAPP_TOKEN", "")  # Add this secret later
-
 @app.get("/")
 def root():
     return {"message": "Hello from WhatsApp ChatBot"}
 
 @app.get("/webhook")
-def verify(request: Request):
+async def verify_webhook(request: Request):
     params = request.query_params
-    mode = params.get("hub.mode")
-    token = params.get("hub.verify_token")
-    challenge = params.get("hub.challenge")
-
-    if mode == "subscribe" and token == VERIFY_TOKEN:
-        return int(challenge)
-    return {"status": "forbidden"}, 403
+    verify_token = os.getenv("WHATSAPP_TOKEN", "")
+    if (
+        params.get("hub.mode") == "subscribe"
+        and params.get("hub.verify_token") == verify_token
+    ):
+        return int(params.get("hub.challenge"))
+    return JSONResponse(content={"error": "Invalid token"}, status_code=403)
 
 @app.post("/webhook")
-async def receive_message(request: Request):
+async def receive_webhook(request: Request):
     body = await request.json()
-    print("📩 Incoming WhatsApp message:")
-    print(json.dumps(body, indent=2))
-
-    # Optional: Auto-reply (if a message exists)
-    try:
-        entry = body["entry"][0]
-        changes = entry["changes"][0]
-        value = changes["value"]
-        messages = value.get("messages")
-
-        if messages:
-            msg = messages[0]
-            phone_number = msg["from"]
-            text = msg["text"]["body"]
-
-            print(f"📲 From: {phone_number} | 💬 Text: {text}")
-
-            # Auto-reply
-            async with httpx.AsyncClient() as client:
-                await client.post(
-                    "https://graph.facebook.com/v18.0/me/messages",
-                    headers={
-                        "Authorization": f"Bearer {WHATSAPP_TOKEN}",
-                        "Content-Type": "application/json"
-                    },
-                    json={
-                        "messaging_product": "whatsapp",
-                        "to": phone_number,
-                        "type": "text",
-                        "text": {"body": f"You said: {text}"}
-                    }
-                )
-    except Exception as e:
-        print("⚠️ Error handling message:", e)
-
-    return {"status": "received"}
+    # (Optional) Log or process body here
+    return {"status": "Webhook received"}
 
 @app.post("/send")
-def check_token():
-    if WHATSAPP_TOKEN:
+async def check_token():
+    token = os.getenv("WHATSAPP_TOKEN", "")
+    if token:
         return {"token_loaded": True}
-    else:
-        return {"error": "Token not found in environment"}
+    return JSONResponse(content={"error": "Token not found in environment"}, status_code=400)

requirements.txt

@@ -1,3 +1,2 @@
 fastapi
-uvicorn[standard]
-httpx 
+uvicorn