Send a 403 response when the token is invalid. As per FB provided exa…

…mples.
maher-samir · Aug 16, 2016 · a6837fa · a6837fa
1 parent bb592fb
commit a6837fa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/lib/Botly.js b/lib/Botly.js
@@ -64,7 +64,7 @@ Botly.prototype.router = function () {
         if (req.query['hub.verify_token'] === this.verifyToken) {
             res.send(req.query['hub.challenge']);
         } else {
-            res.send('Error, wrong validation token');
+            res.status(403).send('Error, wrong validation token');
         }
     });
 

diff --git a/test/botly_test.js b/test/botly_test.js
@@ -102,6 +102,7 @@ describe('Botly Tests', function () {
         });
 
         router.handle(request, response);
+        expect(response.statusCode).to.equal(403);
         expect(response._getData()).to.equal('Error, wrong validation token');
 
     });
-Original file line number
+Diff line change
@@ Expand Up / @@ -102,6 +102,7 @@ describe('Botly Tests', function () { @@
             });
             router.handle(request, response);
+            expect(response.statusCode).to.equal(403);
             expect(response._getData()).to.equal('Error, wrong validation token');
         });
@@ Expand Down @@