message: Add fb app secret prood to handover api
diff: @@ -978,8 +978,15 @@ function Facebookbot(configuration) {
  var handover = {
  get_secondary_receivers_list: function(fields, cb) {
  +
  + var uri = 'https://' + api_host + '/' + api_version + '/me/secondary_receivers';
  +
  + if (facebook_botkit.config.require_appsecret_proof) {
  + uri += '&appsecret_proof=' + appsecret_proof;
  + }
  +
  request.get({
  - url: 'https://' + api_host + '/' + api_version + '/me/secondary_receivers',
  + url: uri,
  qs: {
  fields: typeof(fields) == 'string' ? fields : fields.join(','),
  access_token: configuration.access_token
  @@ -1001,6 +1008,12 @@ function Facebookbot(configuration) {
  });
  },
  take_thread_control: function(recipient, metadata, cb) {
  + var uri = 'https://' + api_host + '/' + api_version + '/me/take_thread_control';
  +
  + if (facebook_botkit.config.require_appsecret_proof) {
  + uri += '&appsecret_proof=' + appsecret_proof;
  + }
  +
  var request_body = {
  recipient: {
  id: recipient
  @@ -1008,7 +1021,7 @@ function Facebookbot(configuration) {
  metadata: metadata
  };
  request.post({
  - url: 'https://' + api_host + '/' + api_version + '/me/take_thread_control',
  + url: uri,
  qs: {
  access_token: configuration.access_token
  },
  @@ -1030,6 +1043,12 @@ function Facebookbot(configuration) {
  });
  },
  pass_thread_control: function(recipient, target, metadata, cb) {
  + var uri = 'https://' + api_host + '/' + api_version + '/me/pass_thread_control';
  +
  + if (facebook_botkit.config.require_appsecret_proof) {
  + uri += '&appsecret_proof=' + appsecret_proof;
  + }
  +
  var request_body = {
  recipient: {
  id: recipient
  @@ -1038,7 +1057,7 @@ function Facebookbot(configuration) {
  metadata: metadata
  };
  request.post({
  - url: 'https://' + api_host + '/' + api_version + '/me/pass_thread_control',
  + url: uri,
  qs: {
  access_token: configuration.access_token
  },
  