Socialift

Instagram, Facebook va LinkedIn uchun asinxron Python SDK — OAuth, kontent, Direct chat, Lead Ads va webhook'lar. Bitta kutubxona, uchta platforma, bitta xato modeli.

pip install socialift

import asyncio
from socialift import Facebook

async def main():
    async with Facebook(app_id="...", app_secret="...", config_id="...") as fb:
        token = await fb.exchange_code(code, redirect_uri="https://siz.uz/cb")

        for page in await fb.pages(token.access_token):
            print(page.name, "→ instagram:", page.instagram_username)

asyncio.run(main())

Nega Socialift

Meta va LinkedIn API'lari bilan ishlash — hujjatlarda yozilmagan o'nlab tafsilotni bilishni talab qiladi. Socialift ularni sizdan yashiradi:

Imkoniyatlar

Litsenziya va narxlar

Socialift — tijorat mahsuloti. Ishlatish uchun amaldagi obuna kaliti kerak:

export SOCIALIFT_LICENSE_KEY="slk_..."

# yoki kodda
from socialift import Facebook
fb = Facebook(app_id="...", app_secret="...", license_key="slk_...")

Kalit olish: https://socialift.uz/pricing

Rejaga kirmagan imkoniyatni chaqirsangiz so'rov Meta'ga yuborilishidan oldin to'xtatiladi:

from socialift import FeatureNotInPlan

try:
    await fb.leads(form_id, page_token)
except FeatureNotInPlan as exc:
    print(exc)   # `lead_ads` imkoniyati `starter` rejasiga kirmaydi...

export SOCIALIFT_LICENSE_OFFLINE=1   # faqat imzo tekshiriladi

Misollar

Instagram Direct — to'liq suhbatdosh profili

/me/conversations javobida ishtirokchi haqida atigi id va username keladi. SDK har bir suhbatdosh uchun User Profile API'ga parallel so'rov yuboradi (asyncio.gather, 8 tadan) va natijani 6 soatga keshlaydi:

from socialift import Instagram

ig = Instagram.via_facebook(app_secret=FB_APP_SECRET)
chats = await ig.conversations(page_token, page_id="1111", ig_user_id="2222")

for chat in chats["data"]:
    c = chat["contact"]
    print(c["name"], c["follower_count"], "bizni kuzatadi:", c["is_user_follow_business"])

Lead Ads — webhook'dan CRM'gacha

from socialift import Facebook, verify_request, parse_events

# 1. Imzoni tekshirish (XOM baytlar!)
if not verify_request(APP_SECRET, raw_body, request.headers):
    return 403

# 2. Hodisalarni ajratish
for event in parse_events(payload):
    if event.field != "leadgen":
        continue
    if await already_processed(event.key):     # takroriy yetkazish
        continue

    # 3. Meta lead MAZMUNINI yubormaydi — Graph API'dan o'qiymiz
    async with Facebook(app_id=APP_ID, app_secret=APP_SECRET) as fb:
        lead = await fb.lead(event.leadgen_id, page_token)

    print(lead.fields)          # {'full_name': ..., 'phone': '+998901234567'}
    print(lead.campaign_name)   # qaysi reklamadan kelgan

Xatolarni ishlash

from socialift import AuthError, PermissionError, RateLimitError

try:
    await ig.send_message(recipient_id, token, "Salom!")
except RateLimitError as exc:
    await asyncio.sleep(exc.retry_after or 60)
except PermissionError:
    ...   # 24 soatlik javob oynasi tugagan
except AuthError:
    ...   # token bekor qilingan → qayta login

To'liq server

Tayyor backend kerak bo'lsa — webhook qabul qilish, PostgreSQL'ga yozish, lead'larni CRM'ga imzolangan webhook bilan uzatish, Django admin:

pip install "socialift[server]"

socialift init      # .env namunasi + kalitlar generatsiyasi
socialift check     # sozlamalar to'g'rimi
socialift migrate   # alembic upgrade head
socialift serve     # http://localhost:8000/docs

62 endpoint · PostgreSQL + Redis talab qilinadi · docs/BACKEND_SETUP.md

Hujjatlar

Xavfsizlik — qisqacha

• Token'lar SDK'da saqlanmaydi. Har chaqiruvga argument sifatida uzatiladi — bitta klient bilan ko'p foydalanuvchi nomidan parallel ishlash xavfsiz.
• appsecret_proof har Graph so'rovga avtomatik qo'shiladi: o'g'irlangan token boshqa muhitdan ishlamaydi.
• Page token repr() da ko'rinmaydi — log'ga tasodifan tushmaydi.
• Webhook imzosi hmac.compare_digest bilan — timing attack'dan himoya.
• Server: rate limiting, TrustedHostMiddleware, xavfsizlik sarlavhalari, prod'da yopiq /docs, bazadagi token'lar Fernet bilan shifrlangan.

Batafsil va zaiflik xabar berish: SECURITY.md.

Platformalarning real cheklovlari

Bularni SDK yashira olmaydi:

• Instagram xabar matni faqat oxirgi 20 kun uchun keladi.
• Javob oynasi — mijozning oxirgi xabaridan 24 soat.
• Suhbatdosh profili faqat u biznesga yozgan bo'lsa ochiladi.
• Demografika obunachilar 100 tadan kam bo'lsa berilmaydi.
• Development rejimidagi Meta app haqiqiy foydalanuvchilardan webhook olmaydi — App Review kerak.
• Page webhook obunasi app sozlamasidan alohida: subscribe_page().

Talablar

Python 3.11+ · aiohttp · cryptography

Qo'llab-quvvatlash

• Hujjatlar: https://github.com/1fayoz/socialift/tree/main/docs
• Savol va xatolar: https://github.com/1fayoz/socialift/issues
• Tijorat: hello@socialift.uz

Litsenziya

Tijorat litsenziyasi — LICENSE. Obuna: https://socialift.uz/pricing