c0mrade 5b64046137 fix: exclude signature field from Telegram initData HMAC validation ...

Telegram Bot API 8.0+ adds a `signature` field to WebApp initData.
Per the official spec, both `hash` and `signature` must be excluded
from the data-check-string before HMAC verification. Without this,
users with newer Telegram clients get a hash mismatch and 401.

Also remove redundant `unquote()` in telegram_auth.py — `parse_qsl`
already URL-decodes values, so the extra decode could corrupt user
data containing percent-like sequences.

2026-02-06 21:51:38 +03:00

..

__init__.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

cache.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

check_reg_process.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

currency_converter.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

decorators.py

Add files via upload

2026-02-04 04:48:29 +03:00

formatters.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

log_handlers.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

markdown_to_telegram.py

feat(notifications): redesign version update notification

2026-02-05 07:29:55 +03:00

message_patch.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

miniapp_buttons.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

pagination.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

payment_logger.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

payment_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

photo_message.py

Update photo_message.py

2026-01-27 00:57:30 +03:00

price_display.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

pricing_utils.py

Simplify total_before_discount calculation

2026-01-27 16:44:30 +03:00

promo_offer.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

security.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

startup_timeline.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

subscription_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

telegram_webapp.py

fix: exclude signature field from Telegram initData HMAC validation

2026-02-06 21:51:38 +03:00

timezone.py

Implement panel_datetime_to_naive_utc function

2026-01-28 11:42:45 +03:00

user_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

validators.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00