root/coruna-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature

Browse Source
This commit is contained in:
hashbro
2026-08-07 06:26:49 +08:00
parent 1026ce1285
commit 03a40105fc
5 changed files with 42 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/app/Http/Controllers/Hooks/TelegramWebhookController.php
+7 -4
View File
@@ -17,18 +17,20 @@ class TelegramWebhookController extends Controller
$chatId = $message['chat']['id'] ?? ($update['callback_query']['message']['chat']['id'] ?? null);
$text = is_string($message['text'] ?? null) ? $message['text'] : null;
$secret = (string) config('coruna.telegram.webhook_secret', '');
$header = (string) $request->header('X-Telegram-Bot-Api-Secret-Token', '');
Log::info('telegram webhook hit', [
'ip' => $request->ip(),
'update_id' => $update['update_id'] ?? null,
'chat_id' => $chatId,
'text' => $text,
'has_secret_header' => $request->headers->has('X-Telegram-Bot-Api-Secret-Token'),
'has_secret_header' => $header !== '',
'secret_configured' => $secret !== '',
]);
$secret = (string) config('coruna.telegram.webhook_secret', '');
if ($secret !== '') {
$header = (string) $request->header('X-Telegram-Bot-Api-Secret-Token', '');
if (! hash_equals($secret, $header)) {
if ($header === '' || ! hash_equals($secret, $header)) {
Log::warning('telegram webhook rejected: bad secret', [
'ip' => $request->ip(),
'update_id' => $update['update_id'] ?? null,
@@ -42,6 +44,7 @@ class TelegramWebhookController extends Controller
Log::info('telegram webhook handled', [
'update_id' => $update['update_id'] ?? null,
'chat_id' => $chatId,
'handler' => $bot->currentHandler()?->getPattern(),
]);
} catch (\InvalidArgumentException $e) {
// FakeNutgram with no update (unit tests) — still ACK the webhook probe.