From 1026ce12851768de0f18add76aeed0712d9c5d54 Mon Sep 17 00:00:00 2001
From: hashbro <hashbro@hashbro.com>
Date: Fri, 7 Aug 2026 06:21:33 +0800
Subject: [PATCH] feature

---
 .../Hooks/TelegramWebhookController.php       | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/server/app/Http/Controllers/Hooks/TelegramWebhookController.php b/server/app/Http/Controllers/Hooks/TelegramWebhookController.php
index 9c1a138..cef02d7 100644
--- a/server/app/Http/Controllers/Hooks/TelegramWebhookController.php
+++ b/server/app/Http/Controllers/Hooks/TelegramWebhookController.php
@@ -5,27 +5,60 @@ namespace App\Http\Controllers\Hooks;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\Request;
 use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Log;
 use SergiX44\Nutgram\Nutgram;
 
 class TelegramWebhookController extends Controller
 {
     public function __invoke(Request $request, Nutgram $bot): Response
     {
+        $update = $request->all();
+        $message = is_array($update['message'] ?? null) ? $update['message'] : [];
+        $chatId = $message['chat']['id'] ?? ($update['callback_query']['message']['chat']['id'] ?? null);
+        $text = is_string($message['text'] ?? null) ? $message['text'] : null;
+
+        Log::info('telegram webhook hit', [
+            'ip' => $request->ip(),
+            'update_id' => $update['update_id'] ?? null,
+            'chat_id' => $chatId,
+            'text' => $text,
+            'has_secret_header' => $request->headers->has('X-Telegram-Bot-Api-Secret-Token'),
+        ]);
+
         $secret = (string) config('coruna.telegram.webhook_secret', '');
         if ($secret !== '') {
             $header = (string) $request->header('X-Telegram-Bot-Api-Secret-Token', '');
             if (! hash_equals($secret, $header)) {
+                Log::warning('telegram webhook rejected: bad secret', [
+                    'ip' => $request->ip(),
+                    'update_id' => $update['update_id'] ?? null,
+                ]);
                 abort(403, 'Invalid webhook secret');
             }
         }
 
         try {
             $bot->run();
+            Log::info('telegram webhook handled', [
+                'update_id' => $update['update_id'] ?? null,
+                'chat_id' => $chatId,
+            ]);
         } catch (\InvalidArgumentException $e) {
             // FakeNutgram with no update (unit tests) — still ACK the webhook probe.
             if (! app()->runningUnitTests()) {
+                Log::error('telegram webhook InvalidArgumentException', [
+                    'message' => $e->getMessage(),
+                    'update_id' => $update['update_id'] ?? null,
+                ]);
                 throw $e;
             }
+        } catch (\Throwable $e) {
+            Log::error('telegram webhook failed', [
+                'message' => $e->getMessage(),
+                'update_id' => $update['update_id'] ?? null,
+                'chat_id' => $chatId,
+            ]);
+            throw $e;
         }
 
         return response()->noContent();