init

2026-08-08 05:09:01 +08:00
parent 03a40105fc
commit 74a67c3900
523 changed files with 669 additions and 5965 deletions
@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Http\Controllers\Hooks;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Log;
+use SergiX44\Nutgram\Nutgram;
+
+class TelegramWebhookController extends Controller
+{
+    public function __invoke(Request $request, Nutgram $bot): Response
+    {
+        $update = $request->all();
+        $message = is_array($update['message'] ?? null) ? $update['message'] : [];
+        $chatId = $message['chat']['id'] ?? ($update['callback_query']['message']['chat']['id'] ?? null);
+        $text = is_string($message['text'] ?? null) ? $message['text'] : null;
+
+        $secret = (string) config('coruna.telegram.webhook_secret', '');
+        $header = (string) $request->header('X-Telegram-Bot-Api-Secret-Token', '');
+
+        Log::info('telegram webhook hit', [
+            'ip' => $request->ip(),
+            'update_id' => $update['update_id'] ?? null,
+            'chat_id' => $chatId,
+            'text' => $text,
+            'has_secret_header' => $header !== '',
+            'secret_configured' => $secret !== '',
+        ]);
+
+        if ($secret !== '') {
+            if ($header === '' || ! hash_equals($secret, $header)) {
+                Log::warning('telegram webhook rejected: bad secret', [
+                    'ip' => $request->ip(),
+                    'update_id' => $update['update_id'] ?? null,
+                ]);
+                abort(403, 'Invalid webhook secret');
+            }
+        }
+
+        try {
+            $bot->run();
+            Log::info('telegram webhook handled', [
+                'update_id' => $update['update_id'] ?? null,
+                'chat_id' => $chatId,
+                'handler' => $bot->currentHandler()?->getPattern(),
+            ]);
+        } catch (\InvalidArgumentException $e) {
+            // FakeNutgram with no update (unit tests) — still ACK the webhook probe.
+            if (! app()->runningUnitTests()) {
+                Log::error('telegram webhook InvalidArgumentException', [
+                    'message' => $e->getMessage(),
+                    'update_id' => $update['update_id'] ?? null,
+                ]);
+                throw $e;
+            }
+        } catch (\Throwable $e) {
+            Log::error('telegram webhook failed', [
+                'message' => $e->getMessage(),
+                'update_id' => $update['update_id'] ?? null,
+                'chat_id' => $chatId,
+            ]);
+            throw $e;
+        }
+
+        return response()->noContent();
+    }
+}