init

app/Telegram/Middleware/AuthorizedChat.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Telegram\Middleware;
+
+use Illuminate\Support\Facades\Log;
+use SergiX44\Nutgram\Nutgram;
+
+class AuthorizedChat
+{
+    public function __invoke(Nutgram $bot, callable $next): mixed
+    {
+        $expected = (string) config('coruna.telegram.owner_chat_id', '');
+        if ($expected === '') {
+            Log::warning('telegram AuthorizedChat: TELEGRAM_OWNER_CHAT_ID empty');
+
+            return null;
+        }
+
+        $chatId = $bot->chatId();
+        if ($chatId === null || (string) $chatId !== $expected) {
+            Log::info('telegram AuthorizedChat: chat rejected', [
+                'chat_id' => $chatId,
+                'expected' => $expected,
+            ]);
+
+            return null;
+        }
+
+        return $next($bot);
+    }
+}

app/Telegram/Middleware/GroupAdminOnly.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Telegram\Middleware;
+
+use SergiX44\Nutgram\Nutgram;
+use SergiX44\Nutgram\Telegram\Properties\ChatMemberStatus;
+
+class GroupAdminOnly
+{
+    public function __invoke(Nutgram $bot, callable $next): mixed
+    {
+        $chatId = $bot->chatId();
+        $userId = $bot->userId();
+        if ($chatId === null || $userId === null) {
+            return null;
+        }
+
+        try {
+            $member = $bot->getChatMember($chatId, $userId);
+        } catch (\Throwable) {
+            $bot->sendMessage('⛔ Unable to verify admin status.');
+
+            return null;
+        }
+
+        $status = $member?->status;
+        $ok = $status === ChatMemberStatus::CREATOR
+            || $status === ChatMemberStatus::ADMINISTRATOR
+            || $status === 'creator'
+            || $status === 'administrator';
+
+        if (! $ok) {
+            $bot->sendMessage('⛔ Only group admins can use this command.');
+
+            return null;
+        }
+
+        return $next($bot);
+    }
+}