austnv/remnawave-minishop
1
0
Fork 0
Code Issues 1 Pull Requests Activity

docs: add Telegram clock-skew note for auth_date

Browse Source
This commit is contained in:
3252a8
2026-04-26 20:33:57 +03:00
parent d60952718e
commit 72b6e93c94
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bot/app/web/webapp_auth.py
+5 -2
View File
@@ -11,6 +11,9 @@ from config.settings import Settings
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)
# 5 minutes clock skew tolerance for Telegram clients
TELEGRAM_CLOCK_SKEW_SECONDS = 300
def _urlsafe_b64encode(raw: bytes) -> str: def _urlsafe_b64encode(raw: bytes) -> str:
return base64.urlsafe_b64encode(raw).decode("ascii").rstrip("=") return base64.urlsafe_b64encode(raw).decode("ascii").rstrip("=")
@@ -107,7 +110,7 @@ def validate_telegram_webapp_init_data(
auth_date = int(auth_date_raw) auth_date = int(auth_date_raw)
now = int(time.time()) now = int(time.time())
max_age = max(60, int(max_age_seconds)) max_age = max(60, int(max_age_seconds))
if auth_date > now + 300 or now - auth_date > max_age: if auth_date > now + TELEGRAM_CLOCK_SKEW_SECONDS or now - auth_date > max_age:
logger.warning("Telegram WebApp initData auth_date is stale.") logger.warning("Telegram WebApp initData auth_date is stale.")
return None return None
@@ -167,7 +170,7 @@ def validate_telegram_login_widget_data(
auth_date = int(auth_date_raw) auth_date = int(auth_date_raw)
now = int(time.time()) now = int(time.time())
max_age = max(60, int(max_age_seconds)) max_age = max(60, int(max_age_seconds))
if auth_date > now + 300 or now - auth_date > max_age: if auth_date > now + TELEGRAM_CLOCK_SKEW_SECONDS or now - auth_date > max_age:
logger.warning("Telegram Login Widget auth_date is stale.") logger.warning("Telegram Login Widget auth_date is stale.")
return None return None