Perfect_Python500/MineGeo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Expand Telegram signature validation tests
Some checks failed
Deploy MineGeo to Dokploy / deploy (push) Failing after 4m46s
Details

Browse Source
This commit is contained in:
perfect_python500
2026-11-01 15:25:26 +05:00
parent 3afad02686
commit e5a07755e7
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/telegram-webapp.test.ts
View File

@@ -23,5 +23,7 @@ test("Telegram init data verifies identity and rejects tampering, duplicates, an
assert.equal(verifyTelegramInitData(data, "wrong-token"), null); assert.equal(verifyTelegramInitData(data, "wrong-token"), null);
assert.equal(verifyTelegramInitData(data.replace("applicant", "impostor"), token), null); assert.equal(verifyTelegramInitData(data.replace("applicant", "impostor"), token), null);
assert.equal(verifyTelegramInitData(data + "&user=other", token), null); assert.equal(verifyTelegramInitData(data + "&user=other", token), null);
assert.equal(verifyTelegramInitData(data + "&auth_date=1", token), null);
assert.equal(verifyTelegramInitData(data.replace(/hash=[a-f0-9]+/, "hash=not-a-hash"), token), null);
assert.equal(verifyTelegramInitData(signedData(Math.floor(Date.now() / 1000) - 90000), token), null); assert.equal(verifyTelegramInitData(signedData(Math.floor(Date.now() / 1000) - 90000), token), null);
}); });