feat: add Telegram album purchase bot

app/api/telegram/webhook/route.ts

@@ -0,0 +1,32 @@
+import { timingSafeEqual } from "node:crypto";
+import { NextRequest, NextResponse } from "next/server";
+import { handleTelegramUpdate, TelegramUpdate } from "@/lib/telegram";
+
+export const dynamic = "force-dynamic";
+
+function secretMatches(provided: string, expected: string): boolean {
+  const left = Buffer.from(provided);
+  const right = Buffer.from(expected);
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+
+export async function POST(request: NextRequest) {
+  const expectedSecret = process.env.TELEGRAM_WEBHOOK_SECRET;
+  if (!expectedSecret) {
+    return NextResponse.json({ error: "Telegram webhook is not configured" }, { status: 503 });
+  }
+
+  const providedSecret = request.headers.get("x-telegram-bot-api-secret-token") || "";
+  if (!secretMatches(providedSecret, expectedSecret)) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+
+  try {
+    const update = (await request.json()) as TelegramUpdate;
+    await handleTelegramUpdate(update);
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    console.error("Telegram webhook error:", error);
+    return NextResponse.json({ error: "Failed to process Telegram update" }, { status: 500 });
+  }
+}