33 lines
1.2 KiB
TypeScript
33 lines
1.2 KiB
TypeScript
import { timingSafeEqual } from "node:crypto";
|
|
import { NextRequest, NextResponse } from "next/server";
|
|
import { handleTelegramUpdate, TelegramUpdate } from "@/lib/telegram";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
|
|
function secretMatches(provided: string, expected: string): boolean {
|
|
const left = Buffer.from(provided);
|
|
const right = Buffer.from(expected);
|
|
return left.length === right.length && timingSafeEqual(left, right);
|
|
}
|
|
|
|
export async function POST(request: NextRequest) {
|
|
const expectedSecret = process.env.TELEGRAM_WEBHOOK_SECRET;
|
|
if (!expectedSecret) {
|
|
return NextResponse.json({ error: "Telegram webhook is not configured" }, { status: 503 });
|
|
}
|
|
|
|
const providedSecret = request.headers.get("x-telegram-bot-api-secret-token") || "";
|
|
if (!secretMatches(providedSecret, expectedSecret)) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
try {
|
|
const update = (await request.json()) as TelegramUpdate;
|
|
await handleTelegramUpdate(update);
|
|
return NextResponse.json({ ok: true });
|
|
} catch (error) {
|
|
console.error("Telegram webhook error:", error);
|
|
return NextResponse.json({ error: "Failed to process Telegram update" }, { status: 500 });
|
|
}
|
|
}
|