Class: SpreeCmCommissioner::TelegramWebAppInitDataValidator

Inherits:
BaseInteractor
  • Object
show all
Defined in:
app/interactors/spree_cm_commissioner/telegram_web_app_init_data_validator.rb

Instance Method Summary collapse

Instance Method Details

#call ⇒ Object 



5
6
7
8
9
10
11
12
 
# File 'app/interactors/spree_cm_commissioner/telegram_web_app_init_data_validator.rb', line 5

def call
  context.decoded_telegram_init_data = Rack::Utils.parse_nested_query(telegram_init_data).to_h

  context.initial_hash = context.decoded_telegram_init_data['hash']
  context.verify_hash = generate_verify_hash

  context.fail!(message: 'Could not verify hash') if context.verify_hash != context.initial_hash
end

#generate_verify_hash ⇒ Object

core.telegram.org/bots/webapps#validating-data-received-via-the-web-app

data_check_string = <sorted alphabetically, in the format key=<value> with a line feed character (‘n’, 0x0A) used as separator> secret_key = HMAC_SHA256(<bot_token>, “WebAppData”) verify_hash = hex(HMAC_SHA256(data_check_string, secret_key))



20
21
22
23
24
25
 
# File 'app/interactors/spree_cm_commissioner/telegram_web_app_init_data_validator.rb', line 20

def generate_verify_hash
  data_check_string = context.decoded_telegram_init_data.filter_map { |k, v| "#{k}=#{v}" unless k == 'hash' }.sort.join("\n")

  secret_key = OpenSSL::HMAC.digest('sha256', 'WebAppData', bot_token)
  OpenSSL::HMAC.hexdigest('sha256', secret_key, data_check_string)
end