External/roboco
1
0
Fork 0
mirror of https://github.com/rennf93/roboco.git synced 2026-08-03 07:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: Telegram V3 — Mini App cockpit (initData auth + /tg surface) (#554)

Browse Source 
* feat(telegram): Mini App auth — initData validation mints the cloud-auth session cookie

* feat(panel): /tg Mini App cockpit — approvals, inbox, read-only board, A2A chat

* fix(telegram,panel): unconditional webapp-auth rate limit, future-dated initData rejection, anchored /tg matcher

* docs(map,rag): Telegram Mini App auth route, initData validator, (tg) surface

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>
This commit is contained in:
Renzo F
2026-07-18 02:47:59 +02:00
committed by GitHub
co-authored by Renn F
parent 3b88c706dd
commit c40a7a39c3
33 changed files with 1725 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
panel/src/proxy.ts
+5 -2
View File
@@ -61,8 +61,11 @@ export const config = {
// Everything except the login page itself (avoids a redirect loop), API
// routes (nginx routes /api/* straight to the orchestrator in prod — this
// never sees them there; excluded defensively for a bare `next start`),
// Next's internal asset paths, and the static icon files at the app root.
// the Telegram Mini App surface (/tg authenticates via Telegram initData,
// not the password-login cookie — redirecting it to /login would strand a
// phone session that can never reach that page), Next's internal asset
// paths, and the static icon files at the app root.
matcher: [
"/((?!login|api|_next/static|_next/image|favicon.ico|apple-icon.png|icon.png).*)",
"/((?!login|api|tg(?:/|$)|_next/static|_next/image|favicon.ico|apple-icon.png|icon.png).*)",
],
};