Jump to content
InvisionDevs

Telegram Login Handler

Recommended Posts

i have noticed that the return url has a shortened version of telegram domain .

could it be that the  t.me domain was not being used when you wrote the script.

i can see the error above says "data is not from telegram"

photo_url=https%3A%2F%2Ft.me%2Fi%2Fuserpic%2F320%2FMoFrm-TfM-t5q9_removedforsafgetyg14zL6Kxxx01JPc.jpg

 

 

Link to comment
Share on other sites

i dont know exactly how to read this line of code in  auth.php but it would seem that the  "data not from telegram" error

comes from this line because

something is not egual to 0
 

  if (strcmp($hash, \IPS\Request::i()->hash) !== 0) {

    throw new Exception('Data is NOT from Telegram');
  }

 

Link to comment
Share on other sites

makes no sense . i can login on your site . the steps are exactly same as mine . except on mine i get the NOT from telegram error .

Screenshot_20241004_073302_Samsungcapture.thumb.jpg.8a43a2dfe8f01bd02a7e56c8468b253a.jpg

Screenshot_20241004_073421_Samsungcapture.thumb.jpg.a1d660ef55392558b1efaf0d04bf914d.jpg

 

my site

 

Screenshot_20241004_085021_Samsungcapture.thumb.jpg.273ba86580f716b22a80746dc8f6bacd.jpg

 

Screenshot_20241004_084650_Samsungcapture.thumb.jpg.1e682b1d90aeaa312825f373f59323aa.jpg

 

Screenshot_20241004_085201_Samsungcapture.thumb.jpg.d5b316d39551a2e1f24486225bc34a7f.jpg

 

Screenshot_20241004_084814_Samsungcapture.thumb.jpg.bfa6a60d769aa681f2ce0349397b08f4.jpg

 

SmartSelect_20241004_085357_Chrome.thumb.jpg.c837e4918a4aadbfc77ee3bd61b339f8.jpg

 

as soon as i click this button i get the Not from telegram error .

 

SmartSelect_20241004_085423_Chrome.thumb.jpg.39ea43e44a6f1f278eb92990de5c0a5c.jpg

 

the link in the address bar at that point looks like .

 

https://subdomain.mydomain.com/applications/telegramlogin/interface/telegram/auth.php?key=16783efwertyuiopasd31a71be03f123&id=3819612530&first_name=Brian&last_name=Correll&username=telegramusername&photo_url=https%3A%2F%2Ft.me%2Fi%2Fuserpic%2F320%2FMoFrm-TfM-t5q9_rDXAeWYZg14zL6K3mj7FSIA01JPc.jpg&auth_date=1728047208&hash=dafa2940c12973b93594ec4c32876dd1c2b2d1769b2ab347a1cec69ad1b57a09

 

not sure what it could be . 

like i say removing those 3 lines from auth.php makes it work .

 

Link to comment
Share on other sites

i made a small change to your code just to see what was stored in the

2 vars

  sort($data_check_arr);
  $data_check_string = implode("\n", $data_check_arr);
  $secret_key = hash('sha256', $settings['client_secret'], true);
  $hash = hash_hmac('sha256', $data_check_string, $secret_key);
$testme = \IPS\Request::i()->hash;

  if (strcmp($hash, \IPS\Request::i()->hash) !== 0) {
	throw new Exception('Data is NOT from Telegram '.$hash.' '.$testme);
  }

added the $testme  var

and when the exception is thrown added  $hash and $testme so i could see them in the error

this is whats shown in the system log

Exception: Data is NOT from Telegram 00713a13bc63fb81577484714b875af936cdd89c0132fd2282a6f2bd1de6d882 a03990d9bedb6a2ee429751de8b1ca84d1024300b242873287d00eb7ece7a459 (0)
#0 C:\ips\applications\telegramlogin\interface\telegram\auth.php(25): checkTelegramAuthorization()
#1 {main}

 

very different strings .

 

any ideas ?

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...