suggestion: generate Telegram webhook secret token on Tranquil startup

did:plc:6l7xbgjswn2oauofpz3xagvg opened this 29d ago 0 comments
did:plc:6l7xbgjswn2oauofpz3xagvg opened 29d ago

While setting up the Telegram communication channel, I noticed that Tranquil required to configure a webhook secret token, and was a bit confused on why it did, as usually applications manage that themselves once they have the bot token.

Since you're already setting the Telegram webhook URL yourselves with TelegramSender::set_webhook, you can generate a webhook secret on-the-fly and pass it across the application instead of requiring it to be configured manually via the telegram.webhook_secret configuration option.

This would make configuration simpler, and also prevent administrator error, in case they don't understand how Telegram webhooks work and set that value to a secret another bot of theirs is already using.

No activity yet.

cospan · schematic version control on atproto built on AT Protocol