Update configuration and access control for Telegram miniapp
- Added ALLOWED_USERNAMES and ADMIN_USERNAMES to .env.example for user access control. - Implemented validation of Telegram Web App initData in a new telegram_auth.py module. - Enhanced API to check user access before fetching duties. - Updated README with instructions for configuring miniapp access. - Modified .dockerignore and .gitignore to include data directory and database files.
This commit is contained in:
@@ -2,3 +2,7 @@ BOT_TOKEN=your_bot_token_here
|
||||
DATABASE_URL=sqlite:///data/duty_teller.db
|
||||
MINI_APP_BASE_URL=
|
||||
HTTP_PORT=8080
|
||||
|
||||
# Miniapp access: comma-separated Telegram usernames (no @). Empty = no one allowed.
|
||||
ALLOWED_USERNAMES=username1,username2
|
||||
ADMIN_USERNAMES=admin1,admin2
|
||||
|
||||
Reference in New Issue
Block a user