Nikolay Tatarinov
5dc8c8f255
- Added support for CORS origins and a new environment variable for miniapp access control. - Implemented date validation for API requests to ensure correct date formats. - Updated FastAPI app to allow access without Telegram initData for local development. - Enhanced error handling and logging for better debugging. - Added tests for API functionality and Telegram initData validation. - Updated README with new environment variable details and testing instructions. - Modified Docker and Git ignore files to include additional directories and files.
12 lines
388 B
Plaintext
12 lines
388 B
Plaintext
BOT_TOKEN=your_bot_token_here
|
|
DATABASE_URL=sqlite:///data/duty_teller.db
|
|
MINI_APP_BASE_URL=
|
|
HTTP_PORT=8080
|
|
|
|
# Miniapp access: comma-separated Telegram usernames (no @). Empty = no one allowed.
|
|
ALLOWED_USERNAMES=username1,username2
|
|
ADMIN_USERNAMES=admin1,admin2
|
|
|
|
# Dev only: set to 1 to allow calendar without Telegram initData (insecure; do not use in production).
|
|
# MINI_APP_SKIP_AUTH=1
|