Django Integration¶

from telegram_webapp_auth.auth import generate_secret_key

TELEGRAM_BOT_TOKEN = env.str("TELEGRAM_BOT_TOKEN")
TELEGRAM_SECRET_KEY = generate_secret_key(TELEGRAM_BOT_TOKEN)

from datetime import timedelta

from django.conf import settings
from django.contrib.auth import get_user_model
from django.core.exceptions import PermissionDenied
from django.http import HttpRequest
from django.http import HttpResponse

from telegram_webapp_auth.auth import TelegramAuthenticator
from telegram_webapp_auth.errors import ExpiredInitDataError
from telegram_webapp_auth.errors import InvalidInitDataError


class TelegramWebAppAuthMiddleware:
    def __init__(self, get_response) -> None:
        self.get_response = get_response
        self.authenticator = TelegramAuthenticator(settings.TELEGRAM_SECRET_KEY)

    def __call__(self, request: HttpRequest) -> HttpResponse:
        auth_header = request.headers.get("Authorization")
        if not auth_header:
            raise PermissionDenied("Authorization header is required")

        try:
            init_data = self.authenticator.validate(
                init_data=auth_header,
                expr_in=timedelta(minutes=5),
            )
        except ExpiredInitDataError as exc:
            raise PermissionDenied("Telegram init data has expired") from exc
        except InvalidInitDataError as exc:
            raise PermissionDenied("Telegram init data is invalid") from exc

        if init_data.user is None:
            raise PermissionDenied("Telegram user data is required")

        user_model = get_user_model()
        request.user = user_model.objects.filter(tg_id=init_data.user.id).first()
        if request.user is None:
            raise PermissionDenied("Telegram user is not registered")

        return self.get_response(request)

MIDDLEWARE = [
    # Other middleware classes...
    "path.to.TelegramWebAppAuthMiddleware",
]