Maintenance in progress: we are indexing a large batch of new skills. Some pages may load slowly or briefly show no results. Nothing is lost, and everything is back to normal within the hour.
Profile My skills Saved Collections Edit profile Submit a skill

Telegram Mini App Init Data Authentication

Use for Telegram work when Codex should validate Telegram Mini App initData on the server, enforce expiry, map identity, and create safe sessions.

srednoff888-art 1ac0edc 2 files · 1.6 KB Updated 1 repo stars
Coding & Dev Tools

File contents

telegram mini app init data authentication

Workflow

  1. Confirm the business outcome, owner, source data, constraints, and success metric.
  2. Inspect the project and available account or analytics evidence before proposing changes.
  3. Use official documentation for current platform behavior and retain source provenance.
  4. Produce an evidence-backed plan with assumptions, dependencies, and measurable validation.
  5. Run only read-only diagnostics by default; gate external, paid, production, or publishing actions behind explicit approval.

Domain Focus

validate Telegram Mini App initData on the server, enforce expiry, map identity, and create safe sessions.

Official Sources

https://core.telegram.org/bots/webapps | https://core.telegram.org/bots/api

Guardrails

  • Treat initDataUnsafe and browser-provided user identity as untrusted.
  • Validate initData on the server, enforce a bounded auth_date lifetime, and never expose bot tokens.
  • Require explicit approval for payments, messages, production bot settings, or externally visible launches.

srednoff888-art/srednoff-os/tree/main/.codex/skills/telegram-mini-app-init-data-authentication commit 1ac0edc6d8

Browse category

Frequently asked questions

npx skillmds add srednoff888-art/telegram-mini-app-init-data-authentication