From fc7c4c6561d59d8351299507e223c4d57513c7b7 Mon Sep 17 00:00:00 2001
From: glpshchn <464976@niuitmo.ru>
Date: Tue, 11 Nov 2025 01:48:18 +0300
Subject: [PATCH] Update files
---
backend/middleware/auth.js | 16 +++++++++++++---
frontend/index.html | 16 +++++++++++++++-
frontend/src/utils/api.js | 3 +++
moderation/frontend/index.html | 16 +++++++++++++++-
moderation/frontend/src/utils/api.js | 3 +++
5 files changed, 49 insertions(+), 5 deletions(-)
diff --git a/backend/middleware/auth.js b/backend/middleware/auth.js
index 76123b5..5fdf166 100644
--- a/backend/middleware/auth.js
+++ b/backend/middleware/auth.js
@@ -50,14 +50,24 @@ const ensureUserSettings = async (user) => {
const authenticate = async (req, res, next) => {
try {
const authHeader = req.headers.authorization || '';
+ let initDataRaw = null;
- if (!authHeader.startsWith('tma ')) {
+ if (authHeader.startsWith('tma ')) {
+ initDataRaw = authHeader.slice(4).trim();
+ }
+
+ if (!initDataRaw) {
+ const headerInitData = req.headers['x-telegram-init-data'];
+ if (headerInitData && typeof headerInitData === 'string') {
+ initDataRaw = headerInitData.trim();
+ }
+ }
+
+ if (!initDataRaw) {
logSecurityEvent('AUTH_TOKEN_MISSING', req);
return res.status(401).json({ error: OFFICIAL_CLIENT_MESSAGE });
}
- const initDataRaw = authHeader.slice(4).trim();
-
if (!initDataRaw) {
logSecurityEvent('EMPTY_INITDATA', req);
return res.status(401).json({ error: OFFICIAL_CLIENT_MESSAGE });
diff --git a/frontend/index.html b/frontend/index.html
index 53ed8b4..88eb600 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -6,7 +6,21 @@
NakamaHost
-
+