Ë « str.F)Ústrict_parsingr)ÚurllibÚparseÚparse_qsÚitems)Ú init_dataÚ parsed_qsÚkeyÚvaluess rÚparse_init_datarsH€ä—‘×%Ñ% iÀÐ%ÓF€IØ.7¯o©oÔ.?Ô@Ñ.?™{˜s FˆC˜‘‰NÐ.?Ò@Ð@ùÓ@sµA cóf‡—djˆfd„t‰j««D««S)z¬ Construct the data_check_string from parsed initData dict. This follows Telegram's requirement of alphabetical key sorting and excludes the `hash` field. Ú c3ó<•K—|]}|dk7r|›d‰|›–—Œyw)ÚhashÚ=Nr)Ú.0rÚparsed_datas €rÚ z*build_data_check_string..#s1øèø€ðá-ˆCØ&Š=ðˆ%ˆq˜SÑ!Ð"Ô#Ù-ùsƒ)ÚjoinÚsortedÚkeys)r#s`rÚbuild_data_check_stringr(s1ø€ð9‰9óä˜+×*Ñ*Ó,Ô-óóðrcó—|std«‚tj|j««j «}tj||j«tj«j«S)z8Calculate the HMAC-SHA-256 hash for a data_check_string.úBot token not configured)r ÚhashlibÚsha256ÚencodeÚdigestÚhmacÚnewÚ hexdigest)Údata_check_stringÚ bot_tokenÚ secret_keys rÚcalculate_init_data_hashr5*s[€áÜ)Ð*DÓEÐEä—‘ × 0Ñ 0Ó 2Ó3×:Ñ:Ó<€JÜ8‰8JÐ 1× 8Ñ 8Ó :¼G¿N¹NÓK×UÑUÓWÐWr)Ú auth_dateÚquery_idÚstart_paramÚextra_paramsc ó<—|std«‚i}|r<|j|j«Dcic]\}}|t|«“Œc}}«|j dtj|««|j dt|xs:ttjtj«j««««|r||d<|r||d<t|«} t| |«|d<tj j#|«| |ddœScc}}w)zó Build a signed initData string that mirrors Telegram's format. Returns a dict containing: - init_data: URL-encoded string ready to use - data_check_string: the string that was signed - hash: the calculated hash value r*Úuserr6r7r8r )rr2r )r ÚupdaterÚstrÚ setdefaultÚjsonÚdumpsÚintrÚnowrÚutcÚ timestampr(r5rrÚ urlencode) r;r3r6r7r8r9ÚparamsrÚvaluer2s rÚgenerate_signed_init_datarH3s€ñ"Ü)Ð*DÓEÐEà€FÙØ ‰ ¸×9KÑ9KÔ9MÔNÑ9M©:¨3°sœC ›J‘Ð9MÒNÔOà ×ÑfœdŸj™j¨Ó.Ô/Ø ×ÑØÜˆIÒDœœXŸ\™\¬(¯,©,Ó7×AÑAÓCÓDÓEôñ Ø%ˆˆzÑÙØ +ˆˆ}Ñä/°Ó7ÐÜ-Ð.?ÀÓK€Fˆ6Nô—\‘\×+Ñ+¨FÓ3Ø.Øv‘ñðùó!Os°D có”—t|«}t|«} t||«}|j d«||dœS#t$rd}YŒ"wxYw)z¢ Provide a debug-friendly view of the initData signature inputs/outputs. Useful for development harnesses to compare provided and calculated hashes. Nr )Ú provided_hashÚcalculated_hashr2)rr(r5r Úget)rr3Úparsedr2rKs rÚinit_data_debug_snapshotrN`s_€ô˜YÓ '€FÜ/°Ó7ÐðÜ2Ð3DÀiÓPˆð Ÿ™ FÓ+Ø*Ø.ñðøô'òØŠðús˜9¹AÁAcó@—|std«‚t|«}d|vrtd«‚|d}t|«}t||«}||k7rtd«‚|€ ddlm}t |dd«}|dkrnyd |vrutjt|d «tj¬ «}tjtj«|z } | t|¬«kDrtd|›d «‚i} d|vrt!j"|d«} | S#ttf$rd}YŒ²wxYw)aP Validate Telegram Web App initData payload. Args: init_data: Raw initData string from Telegram Web App. bot_token: Telegram bot token used to derive the secret key. expiration_hours: Optional expiration window in hours. Defaults to 24 hours (Telegram's standard). In dev mode, can be extended via TELEGRAM_INIT_DATA_EXPIRATION_HOURS setting. Returns: Parsed user data dictionary when validation succeeds. Raises: TelegramDataValidationError: if validation fails for any reason. r*r zMissing hash in init_dataz#Invalid hash - data may be tamperedr)ÚsettingsÚ#TELEGRAM_INIT_DATA_EXPIRATION_HOURSér6)Útz)ÚhourszinitData expired (older than z hours)r;)r rr(r5Údjango.confrPÚgetattrÚImportErrorÚRuntimeErrorrÚ fromtimestamprArrCrBrr?Úloads)rr3Úexpiration_hoursr#Ú received_hashr2rKrPr6ÚageÚ user_datas rÚvalidate_telegram_init_datar_tsG€ñ*Ü)Ð*DÓEÐEä! )Ó,€Kà [Ñ Ü)Ð*EÓFÐFà Ñ'€MÜ/°Ó<ÐÜ.Ð/@À)ÓL€Oà˜-Ò'Ü)Ð*OÓPÐPðÐð "Ý,ä& xÐ1VÐXZÓ[Ðð ˜1ÒàØ ˜Ñ #Ü×*Ñ*Ü˜KÑ(Ó)Ü|‰|ô ˆ ôl‰lœ8Ÿ<™<Ó(¨9Ñ4ˆØ”Ð!1Ô2Ò2Ü-Ø/Ð0@Ð/AÀÐIóð ð€IØ ÑÜ—J‘J˜{¨6Ñ2Ó3ˆ àÐøô-œ\Ð*ò "à!Òð "úsÁD Ä DÄDcó4—|stjd«y||ddœ}|r||d<|r||d<d|›d}tj|«j d «} t jj||d ddi¬ «}t jj|d¬«5} | jdk7r*tjd| j« ddd«y ddd«y#1swYyxYw#t$r } tjd| «Yd} ~ yd} ~ wwxYw)zÉ Send a Telegram message using the Bot API via HTTP. This avoids introducing extra async dependencies in the webhook handler while still using the official Telegram Bot HTTP endpoint. z/Cannot send Telegram message: bot token missingFT)Úchat_idÚtextÚdisable_web_page_previewÚ parse_modeÚreply_markupzhttps://api.telegram.org/botz/sendMessagezutf-8ÚPOSTzContent-Typezapplication/json)ÚurlÚdataÚmethodÚheadersé )ÚtimeoutéÈz0Telegram sendMessage returned non-200 status: %sNz#Failed to send Telegram message: %s)ÚloggerÚwarningr?r@r-rÚrequestÚRequestÚurlopenÚstatusÚ Exception)r3rarbrerdÚpayloadrgrhrpÚresponseÚexcs rÚsend_telegram_messagerx¹s€ñÜ‰ÐHÔIØðØØ$(ñ€GñØ *ˆÑÙØ".ˆÑà(¨¨°<Ð @€CÜ:‰:gÓ×%Ñ% gÓ.€DðÜ—.‘.×(Ñ(ØØØØ#Ð%7Ð8ð )ó ˆô^‰^× #Ñ # G°RÐ #Ô 8¸HØ‰ #Ò%Ü—‘ØFÈÏÉôð÷9Ð 8Ø%÷9ð÷ 9ðûÜòÜ‰Ð<¸cÔBÜûðús=ÁAC.Â1C"ÃC.ÃC.Ã"C+Ã'C.Ã+C.Ã. DÃ7DÄD)rr=Úreturnúdict[str, str])r#zMapping[str, str]ryr=)r2r=r3r=ryr=)r;Údictr3r=r6ú int | Noner7ú str | Noner8r}r9zdict[str, str] | Noneryrz)rr=r3r=ryzdict[str, str | None])N)rr=r3r=r[r|ryr{)NÚHTML)r3r=rarArbr=rezdict[str, Any] | Nonerdr}ryÚbool)rÚ __future__rr+r/r?ÚloggingÚurllib.parserÚurllib.requestrrrÚtypingrrÚ getLoggerrrnÚ ValueErrorr rr(r5rHrNr_rxrrrÚr‡s-ðÙLå"ãÛÛÛÛÛß2Ñ2ßð ˆ× Ñ ˜8Ó $€ô: *ô:óAóóXð!ØØ"Ø*.ñ*à ð*ðð*ðð *ð ð*ðð *ð(ð*ðó*óZð.$(ðBØðBàðBð!ðBð ó BðR+/Ø#ð/Øð/à ð/ðð/ð(ð /ð ð/ð ô /r