Fringg 4c2cb63cf9 fix: accept stale Telegram initData to prevent MiniApp auth failures ...

Telegram Desktop/iOS cache initData with stale auth_date (tdesktop#28303).
Increase max_age_seconds from 24h to 30 days for all cabinet login and
account linking endpoints. HMAC signature still validates authenticity,
JWT tokens handle session expiration. Add structured logging for stale
initData acceptance monitoring.

2026-03-22 07:24:27 +03:00

..

__init__.py

feat: add POST /auth/telegram/oidc endpoint for OIDC popup flow

2026-03-07 02:32:40 +03:00

email_verification.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

jwt_handler.py

feat: guest purchase → cabinet account integration

2026-03-06 21:59:36 +03:00

merge_service.py

feat: account merge system — atomic user merge with full FK coverage

2026-03-05 05:23:39 +03:00

oauth_providers.py

feat: add server-complete OAuth linking endpoint for Mini App flow

2026-03-05 02:24:32 +03:00

password_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

telegram_auth.py

fix: accept stale Telegram initData to prevent MiniApp auth failures

2026-03-22 07:24:27 +03:00