fix: added length check for the /start argument

meetacy · Nov 25, 2023 · 3a7d9a5 · 3a7d9a5
1 parent e1299ef
commit 3a7d9a5
Showing 1 changed file with 20 additions and 11 deletions.
diff --git a/src/main/kotlin/app/meetacy/telegram/bot/Main.kt b/src/main/kotlin/app/meetacy/telegram/bot/Main.kt
@@ -26,6 +26,7 @@ suspend fun main(): Unit = coroutineScope {
 
     val token = System.getenv("BOT_TOKEN")
     val secretBotKey = System.getenv("SECRET_KEY").let(::SecretTelegramBotKey)
+    val secretBotKeySize = 256
 
     val bot = telegramBot(token)
     val meetacy = MeetacyApi.production()
@@ -53,23 +54,31 @@ suspend fun main(): Unit = coroutineScope {
             }
 
             val commandParts = content.text.split(" ")
+
+            suspend fun sendStartMessage() = bot.sendMessage(
+                chat = message.chat,
+                text = "Welcome to Meetacy Service Bot that helps with authorization by Telegram. " +
+                        "For now there is no other functions. To follow up with our news, subscribe to our channel ⬇\uFE0F⬇\uFE0F⬇\uFE0F",
+                replyMarkup = inlineKeyboard {
+                    +URLInlineKeyboardButton(
+                        text = "@meetacy",
+                        url = "https://t.me/meetacy"
+                    )
+                }
+            )
+
             if (commandParts.size != 2) {
-                bot.sendMessage(
-                    chat = message.chat,
-                    text = "Welcome to Meetacy Service Bot that helps with authorization by Telegram. " +
-                            "For now there is no other functions. To follow up with our news, subscribe to our channel ⬇\uFE0F⬇\uFE0F⬇\uFE0F",
-                    replyMarkup = inlineKeyboard {
-                        +URLInlineKeyboardButton(
-                            text = "@meetacy",
-                            url = "https://t.me/meetacy"
-                        )
-                    }
-                )
+                sendStartMessage()
                 return@onEach
             }
 
             val (_, temporalHash) = commandParts
 
+            if (temporalHash.length != secretBotKeySize) {
+                sendStartMessage()
+                return@onEach
+            }
+
             scope.launch {
                 meetacy.auth.telegram.finish(
                     temporalHash = TemporalTelegramHash(temporalHash),