It doesn't work

[Lukasss93]

It doesn't work, the data is always invalid.

Steps to reproduce:

1. I'm using the "Direct Link Web Apps" mode
2. Frontend side:

   const response = await axios.post('myurl', {
       initData: window.Telegram.WebApp.initData,
   });

3. Backend side:

   $initData = $_POST['initData'] ?? '';
   $tgWebValid = new TgWebValid('my-bot-token', false);
   $bot = $tgWebValid->bot();
   $validation = $bot->validateInitData($initData);
   if (!$validation) {
       die('Invalid data');
   }

PS: by using the "direct link web app" mode, my initData is: user=%7B%22id%22%3A10081232%2C%22first_name%22%3A%22Luca%22%2C%22last_name%22%3A%22Patera%22%2C%22username%22%3A%22Lukasss93%22%2C%22language_code%22%3A%22it%22%2C%22is_premium%22%3Atrue%2C%22allows_write_to_pm%22%3Atrue%7D&chat_instance=[REDACTED]]&chat_type=private&start_param=foo&auth_date=1693264973&hash=[REDACTED] There is no "query_id" param, maybe it can be this? I hope not.

[CrazyTapok-bit]

Hello. Thank you for the detailed description of your problem. We will analyze the information provided and let you know the result as soon as possible

[CrazyTapok-bit]

@Lukasss93 So, I recreated all the steps you described. After opening our application via the link https://t.me/tgwebvalid_bot/menu and https://t.me/tgwebvalid_bot/menu?startapp=foo (as you did), data validation with the validateInitData method is successful.

Recommendations:

• make sure that instead of my-bot-token you set a valid token that is attached to your application (bot)
• make sure that the $initData variable really contains all the data and that it is passed to the validateInitData method

Regarding the query_id, don't worry, it is optional. Sometimes it can really be absent

Please let me know the outcome of the recommendations

[Lukasss93]

Ops, wrong token, sorry.

[CrazyTapok-bit]

Ops, wrong token, sorry.

It's good that everything worked out. If you need help, please contact