search

botman / driver-telegram

BotMan Telegram Driver
MIT License
88 stars 75 forks source link

Does this verify webhooks are not spoofed? #123

Open bilogic opened 3 weeks ago

bilogic commented 3 weeks ago

I'm using curl to trigger my webhook, means there is no verification correct?

bilogic commented 3 weeks ago

We should set the secret_token mentioned here https://stackoverflow.com/a/72988277/3872647, and probably add a middleware/formrequest that the bot's controller will utilize