Wrong response from the webhook: 403 Forbidden

[NihilIF]

PHP version

8.1

irazasyed/telegram-bot-sdk version

3.13

Laravel version (if any)

10.44.0

Code To Reproduce the bug

StartCommand.php

namespace App\Console\Commands\Telegram;

use Telegram\Bot\Commands\Command;

class StartCommand extends Command { protected string $name = 'start'; protected string $description = 'Iniciar bot para presentarse';

public function handle()
{
    $this->replyWithMessage([
        'parse_mode' => 'HTML',
        'text' => mb_convert_encoding('Hola', 'UTF-8', mb_list_encodings())
    ]);
}

}

My controller function

public function activarWebhook(Request $request) { $update = Telegram::commandsHandler(true); return 'ok'; }

my route in api.php

Route::post('/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxl/webhook', [TelegramControlador::class, 'activarWebhook']);

Error stacktrace (if any)

Getting a 403 error from my server in CPanel when I try to run a command from my telegram bot. I don't understand what's happening, my route is in api.php so I shouldn't need the CSRF

[kg-bot]

Can you share code from your app/Http/Kernel.php file?

[NihilIF]

`<?php

namespace App\Http;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel { /**

• The application's global HTTP middleware stack.
• These middleware are run during every request to your application.

• @var array<int, class-string|string> */ protected $middleware = [ // \App\Http\Middleware\TrustHosts::class, \App\Http\Middleware\TrustProxies::class, \Illuminate\Http\Middleware\HandleCors::class, \App\Http\Middleware\PreventRequestsDuringMaintenance::class, \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class, \App\Http\Middleware\TrimStrings::class, \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class, ];

  /**

• The application's route middleware groups.

• @var array<string, array<int, class-string|string>> */ protected $middlewareGroups = [ 'web' => [ \App\Http\Middleware\EncryptCookies::class, \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class, \Illuminate\Session\Middleware\StartSession::class, \Illuminate\View\Middleware\ShareErrorsFromSession::class, \App\Http\Middleware\VerifyCsrfToken::class, \Illuminate\Routing\Middleware\SubstituteBindings::class, ],

  'api' => [
      // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
      \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
      \Illuminate\Routing\Middleware\SubstituteBindings::class,
  ],

  ];

  /**

• The application's middleware aliases.
• Aliases may be used instead of class names to conveniently assign middleware to routes and groups.
• @var array<string, class-string|string> */ protected $middlewareAliases = [ 'auth' => \App\Http\Middleware\Authenticate::class, 'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class, 'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class, 'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class, 'can' => \Illuminate\Auth\Middleware\Authorize::class, 'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class, 'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class, 'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class, 'signed' => \App\Http\Middleware\ValidateSignature::class, 'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class, 'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class, ]; }`