Closed torond closed 3 years ago
request_write_access
is unnecessary.
It seems like the result of an authentication request is stored at Telegram servers, thus if a user declines, they are asked again next time.
From https://core.telegram.org/constructor/keyboardButtonUrlAuth:
If the user refuses to provide authorization data, the original URL without information about the user will be opened.
Thus, any requests with a failed login authorization request will look the same as if the request was not sent from within Telegram. Related to and solved by #63
User should be redirected to a page like "Authentication failed" and should be asked again when trying to log in again.