Stage 11: account linking & merge (email + Telegram Login Widget) (#12)

2026-06-04 09:18:17 +00:00
parent 3a640a17a4
commit 01485d8fc6
68 changed files with 3331 additions and 369 deletions
@@ -30,8 +30,12 @@ Telegram-specific.

 ## gRPC API

-`pkg/proto/telegram/v1`, service `Telegram`: `ValidateInitData`, `Notify`,
-`SendToUser`, `SendToGameChannel`. Generated Go is committed under `pkg`.
+`pkg/proto/telegram/v1`, service `Telegram`: `ValidateInitData`,
+`ValidateLoginWidget`, `Notify`, `SendToUser`, `SendToGameChannel`. Generated Go is
+committed under `pkg`. `ValidateLoginWidget` (Stage 11) verifies Telegram **Login
+Widget** web sign-in data — HMAC under `SHA-256(bot_token)`, distinct from initData
+(`internal/loginwidget`) — for attaching a Telegram identity to an account from a
+browser.

 ## Deep-link scheme