Skip to content

Commit 7aef222

Browse files
ivelinivelin
committed
fix(telegram): use group allowFrom for commands in groups
Previously, telegram native commands in groups were authorized using the DM allowFrom config instead of the group allowFrom config. This was a regression introduced in the security hardening that separated group auth from DM pairing-store (commit 64de4b6). This fix ensures that: - Commands in groups use group allowFrom (or groupAllowFrom) - Commands in DMs continue to use DM allowFrom - Users in DM allowFrom but NOT in group allowFrom are properly blocked in groups Fixes regression where slash commands stopped working in group topics after 2026.2.25+ security update. Added regression tests in bot-native-commands.group-auth.test.ts
1 parent f943c76 commit 7aef222

File tree

3 files changed

+705
-691
lines changed

3 files changed

+705
-691
lines changed

0 commit comments

Comments
 (0)