pezkuwichain/pezkuwi-telegram-miniapp
1
0
Fork 0
mirror of https://github.com/pezkuwichain/pezkuwi-telegram-miniapp.git synced 2026-07-22 08:35:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): remove hardcoded bot token from webhook setup script

Browse Source 
Token was committed in plaintext since the initial commit in a public
repo and was used to deface the bot profile. Script now requires
BOT_TOKEN via environment variable instead.
This commit is contained in:
Satoshi Qazi Muhammed
2026-07-11 13:42:51 -07:00
parent fd6b2cc28e
commit 0dd4d3d62b
3 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/setup-telegram-webhook.sh
+7 -1
View File
@@ -2,8 +2,14 @@
# PezkuwiChain Telegram Bot Webhook Setup
# Run this script from a machine that can access Telegram API
# Usage: BOT_TOKEN="..." ./scripts/setup-telegram-webhook.sh
if [ -z "$BOT_TOKEN" ]; then
echo "Error: BOT_TOKEN environment variable is not set."
echo "Usage: BOT_TOKEN=\"<token>\" ./scripts/setup-telegram-webhook.sh"
exit 1
fi
BOT_TOKEN="8548408481:AAEsoyiVBllk_x0T3Jelj8N8VrUiuc9jXQw"
WEBHOOK_URL="https://vbhftvdayqfmcgmzdxfv.supabase.co/functions/v1/telegram-bot"
echo "Setting up Telegram webhook..."