diff --git a/data/corefork.telegram.org/api/url-authorization.html b/data/corefork.telegram.org/api/url-authorization.html index 55dfed21b7..b604ee8525 100644 --- a/data/corefork.telegram.org/api/url-authorization.html +++ b/data/corefork.telegram.org/api/url-authorization.html @@ -61,13 +61,13 @@ The same must be done if the user opens the link while refusing the authorizatio

Link URL authorization

Telegram supports automatic authorization on certain websites upon opening an HTTP URL in-app, upon clicking a link in a message or clicking on a keyboardButtonUrl.

Automatic authorization

-

Clients should automatically authenticate users when opening official Telegram domains, listed in the url_auth_domains key of the client configuration object ».

-

Upon clicking a link, the URL must be modified by appending the autologin_token from the client configuration object » to the query string, like so:

-

Original URL: https://somedomain.telegram.org/path?query=string#hash=value
-Modified URL: https://somedomain.telegram.org/path?query=string&autologin_token=$autologin_token#hash=value

-

Make sure that the used autologin_token is no more than 10000 seconds old, if it is older it must be refetched as described in the client configuration section ».

+

Clients should automatically authenticate users when opening official Telegram websites, listed in the url_auth_domains key of the client configuration object ».

+

Upon clicking a link, the URL must be modified by appending the autologin_token from the client configuration object » to the query string, like so:

+

Original URL: https://somedomain.telegram.org/path?query=string#fragment=value
+Modified URL: https://somedomain.telegram.org/path?query=string&autologin_token=$autologin_token#fragment=value

+

Make sure that the used autologin_token is no more than 10000 seconds old, if it is older it must be refetched before use as described in the client configuration section ».

Manual authorization

-

Clients should show a confirmation prompt similar to the one used for bots, to authenticate users when opening certain Telegram domains, listed in the url_auth_domains key of the client configuration object ».

+

Clients should show a confirmation prompt similar to the one used for bots, to authenticate users when opening certain Telegram websites, listed in the url_auth_domains key of the client configuration object ».

messages.requestUrlAuth should be called, providing only the original url. The returned urlAuthResultRequest object will contain more details about the authorization request: