Skip to content
This repository was archived by the owner on Feb 8, 2025. It is now read-only.

Commit d8d4e11

Browse files
committed
update
1 parent c44ebc9 commit d8d4e11

21 files changed

+289
-227
lines changed

README.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,20 @@
1-
# Telegram Mini App Auth Extractor
2-
**This is a Chrome Extension that helps to get authorization from any Mini App using Telegram Web version, even if the app does not work in Web version.**
1+
# Telegram Mini App Tools
2+
**This is a Chrome Extension that helps you to:**
33

4-
Link to it in Chrome Extensions Store: [here it is](https://chromewebstore.google.com/detail/telegram-mini-app-auth-ex/fjmkmlebpiodjmkpbpblflpgkmojigpm).
4+
+ Get the authorization token
5+
+ Open Mini Apps from Telegram Web
6+
+ Get the original URL of Mini Apps
7+
+ You can copy messages from restricted channels
58

6-
It was created for my another huge project users: [Auto Blum Farm Bot in Telegram](https://t.me/AutoBlumFarm). Actually, check my GitHub profile. I am planning to publish it's source one day, so maybe you read this when it's done.
9+
**It works with most Mini Apps using the Telegram Web version, even if the app does not normally function in the web version.**
710

8-
## How does it work?
911

10-
Telegram, in the case of Mini Apps, always sends authorization specifically for this application when it is opened. In this case, in the Web version, the Mini App opens using an `<iframe>`, inside of which a link is written in the `src` attribute. This link contains authorization - user's data and it's hash.
12+
## Screenshots
1113

12-
![Screenshot of Telegram Web and Chrome Developer Inspect tools opened to show the auth in iframe src link](explanation.png)
14+
![Screenshot](images/1.png)
1315

14-
The server checks the hash. In short, hashing occurs with a certain `key`, which is the `API token` of the telegram bot, respectively, the telegram knows it, and the developer knows it, but you don't know it, you only have the initial data and its hashed result. And, if successful, gives you its own authorization. Therefore, bot programs for Mini Apps (or why else would you need this extension for the most part) require this authorization. It's easier to get and better.
16+
## Credits
1517

16-
### Screenshots
18+
+ [ButterDevelop/TelegramMiniAppAuthExtractor](https://github.com/ButterDevelop/TelegramMiniAppAuthExtractor)
1719

18-
![Screenshot of GUI while auth not found yet](screenshot1.png)
19-
20-
![Screenshot of GUI with the auth found](screenshot2.png)
20+
+ [NabiKAZ](https://gist.github.com/NabiKAZ/10ab0c25c0703d5d3f5b9b4acd500c66)

TelegramMiniAppAuthExtractor/background.js

Lines changed: 0 additions & 21 deletions
This file was deleted.

TelegramMiniAppAuthExtractor/content.js

Lines changed: 0 additions & 36 deletions
This file was deleted.

TelegramMiniAppAuthExtractor/popup.html

Lines changed: 0 additions & 90 deletions
This file was deleted.

TelegramMiniAppAuthExtractor/popup.js

Lines changed: 0 additions & 62 deletions
This file was deleted.

TelegraphScreenshot1.png

-33.7 KB
Binary file not shown.

TelegraphScreenshot2.png

-38.9 KB
Binary file not shown.

TelegraphScreenshot3.png

-463 KB
Binary file not shown.

explanation.png

-886 KB
Binary file not shown.

images/1.png

29.2 KB
Loading

0 commit comments

Comments
 (0)