Skip to content

fix(telegram): preserve access auth params in media links #21503

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TonyRL merged 3 commits into from
Apr 9, 2026
Merged

fix(telegram): preserve access auth params in media links #21503

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1cf4184
fix(telegram): preserve access auth params in media links
Mar 24, 2026
e10e49d
test(telegram): sort imports in channel regression test
Mar 25, 2026
ead6ac3
chore: remove channel.test.ts
Apr 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 23 additions & 3 deletions lib/routes/telegram/tglib/channel.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,26 @@ export async function getPollResults(client, message, m: Api.MessageMediaPoll) {
return txt;
}

export function withSearchParams(src: string, params: Record<string, string>) {
const url = new URL(src);
for (const [key, value] of Object.entries(params)) {
url.searchParams.set(key, value);
}
return url.toString();
}

export function getMessageMediaUrl(requestUrl: string, username: string, messageId: number) {
const request = new URL(requestUrl);
const url = new URL(`/telegram/media/${username}/${messageId}`, request.origin);
for (const key of ['key', 'code']) {
const value = request.searchParams.get(key);
if (value) {
url.searchParams.set(key, value);
}
}
return url.toString();
}

export function getMediaLink(src: string, m: Api.TypeMessageMedia) {
const doc = getDocument(m);
const mime = doc ? doc.mimeType : '';
Expand All @@ -44,7 +64,7 @@ export function getMediaLink(src: string, m: Api.TypeMessageMedia) {
}
if (doc && mime.startsWith('video/')) {
const vid = (doc.attributes.find((t) => t instanceof Api.DocumentAttributeVideo) ?? { w: 1080, h: 720 }) as { w: number; h: number };
return `<video controls preload="metadata" poster="${src}?thumb" width="${vid.w / 2}" height="${vid.h / 2}"><source src="${src}" type="${mime}"></video>`;
return `<video controls preload="metadata" poster="${withSearchParams(src, { thumb: '' })}" width="${vid.w / 2}" height="${vid.h / 2}"><source src="${src}" type="${mime}"></video>`;
}
if (doc && mime.startsWith('audio/')) {
return `<div>${getAudioTitle(m)}</div><div><audio src="${src}"></audio></div>`;
Expand All @@ -56,7 +76,7 @@ export function getMediaLink(src: string, m: Api.TypeMessageMedia) {
linkText = ''; // remove filename, it's only an animated sticker
}
if ((doc.thumbs?.length ?? 0) > 0) {
linkText = `<div><img src="${src}?thumb" alt=""/></div><div>${linkText}</div>`;
linkText = `<div><img src="${withSearchParams(src, { thumb: '' })}" alt=""/></div><div>${linkText}</div>`;
}
return `<a href="${src}" target="_blank">${linkText}</a>`;
}
Expand Down Expand Up @@ -155,7 +175,7 @@ export default async function handler(ctx: Context) {
}
// messages that have no text are shown as if they're one post
// because in TG only 1 attachment per message is possible
const src = `${new URL(ctx.req.url).origin}/telegram/media/${username}/${message.id}`;
const src = getMessageMediaUrl(ctx.req.url, username, message.id);
attachments.push(getMediaLink(src, media));
}
if (message.replyMarkup instanceof Api.ReplyInlineMarkup) {
Expand Down
Loading