Telegram Sign-In

OPENID CONNECT BACKEND

Sign in with Telegram.
No demo mocks.

The server verifies the Telegram ID token signature, persists the user in SQLite, and issues its own revocable session.

Checking connectivity…
✓

Telegram verification

JWKS, issuer, audience, signing algorithm, and expiration are verified on the server.

⌁

Persistent accounts

Subsequent sign-ins find the same user by the stable Telegram sub.

♢

Secure sessions

SQLite stores only the SHA-256 token hash; sessions expire and can be revoked.

API

A small, explicit contract

The Android app sends the ID token only after completing the native Telegram Login flow.

  1. POST /auth/telegramRegistration or sign-in
  2. GET /auth/sessionValidate the current session
  3. DELETE /auth/sessionSecure sign-out
  4. GET /api/health/readyReadiness for Docker and reverse proxies