fpm-auth: Telegram OAuth Integration

[AbrarNitk]

Status: Pending

Follow: #585

Author: Wasif

Code PR: #661
Doc PR: Pending

Telegram Integration

We are integrating with a telegram in fpm, user will be able to log in via telegram on fpm sites. So we are going to provide some auth identities like telegram-group: telegram-family if a user is a part of this particular group, so only it will be able to access the page.

Like, In the below example we are creating an fpm.user-group called telegram-family with a single user identity telegram-group and using this group on /family/, so if logged in user is part telegram group telegram-family, so it can access this page.

-- fpm.user-group: telegram-family
telegram-group: telegram-family


-- fpm.sitemap:

# Home: /

## Family Discussion: /family/
readers: telegram-family

• APIs https://core.telegram.org/api

Auth APIs

• Need to figure out all the related APIs of Telegram.
• User Authorization API https://core.telegram.org/api/auth

Resources APIs

• Need to figure out what APIs we are going to use to fetch the user-related data.

FPM Identities for Telegram

Telegram Group telegram-group: <group-name>

Users can access pages/documents/APIs/apps if they are a part of a given group.

Telegram groups are multi-person chats. So they are suitable for groups of friends and small teams.
Telegram also supports groups of up to 200000 members.
In a group you can assign different permissions to group members.
For More:- https://telegram.org/tour/groups

Telegram Group Admin telegram-admin: <group-name>

The user can access pages/documents/APIs/apps if a user is an admin of a given group.

Telegram Channel telegram-channel: <channel-name>

Users can access documents if they are subscribed to a given channel.

Telegram API to check chat member

Channels are a tool for broadcasting your public messages to large audiences.
Telegram Channels can have an unlimited amount of subscribers, and only admins have the right to post.
For more: https://telegram.org/tour/channels

[amitu]

@AbrarNitk also add telegram-admin: telegram-family to mean someone is admin of the telegram-family group.

[wasif1024]

I have implemented Telegram Login functionality into fpm. I have used Telegram Login widget. By default Telegram uses iframe for adding Login button but in our case i have made customisations so that by clicking on our FTD button. It opens telegram login modal and users can login. In response it returns id,username,first_name,last_name,auth_date and hash.

[wasif1024]

For telegram we are using three telegram bot apis.

Telegram Group telegram-group:
I am using below given api
https://api.telegram.org/bot{telegram-bot-token}/getChatMember

Parameters

chat_id=@group_name
user_id=user_id

Telegram Group Admin telegram-admin:
I am using below given api
https://api.telegram.org/bot{telegram-bot-token}/getChatAdministrators

Parameters

chat_id=@group_name

Telegram Channel telegram-channel:

https://api.telegram.org/bot{telegram-bot-token}/getChatMember

Parameters

chat_id=@channel_name
user_id=user_id

Channel and Groups needs to be public if we want to get information about members.

[wasif1024]

One major point i want to mention is that when we will create a new bot we need to call /setdomain. By using @Botfather. Also we will use @Botfather to create new bot as well.

[wasif1024]

#667
I have just created this pull request containing following features.

1. Telegram authentication
2. Allowing administrator of telegram group to view a page.
3. Allowing member of telegram group to view a page.
4. Allowing member of telegram channel to view a page.
   One point i want to mention is that if we want to check subscriber of a channel using bot api then our bot must be admin of that channel else we cannot access channel subscribers.