Checking telegram authorization with ExpressJS

index.js

const app = require('express')();
const consola = require('consola');

const logger = consola.withTag('tg-check-auth')

app.listen(process.env.PORT)
app.get('/auth', auth)

function auth (req, res) {
  let status = 200 // OK code
  const { auth_date, hash, id } = req.body
  if (auth_date && hash && id) {
    const authTime = parseInt(auth_date, 10)
    const time = parseInt((Date.now() / 1000), 10)
    const key = crypto.createHash('sha256').update(process.env.BOT_TOKEN).digest()
    const data = Object.keys(req.body)
      .sort()
      .filter(key => key !== 'hash')
      .map(key => `${key}=${req.body[key]}`)
      .join('\n')
    const secret = crypto.createHmac('sha256', key).update(data).digest('hex')
    if (hash.localeCompare(secret) === 0 && (time - authTime) <= 86400) {
      logger.success('Successful authorization')
    } else {
      status = 401 // unauthorized code
    }
  } else {
    status = 401 // unauthorized code
  }
  res.sendStatus(status)
}