Telegram Web Login JS Check Hash

check_hash.js

var CryptoJS = require("crypto-js");

var bot_token = "xxxxxxxxx:xxxxxxxxxxxxx";
// TODO: split the web response into the following fields
var hash = "xxx";
var data = {
  "username": "xxxx",
  "auth_date": "xxxx",
  "first_name": "xxxxxx",
  "id": "xxxxxxx",
  "photo_url": "https://t.me/i/userpic/320/xxxxxxx.jpg",
}

var genHash = CryptoJS.HmacSHA256(
  Object.keys(data).sort().map(k => `${k}=${data[k]}`).join("\n"),
  CryptoJS.SHA256(bot_token)
);
var genHashStr = CryptoJS.enc.Hex.stringify(hash);

console.log('====================================');
console.log(genHashStr);
console.log(genHashStr == hash);
console.log('====================================');