fix(telegram): allow inline button callbacks in groups when command was authorized (#27309)

This commit is contained in:
GodsBoy
2026-02-26 10:33:57 +02:00
committed by Ayaan Zaidi
parent dfa0b5b4fc
commit 58fef1d703
2 changed files with 47 additions and 1 deletions

View File

@@ -536,7 +536,9 @@ export const registerTelegramHandlers = ({
},
"callback-allowlist": {
enforceDirectAuthorization: true,
enforceGroupAllowlistAuthorization: true,
// Group auth is already enforced by shouldSkipGroupMessage (group policy + allowlist).
// An extra allowlist gate here would block users whose original command was authorized.
enforceGroupAllowlistAuthorization: false,
deniedDmReason: "callback unauthorized by inlineButtonsScope allowlist",
deniedGroupReason: "callback unauthorized by inlineButtonsScope allowlist",
},