From 0a19b519e1a005aa4f092b141fd5e4e926e7101f Mon Sep 17 00:00:00 2001
From: Erfan Mola <hi@erfanxd.ir>
Date: Fri, 6 Oct 2023 10:12:26 +0330
Subject: [PATCH] Added AuthProvider

---
 src/index.js                   |  2 ++
 src/providers/AuthProvider.vue | 66 ++++++++++++++++++++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 src/providers/AuthProvider.vue

diff --git a/src/index.js b/src/index.js
index c05f094..283fd2b 100644
--- a/src/index.js
+++ b/src/index.js
@@ -1,5 +1,6 @@
 import AppearanceProvider from "./providers/AppearanceProvider.vue";
 import LocaleProvider from './providers/LocaleProvider.vue';
+import AuthProvider from './providers/AuthProvider.vue';
 import Switch from './components/Switch.vue';
 import List from './components/List.vue';
 import Checkbox from './components/Checkbox.vue';
@@ -8,6 +9,7 @@ import Section from './components/Section.vue';
 export { 
     AppearanceProvider,
     LocaleProvider,
+    AuthProvider,
     Switch,
     List,
     Checkbox,
diff --git a/src/providers/AuthProvider.vue b/src/providers/AuthProvider.vue
new file mode 100644
index 0000000..d5a982a
--- /dev/null
+++ b/src/providers/AuthProvider.vue
@@ -0,0 +1,66 @@
+<script setup>
+    import { ref, provide } from 'vue';
+    import WebApp from '@twa-dev/sdk';
+    import hmac from 'js-crypto-hmac';
+
+    const props = defineProps({
+        bot_token: {
+            type: String,
+            required: true,
+        }
+    });
+
+    const clientAuthorized = ref(null);
+
+    const ksort = (obj) => {
+        const sortedKeys = Object.keys(obj).sort();
+        const sortedObj = {};
+
+        sortedKeys.forEach(key => {
+            sortedObj[key] = obj[key];
+        });
+
+        return sortedObj;
+    };
+
+    const buffer2Hex = (buffer) => {
+        return [...new Uint8Array(buffer)]
+        .map(x => x.toString(16).padStart(2, '0'))
+        .join('');
+    }
+
+    let initDataUnsafe = {...WebApp.initDataUnsafe};
+    let initDataHash   = initDataUnsafe.hash;
+    let initDataString = '';
+
+    delete initDataUnsafe['hash'];
+    initDataUnsafe = ksort(initDataUnsafe);
+
+    initDataString = Object.entries(initDataUnsafe)
+    .map(([key, value]) => {
+        value = typeof value === 'object' ? JSON.stringify(value, null, 0) : value;
+        return `${key}=${value}`;
+    })
+    .join('\n');
+
+    hmac.compute(new TextEncoder().encode("WebAppData"), new TextEncoder().encode(props.bot_token), 'SHA-256').then((secret_key) => {
+
+        hmac.compute(secret_key, new TextEncoder().encode(initDataString), 'SHA-256').then((result) => {
+
+            clientAuthorized.value = buffer2Hex(result) === initDataHash;
+
+        });
+
+    });
+</script>
+
+<template>
+    <slot v-if="clientAuthorized" />
+    <slot v-else name="unauthorized">
+        Unauthorized Telegram Client
+    </slot>
+</template>
+
+<style lang="scss">
+
+</style>
\ No newline at end of file