Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit bot usage to only known telegram users #17

Open
cyxou opened this issue Jun 4, 2023 · 1 comment
Open

Limit bot usage to only known telegram users #17

cyxou opened this issue Jun 4, 2023 · 1 comment

Comments

@cyxou
Copy link
Owner

cyxou commented Jun 4, 2023

The choice of bot name determines its discoverability by any Telegram user, who may attempt to utilize it for their own purposes. This could potentially result in unauthorized access to your Firefly III instance data, which is highly undesirable. Although the bot is designed to require the user to provide the Firefly instance URL and Access Token to access or manipulate the data, a safer approach would be to restrict bot usage to specific Telegram user IDs through an environment variable. This way, when an unauthorized user attempts to initiate the bot, a message will be displayed indicating that the bot is intended for private use only, and they should refrain from using it.

@cyxou
Copy link
Owner Author

cyxou commented Jun 4, 2023

The issue relates to this comment: #16 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant