feat: add telegram mini app dashboard

tests/GmRelay.Bot.Tests/Infrastructure/Telegram/TelegramMiniAppEntryPointTests.cs

@@ -0,0 +1,50 @@
+namespace GmRelay.Bot.Tests.Infrastructure.Telegram;
+
+public sealed class TelegramMiniAppEntryPointTests
+{
+    [Fact]
+    public async Task UpdateRouter_ShouldExposeMiniAppButtonInStartCommand()
+    {
+        var updateRouter = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Bot/Infrastructure/Telegram/UpdateRouter.cs"));
+
+        Assert.Contains("Telegram:MiniAppUrl", updateRouter, StringComparison.Ordinal);
+        Assert.Contains("InlineKeyboardButton.WithWebApp", updateRouter, StringComparison.Ordinal);
+        Assert.Contains("Открыть dashboard", updateRouter, StringComparison.Ordinal);
+    }
+
+    [Fact]
+    public async Task BotStartup_ShouldRegisterMiniAppMenuButtonService()
+    {
+        var program = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Bot/Program.cs"));
+
+        Assert.Contains("TelegramMiniAppMenuButtonService", program, StringComparison.Ordinal);
+        Assert.Contains("AddHostedService<TelegramMiniAppMenuButtonService>", program, StringComparison.Ordinal);
+    }
+
+    [Fact]
+    public async Task MiniAppMenuButtonService_ShouldSetTelegramWebAppMenuButtonWhenConfigured()
+    {
+        var service = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Bot/Infrastructure/Telegram/TelegramMiniAppMenuButtonService.cs"));
+
+        Assert.Contains("SetChatMenuButton", service, StringComparison.Ordinal);
+        Assert.Contains("MenuButtonWebApp", service, StringComparison.Ordinal);
+        Assert.Contains("Telegram:MiniAppUrl", service, StringComparison.Ordinal);
+    }
+
+    private static string FindRepositoryFile(string relativePath)
+    {
+        var directory = new DirectoryInfo(AppContext.BaseDirectory);
+        while (directory is not null)
+        {
+            var candidate = Path.Combine(directory.FullName, relativePath);
+            if (File.Exists(candidate))
+            {
+                return candidate;
+            }
+
+            directory = directory.Parent;
+        }
+
+        throw new FileNotFoundException($"Could not locate repository file '{relativePath}'.");
+    }
+}

tests/GmRelay.Bot.Tests/Web/MiniAppDashboardTests.cs

@@ -0,0 +1,60 @@
+namespace GmRelay.Bot.Tests.Web;
+
+public sealed class MiniAppDashboardTests
+{
+    [Fact]
+    public async Task MiniAppPage_ShouldExposeTelegramWebAppDashboardEntryPoint()
+    {
+        var miniAppPage = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/Components/Pages/MiniApp.razor"));
+
+        Assert.Contains("@page \"/miniapp\"", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("authenticateTelegramMiniApp", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("/auth/telegram-webapp", miniAppPage, StringComparison.Ordinal);
+    }
+
+    [Fact]
+    public async Task AppShell_ShouldLoadTelegramWebAppScriptAndAuthenticator()
+    {
+        var appShell = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/Components/App.razor"));
+
+        Assert.Contains("telegram-web-app.js", appShell, StringComparison.Ordinal);
+        Assert.Contains("window.authenticateTelegramMiniApp", appShell, StringComparison.Ordinal);
+        Assert.Contains("Telegram.WebApp.initData", appShell, StringComparison.Ordinal);
+    }
+
+    [Fact]
+    public async Task Program_ShouldMapTelegramWebAppAuthEndpoint()
+    {
+        var program = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/Program.cs"));
+
+        Assert.Contains("MapPost(\"/auth/telegram-webapp\"", program, StringComparison.Ordinal);
+        Assert.Contains("VerifyWebAppInitData", program, StringComparison.Ordinal);
+    }
+
+    [Fact]
+    public async Task Styles_ShouldIncludeMiniAppMobileDashboardRules()
+    {
+        var css = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/wwwroot/app.css"));
+
+        Assert.Contains("mini-app-page", css, StringComparison.Ordinal);
+        Assert.Contains("mini-app-auth-card", css, StringComparison.Ordinal);
+        Assert.Contains("@media (max-width: 768px)", css, StringComparison.Ordinal);
+    }
+
+    private static string FindRepositoryFile(string relativePath)
+    {
+        var directory = new DirectoryInfo(AppContext.BaseDirectory);
+        while (directory is not null)
+        {
+            var candidate = Path.Combine(directory.FullName, relativePath);
+            if (File.Exists(candidate))
+            {
+                return candidate;
+            }
+
+            directory = directory.Parent;
+        }
+
+        throw new FileNotFoundException($"Could not locate repository file '{relativePath}'.");
+    }
+}

tests/GmRelay.Bot.Tests/Web/TelegramAuthServiceTests.cs

@@ -77,6 +77,64 @@ public sealed class TelegramAuthServiceTests
         Assert.False(verified);
     }
 
+    [Fact]
+    public void VerifyWebAppInitData_ShouldAcceptValidTelegramWebAppPayload()
+    {
+        const string botToken = "test-bot-token";
+        var initData = CreateWebAppInitData(
+            botToken,
+            new Dictionary<string, string>
+            {
+                ["auth_date"] = DateTimeOffset.UtcNow.ToUnixTimeSeconds().ToString(),
+                ["query_id"] = "AAHdF6IQAAAAAN0XohDhrOrc",
+                ["user"] = """{"id":424242,"first_name":"Ada","last_name":"Lovelace","username":"ada"}"""
+            });
+        var service = new TelegramAuthService(CreateConfiguration(botToken));
+
+        var verified = service.VerifyWebAppInitData(initData, out var telegramId, out var name);
+
+        Assert.True(verified);
+        Assert.Equal(424242L, telegramId);
+        Assert.Equal("Ada Lovelace", name);
+    }
+
+    [Fact]
+    public void VerifyWebAppInitData_ShouldRejectTamperedHash()
+    {
+        const string botToken = "test-bot-token";
+        var initData = CreateWebAppInitData(
+            botToken,
+            new Dictionary<string, string>
+            {
+                ["auth_date"] = DateTimeOffset.UtcNow.ToUnixTimeSeconds().ToString(),
+                ["user"] = """{"id":424242,"first_name":"Ada"}"""
+            });
+        var tamperedInitData = initData.Replace("hash=", "hash=00", StringComparison.Ordinal);
+        var service = new TelegramAuthService(CreateConfiguration(botToken));
+
+        var verified = service.VerifyWebAppInitData(tamperedInitData, out _, out _);
+
+        Assert.False(verified);
+    }
+
+    [Fact]
+    public void VerifyWebAppInitData_ShouldRejectExpiredPayload()
+    {
+        const string botToken = "test-bot-token";
+        var initData = CreateWebAppInitData(
+            botToken,
+            new Dictionary<string, string>
+            {
+                ["auth_date"] = DateTimeOffset.UtcNow.AddDays(-2).ToUnixTimeSeconds().ToString(),
+                ["user"] = """{"id":424242,"first_name":"Ada"}"""
+            });
+        var service = new TelegramAuthService(CreateConfiguration(botToken));
+
+        var verified = service.VerifyWebAppInitData(initData, out _, out _);
+
+        Assert.False(verified);
+    }
+
     private static IConfiguration CreateConfiguration(string botToken) =>
         new ConfigurationBuilder()
             .AddInMemoryCollection(new Dictionary<string, string?>
@@ -106,4 +164,27 @@ public sealed class TelegramAuthServiceTests
         var hashBytes = HMACSHA256.HashData(secretKey, Encoding.UTF8.GetBytes(dataCheckString));
         return Convert.ToHexString(hashBytes).ToLowerInvariant();
     }
+
+    private static string CreateWebAppInitData(string botToken, IReadOnlyDictionary<string, string> values)
+    {
+        var hash = ComputeTelegramWebAppHash(botToken, values);
+        var encodedPairs = values
+            .OrderBy(pair => pair.Key, StringComparer.Ordinal)
+            .Select(pair => $"{Uri.EscapeDataString(pair.Key)}={Uri.EscapeDataString(pair.Value)}")
+            .Append($"hash={hash}");
+
+        return string.Join("&", encodedPairs);
+    }
+
+    private static string ComputeTelegramWebAppHash(string botToken, IReadOnlyDictionary<string, string> values)
+    {
+        var dataCheckString = string.Join(
+            "\n",
+            values
+                .OrderBy(pair => pair.Key, StringComparer.Ordinal)
+                .Select(pair => $"{pair.Key}={pair.Value}"));
+        var secretKey = HMACSHA256.HashData(Encoding.UTF8.GetBytes("WebAppData"), Encoding.UTF8.GetBytes(botToken));
+        var hashBytes = HMACSHA256.HashData(secretKey, Encoding.UTF8.GetBytes(dataCheckString));
+        return Convert.ToHexString(hashBytes).ToLowerInvariant();
+    }
 }