manawenuz/featherChat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v0.0.31: per-bot unique user IDs, remove raw fingerprint from bot API

Browse Source 
Privacy: from.id is now Hash(bot_token + user_fp) → different bots see
different numeric IDs for the same user. Prevents cross-bot user correlation.

Removed id_str (raw hex fingerprint) from all bot API responses.
Updated LLM_BOT_DEV.md and LLM_HELP.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Siavash Sameni
2026-03-29 13:49:10 +04:00
parent 6fee73fc4d
commit 3e583bb04b
8 changed files with 59 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

65
warzone/crates/warzone-server/src/routes/bot.rs
View File

@@ -171,9 +171,9 @@ pub async fn try_bot_webhook(state: &AppState, to_fp: &str, message: &[u8]) -> b
let update = if let Ok(wire) =
bincode::deserialize::<warzone_protocol::message::WireMessage>(message)
{
wire_message_to_update(&wire, message)
wire_message_to_update(&wire, message, &token)
} else if let Ok(bot_msg) = serde_json::from_slice::<serde_json::Value>(message) {
bot_json_to_update(&bot_msg)
bot_json_to_update(&bot_msg, &token)
} else {
None
};
@@ -367,8 +367,7 @@ async fn get_me(
Json(serde_json::json!({
"ok": true,
"result": {
"id": crate::routes::resolve::fp_to_numeric_id(fp),
"id_str": fp,
"id": crate::routes::resolve::fp_to_numeric_id_for_bot(fp, &token),
"is_bot": true,
"first_name": info["name"],
"username": info["name"],
@@ -423,7 +422,7 @@ async fn get_updates(
let timeout = params.timeout.unwrap_or(0);
// Step 1: Migrate raw queue entries into the persistent bot_queue.
migrate_raw_queue(&state, bot_fp);
migrate_raw_queue(&state, bot_fp, &token);
// Step 2: If offset is provided, delete all acknowledged updates (update_id < offset).
if let Some(offset) = params.offset {
@@ -462,7 +461,7 @@ async fn get_updates(
loop {
tokio::time::sleep(std::time::Duration::from_secs(1)).await;
// Check for newly arrived raw messages.
migrate_raw_queue(&state, bot_fp);
migrate_raw_queue(&state, bot_fp, &token);
let polled = collect_updates(&state, bot_fp, limit);
if !polled.is_empty() {
return Json(serde_json::json!({
@@ -486,7 +485,7 @@ async fn get_updates(
///
/// Each raw entry is converted into a Telegram-style Update JSON object, assigned
/// a persistent update_id, and stored. The original raw key is deleted.
fn migrate_raw_queue(state: &AppState, bot_fp: &str) {
fn migrate_raw_queue(state: &AppState, bot_fp: &str, bot_token: &str) {
let prefix = format!("queue:{}", bot_fp);
let mut keys_to_delete = Vec::new();
@@ -499,9 +498,9 @@ fn migrate_raw_queue(state: &AppState, bot_fp: &str) {
let update = if let Ok(wire) =
bincode::deserialize::<warzone_protocol::message::WireMessage>(&value)
{
wire_message_to_update(&wire, &value)
wire_message_to_update(&wire, &value, bot_token)
} else if let Ok(bot_msg) = serde_json::from_slice::<serde_json::Value>(&value) {
bot_json_to_update(&bot_msg)
bot_json_to_update(&bot_msg, bot_token)
} else {
None
};
@@ -521,6 +520,7 @@ fn migrate_raw_queue(state: &AppState, bot_fp: &str) {
fn wire_message_to_update(
wire: &warzone_protocol::message::WireMessage,
raw_bytes: &[u8],
bot_token: &str,
) -> Option<serde_json::Value> {
match wire {
warzone_protocol::message::WireMessage::Message {
@@ -529,20 +529,18 @@ fn wire_message_to_update(
..
} => {
let raw_b64 = base64::engine::general_purpose::STANDARD.encode(raw_bytes);
let numeric = crate::routes::resolve::fp_to_numeric_id(sender_fingerprint);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(sender_fingerprint, bot_token);
Some(serde_json::json!({
"message": {
"message_id": id,
"from": {
"id": numeric,
"id_str": sender_fingerprint,
"is_bot": false,
"is_bot": false,
"first_name": &sender_fingerprint[..sender_fingerprint.len().min(12)],
},
"chat": {
"id": numeric,
"id_str": sender_fingerprint,
"type": "private",
"type": "private",
},
"date": chrono::Utc::now().timestamp(),
"text": null,
@@ -556,20 +554,18 @@ fn wire_message_to_update(
..
} => {
let raw_b64 = base64::engine::general_purpose::STANDARD.encode(raw_bytes);
let numeric = crate::routes::resolve::fp_to_numeric_id(sender_fingerprint);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(sender_fingerprint, bot_token);
Some(serde_json::json!({
"message": {
"message_id": id,
"from": {
"id": numeric,
"id_str": sender_fingerprint,
"is_bot": false,
"is_bot": false,
"first_name": &sender_fingerprint[..sender_fingerprint.len().min(12)],
},
"chat": {
"id": numeric,
"id_str": sender_fingerprint,
"type": "private",
"type": "private",
},
"date": chrono::Utc::now().timestamp(),
"text": null,
@@ -584,20 +580,18 @@ fn wire_message_to_update(
payload,
..
} => {
let numeric = crate::routes::resolve::fp_to_numeric_id(sender_fingerprint);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(sender_fingerprint, bot_token);
Some(serde_json::json!({
"message": {
"message_id": id,
"from": {
"id": numeric,
"id_str": sender_fingerprint,
"is_bot": false,
"is_bot": false,
"first_name": &sender_fingerprint[..sender_fingerprint.len().min(12)],
},
"chat": {
"id": numeric,
"id_str": sender_fingerprint,
"type": "private",
"type": "private",
},
"date": chrono::Utc::now().timestamp(),
"text": format!("/call_{:?}", signal_type),
@@ -615,20 +609,18 @@ fn wire_message_to_update(
file_size,
..
} => {
let numeric = crate::routes::resolve::fp_to_numeric_id(sender_fingerprint);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(sender_fingerprint, bot_token);
Some(serde_json::json!({
"message": {
"message_id": id,
"from": {
"id": numeric,
"id_str": sender_fingerprint,
"is_bot": false,
"is_bot": false,
"first_name": &sender_fingerprint[..sender_fingerprint.len().min(12)],
},
"chat": {
"id": numeric,
"id_str": sender_fingerprint,
"type": "private",
"type": "private",
},
"date": chrono::Utc::now().timestamp(),
"document": {
@@ -645,24 +637,22 @@ fn wire_message_to_update(
}
/// Convert a plaintext bot JSON message into a Telegram-style update (without update_id).
fn bot_json_to_update(bot_msg: &serde_json::Value) -> Option<serde_json::Value> {
fn bot_json_to_update(bot_msg: &serde_json::Value, bot_token: &str) -> Option<serde_json::Value> {
let msg_type = bot_msg.get("type").and_then(|v| v.as_str())?;
match msg_type {
"bot_message" => {
let from_fp = bot_msg.get("from").and_then(|v| v.as_str()).unwrap_or("");
let numeric = crate::routes::resolve::fp_to_numeric_id(from_fp);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(from_fp, bot_token);
Some(serde_json::json!({
"message": {
"message_id": bot_msg.get("id").and_then(|v| v.as_str()).unwrap_or(""),
"from": {
"id": numeric,
"id_str": from_fp,
"is_bot": true,
"is_bot": true,
},
"chat": {
"id": numeric,
"id_str": from_fp,
"type": "private",
"type": "private",
},
"date": bot_msg.get("timestamp").and_then(|v| v.as_i64()).unwrap_or(0),
"text": bot_msg.get("text").and_then(|v| v.as_str()).unwrap_or(""),
@@ -671,14 +661,13 @@ fn bot_json_to_update(bot_msg: &serde_json::Value) -> Option<serde_json::Value>
}
"callback_query" => {
let from_fp = bot_msg.get("from").and_then(|v| v.as_str()).unwrap_or("");
let numeric = crate::routes::resolve::fp_to_numeric_id(from_fp);
let numeric = crate::routes::resolve::fp_to_numeric_id_for_bot(from_fp, bot_token);
Some(serde_json::json!({
"callback_query": {
"id": bot_msg.get("id").and_then(|v| v.as_str()).unwrap_or(""),
"from": {
"id": numeric,
"id_str": from_fp,
"is_bot": false,
"is_bot": false,
},
"data": bot_msg.get("data").and_then(|v| v.as_str()).unwrap_or(""),
"message": bot_msg.get("message"),

17
warzone/crates/warzone-server/src/routes/resolve.rs
View File

@@ -7,7 +7,22 @@ use axum::{
use crate::errors::AppResult;
use crate::state::AppState;
/// Convert a fingerprint hex string to a stable i64 ID (for Telegram compatibility).
/// Convert a fingerprint to a per-bot unique numeric ID.
/// Hash(bot_token + user_fp) → i64. Different bots see different IDs for the same user.
/// This prevents cross-bot user correlation (same privacy model as Telegram).
pub fn fp_to_numeric_id_for_bot(fp: &str, bot_token: &str) -> i64 {
use sha2::{Sha256, Digest};
let mut hasher = Sha256::new();
hasher.update(bot_token.as_bytes());
hasher.update(b":");
hasher.update(fp.as_bytes());
let hash = hasher.finalize();
let mut arr = [0u8; 8];
arr.copy_from_slice(&hash[..8]);
(i64::from_be_bytes(arr) & 0x7FFFFFFFFFFFFFFF) // ensure positive
}
/// Convert a fingerprint hex string to a stable i64 ID (non-bot contexts).
/// Uses first 8 bytes of the fingerprint as a positive i64.
pub fn fp_to_numeric_id(fp: &str) -> i64 {
let clean: String = fp.chars().filter(|c| c.is_ascii_hexdigit()).take(16).collect();

4
warzone/crates/warzone-server/src/routes/web.rs
View File

@@ -50,7 +50,7 @@ async fn pwa_manifest() -> impl IntoResponse {
async fn service_worker() -> impl IntoResponse {
([(header::CONTENT_TYPE, "application/javascript")], r##"
const CACHE = 'wz-v12';
const CACHE = 'wz-v13';
const SHELL = ['/', '/wasm/warzone_wasm.js', '/wasm/warzone_wasm_bg.wasm', '/icon.svg', '/manifest.json'];
self.addEventListener('install', e => {
@@ -251,7 +251,7 @@ let pollTimer = null;
let ws = null; // WebSocket connection
let wasmReady = false;
const VERSION = '0.0.30';
const VERSION = '0.0.31';
let DEBUG = true; // toggle with /debug command
// ── Receipt tracking ──